last executing test programs: 18.80761441s ago: executing program 4: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x80000000001, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, r1, 0x0, 0x0, @val=@netkit={@prog_id}}, 0x40) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000011540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) 17.821144552s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x23, 0x5, 0x0) listen(r3, 0x0) 16.802274479s ago: executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in6=@remote, 0x0, 0x33}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(blowfish)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}]}, 0x184}}, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000240)='./file1\x00', 0x5, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYBLOB="c5f4d736bb767b568fc581ff8e99c27d82508d89e9ae2f3cfade00568ea9dc4554dfcba7939192db87f04e87274894451d39177e8f5f802da73188537ecb3fa8562c91db4555823cd9400b329888f25675b5d0456289c4abacc0064180e88dd59b7cf11156ef401d4e93e9bd3ed64cceacca7306494e8513dc3c8526c364bac4eae8c1f4742eba009e756f10178a7a375ac6688a5e68bd75e66bac279dd8b99aa27ed4faeb1cb998440ee5ba749c6ba78992c5d277481c5450f8b79f7365c3b530d547e07f1e8b12c9e07478ff45f0b4fba5769a21678282764df0d930379693", @ANYRESDEC, @ANYRES8=0x0, @ANYRES64, @ANYRESHEX], 0x1, 0x1a1, &(0x7f0000000000)="$eJzs0D9rFEEYx/HvMzP3J0KUjWIRwRwYXC9E70/UQhAOqwRuwVbw0OVy5oJ36mWvMEEhjQQkMa/BSku1sBJRsA4WgoWeCOkkWwQLsZCT3RsFX4PzYXef/T2wO89MO+pFOeDX/r0mNVKag7xHMMCUjHpKjepLm7/Zuj0qXLI5n17w1ObJaHXtZtjptFYKFwp4/zSA7wW8r/xtRc85qoiFGvJxXzdDuR4wrNFViwFenZktdINe8RGTZpwj19AM/U0WFD3x63Co1O/eKUWra6eXu+FSa6l1q1qdO18+Wy6fq5ZuLHda5QngoShjx84FjBXvk2nwYMccYFaQYlsNtMzEZBts7+hTJ2ZjVHGPIcIbPyb32bQLCk6Sv5psaJ7DwmN0wHSdMYUhXWgeuaxeSMV8MD8yivy61meatzuLG1eU/pl9UpO9vFR2yfgVwoWti3PJ0TDBWzYGTA/S4QZm9wtT8ipZZdOep1lPns9sOsZxyHI37PdXKll4J35ANbk9GE9/p9K5PHhtv7GFT39eHMdxHMdxHMdxnP/A7wAAAP//YzVgcw==") openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom1\x00', 0x802, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x8440, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mlock2(&(0x7f00004d4000/0x4000)=nil, 0x4000, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) shmget$private(0x0, 0x4000, 0x0, &(0x7f000022e000/0x4000)=nil) madvise(&(0x7f000012f000/0x2000)=nil, 0x2000, 0x9) open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000020000005c00000800"/28], 0x34b302) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000140)=ANY=[], 0x1, 0x68b, &(0x7f0000000380)="$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") socketpair$tipc(0x1e, 0x0, 0x0, 0x0) close(0xffffffffffffffff) recvmsg(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000080)=0x3f) creat(&(0x7f0000002140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$TCSETSW2(r2, 0x4b4a, 0x0) 16.334034101s ago: executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x8140aecc, &(0x7f0000000140)) 14.272613819s ago: executing program 4: r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000002140)={0x20}, 0x20) lstat(&(0x7f0000008800)='./file0\x00', 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000008c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004340)=ANY=[], 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000040)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) 13.833782056s ago: executing program 4: unshare(0x8000400) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)) 4.650371312s ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000004200)='t', 0x1) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x64000}], 0x1, 0x7c00, 0x0, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0x39000, 0x0) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) splice(r4, 0x0, r6, 0x0, 0xe92, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0xfffffe3e) 3.860258094s ago: executing program 1: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0x280, 0x280, 0x280, 0x0, 0x280, 0x348, 0x365, 0x350, 0x348, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045518, &(0x7f0000000000)) 3.764275109s ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000003c0), 0xfe, 0x50e, &(0x7f0000000f80)="$eJzs3V1rZGcdAPD/Oclks93UpOpFLbQWW8kW3ZmksW3woq0o3hWUer+GZBJCJpmQmbSbUCTFDyCIaMErr7wR/ACC9CPIwoJ7LyqK6K5eeKEeOTMnu9nxzCbBedkmvx+cM895/f+fmcyZ57zknAAurRcj4u2ImIiIVyJi9sS0NO8ddbt8vvv3PljNu3zKu39NIinG9a7zWrHYdPelVOvgcGul0ajvFcO19vZurXVweGNze2WjvlHfWVpafH35jeXXlhcGUs+8Xm9+448//sHPv/nmr7/8/u9u/vn69/L8v15ML6vHINzt9Cv5e/HAZETsDSPYGEwU9amMOxEAAM4kb+N/OiK+0Gn/z8ZEpzXX0dukmx59dgAAAMAgZG/NxL+SiAwAAAC4sN6KiJlI0mpxLcBMpGm12r2G97PxVNpottpfWm/u76zl0yLmopKubzbqC8U1tXNRSfLhxU754fCrPcNLEfFMRPxo9mpnuLrabKyN++AHAAAAXBLXevb//zHb3f8HAAAALpi5cScAAAAADF2//f9kxHkAAAAAw9Nv///KiPMAAAAAhuJb77yTd9nx86/X3jvY32q+d2Ot3tqqbu+vVlebe7vVjWZzo3PPvu3T1tdoNne/Ejv7t2rteqtdax0c3txu7u+0b256fiAAAACMyzOf//huEhFHX73a6XJTeW+izwLuFQAXRnqemf8wvDyA0ev3Mw9cfJPjTgAYn6NxJwCM2yO3+ihpFJy8eCc9OfNvhpgUAAAwUPOfKz//n+8CVMadHDBU5zr/D1wozv/D5XXO8/+3h5UHMHoVLQC49E571Effm3eUnf+fKpsxy05dFwAAMFQznX6SVotzgTORptVqxNOdf/WvJOubjfpCRHwqIn47W7mSDy92l/F4QAAAAAAAAAAAAAAAAAAAAAAAAAA4oyxLIgMAAAAutIj0T0nx/K/52Zdneo8PTCX/nI3ikV7v//Tdn9xaabf3FvPxf3swvv1RMf7VcRzBAAAAAHod76cf78cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwCDdv/fBatFNjTLuX74WEXOPxF/tTpmM6c7rdFQi4qm/JzF5YrkkIiYGEP/ow4h4tix+kqcVc0UWvfHTiLg6mvjPZ1lWGv/aAOLDZfZxvv15u+z7l8aLndfy7/9k0f2/+m//0gfbv4k+27+nzxjjuTu/rPWN/2HEc5Pl25/j+Emf+C+VrbDkTfnudw4P/2dkd+WR/SxiPsrjn4xVa2/v1loHhzc2t1c26hv1naWlxdeX31h+bXmhtr7ZqBf90jr+8Plf/adn1L+zrk79o0/8uVPq/3JeqJwYmfWGKYLduXXvM91ipWcVnfjXXyr//J99TPz8b+KLxe9APn3+uHzULZ/0wi9uv1CaWBF/rU/9T/v8r/dbaY9Xvv39359xVgBgBFoHh1srjUZ9b+iFj7IsG1UshfMXjlt3Qwsx/aTU9JNYuBIRows6iCNbAADAk+Zho3/cmQAAAAAAAAAAAAAAAAAAAMDl1TqIdNi3E+uNeTSeqgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPNZ/AwAA//8/Jdvf") pipe(&(0x7f0000000080)={0xffffffffffffffff}) socket(0x0, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x48, 0x0, 0x0, 0xffefffff}, {0x6}]}, 0x10) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xfce) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(0xffffffffffffffff, &(0x7f0000001100)="94", 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x10, 0x6, 0x6b0, 0x3f8, 0x3f8, 0x300, 0x0, 0x0, 0x608, 0x608, 0x608, 0x608, 0x608, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, @private1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @loopback, @mcast1]}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@broadcast}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'vxcan1\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x710) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) tee(r0, r4, 0x81, 0x0) close(r2) 3.580704478s ago: executing program 3: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x800406, &(0x7f0000000180)={[{@adaptive_mode}, {@flush_merge, 0x0}, {@six_active_logs}, {@extent_cache}, {@heap}, {@four_active_logs}, {@noacl}, {@usrjquota={'usrjquota', 0x3d, '[-S\xb8\x94\xbc\x10\xe2\xcc%\x05\xb6\x85\x96)\xce\xfa\xe4\x0f\x8e\xd2a\xe1\xc0\x8e\\\x95F\xe7\b\xa5\xab\xb2\x98=\xa9do\x87\xc5B7\xef\x1c\xe02'}}, {@extent_cache}, {@nouser_xattr}, {@fsync_mode_strict}, {@heap}, {@fsync_mode_posix}], [{@dont_measure}]}, 0x1, 0x5518, &(0x7f000000ac80)="$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") socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 3.355013502s ago: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000100000002"]) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000480)={0x1, 0x2}) 2.991228288s ago: executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) setuid(0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="3310", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.886260554s ago: executing program 1: syz_emit_ethernet(0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x38}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 2.490606606s ago: executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000340)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x24) 2.480298427s ago: executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000400000010000000050010000000000008000100", @ANYRES32=0x0, @ANYBLOB="05"], 0x6c}}, 0x0) 2.333844599s ago: executing program 1: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x5169, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_setup(0x4d0b, &(0x7f0000000280), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x4c}}, 0x0) 2.33287607s ago: executing program 0: syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000001b80)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) r1 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfd14) 1.898466087s ago: executing program 1: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/297], 0x1, 0x54f9, &(0x7f000000ab40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000080)=0x3f) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) clock_gettime(0x0, &(0x7f0000000280)) 1.699188078s ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000004200)='t', 0x1) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x64000}], 0x1, 0x7c00, 0x0, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x39000, 0x0) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) splice(r3, 0x0, r5, 0x0, 0xe92, 0x0) 1.121521476s ago: executing program 3: sched_setscheduler(0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x202, 0x0) write$P9_RREADLINK(r0, &(0x7f00000001c0)={0x10, 0x17, 0x1, {0x7, './file3'}}, 0x10) 911.242849ms ago: executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000100000002"]) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000480)={0x1, 0x2}) 891.476152ms ago: executing program 2: semop(0x0, &(0x7f00000000c0)=[{}, {0x0, 0x2ff}], 0x2) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) r0 = socket(0x18, 0x1, 0x0) close(r0) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xe, 0x0}, 0x0) r1 = socket(0x18, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) 777.15531ms ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) sigaltstack(&(0x7f00000001c0)={0x0, 0x0, 0xfffffffffffffe8a}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f00000004c0)={{}, {0x0, 0x989680}}, 0x0) 670.490036ms ago: executing program 2: sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x202, 0x0) write$P9_RREADLINK(r0, &(0x7f00000001c0)={0x10, 0x17, 0x1, {0x7, './file3'}}, 0x10) 563.434833ms ago: executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000400000010000000050010000000000008000100", @ANYRES32=0x0, @ANYBLOB="05000f00"], 0x6c}}, 0x0) 562.635613ms ago: executing program 3: munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x7, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x4}]}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x30]}}, &(0x7f0000001f80)=""/237, 0x33, 0xed, 0x1}, 0x20) 540.478926ms ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 405.967967ms ago: executing program 3: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x5169, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_setup(0x4d0b, &(0x7f0000000280), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x4c}}, 0x0) 378.293031ms ago: executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/144, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000480)=""/91, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) 0s ago: executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x73f5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xb, {[@local=@item_012={0x2, 0x2, 0x0, 'H4'}, @main=@item_012={0x2, 0x0, 0xb, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x0, "d74689e3"}]}}, 0x0}, 0x0) kernel console output (not intermixed with test programs): onfig 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.127595][ T1147] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 341.176984][ T1147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.208187][ T1147] usb 2-1: config 0 descriptor?? [ 341.691224][ T1147] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 341.735478][ T1147] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0002/input/input6 [ 341.861412][ T1147] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 341.975670][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 342.646201][ T3615] usb 2-1: USB disconnect, device number 6 [ 343.431755][ T6681] loop4: detected capacity change from 0 to 40427 [ 343.469939][ T6681] F2FS-fs (loop4): Found nat_bits in checkpoint [ 343.622016][ T6681] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 343.737893][ T5257] syz-executor.4: attempt to access beyond end of device [ 343.737893][ T5257] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 345.838389][ T6727] loop0: detected capacity change from 0 to 1764 [ 345.918391][ T6709] loop1: detected capacity change from 0 to 40427 [ 345.930170][ T5439] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 345.956064][ T6711] loop2: detected capacity change from 0 to 32768 [ 346.039482][ T6709] F2FS-fs (loop1): Found nat_bits in checkpoint [ 346.087222][ T6711] XFS (loop2): Mounting V5 Filesystem [ 346.180532][ T6709] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 346.221350][ T6711] XFS (loop2): Ending clean mount [ 346.251631][ T6711] XFS (loop2): Quotacheck needed: Please wait. [ 346.295729][ T6711] XFS (loop2): Quotacheck: Done. [ 346.369151][ T5538] syz-executor.1: attempt to access beyond end of device [ 346.369151][ T5538] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 346.439933][ T6711] XFS (loop2): Metadata CRC error detected at xfs_refcountbt_read_verify+0x39/0xc0, xfs_refcountbt block 0x28 [ 346.463537][ T6711] XFS (loop2): Unmount and run xfs_repair [ 346.469441][ T6711] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 346.497996][ T6711] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff R............... [ 346.532137][ T6711] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 .......(........ [ 346.534942][ T6717] loop3: detected capacity change from 0 to 40427 [ 346.552739][ T6711] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 346.580402][ T6717] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 346.587005][ T6711] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00 .......]........ [ 346.617946][ T6717] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 346.637642][ T6711] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 346.657103][ T6711] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 346.680773][ T6717] F2FS-fs (loop3): Found nat_bits in checkpoint [ 346.686359][ T6711] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 346.733689][ T6711] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 346.750916][ T6711] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x28 len 8 error 74 [ 346.795270][ T6711] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1acd/0x2210 (fs/xfs/libxfs/xfs_defer.c:573). Shutting down filesystem. [ 346.810111][ T6717] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 346.831571][ T6711] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 346.873931][ T6717] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 346.887823][ T6717] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 346.897573][ T5467] XFS (loop2): Unmounting Filesystem [ 347.016638][ T6717] syz-executor.3: attempt to access beyond end of device [ 347.016638][ T6717] loop3: rw=34817, sector=77824, nr_sectors = 2048 limit=40427 [ 347.083768][ T6758] syz-executor.3: attempt to access beyond end of device [ 347.083768][ T6758] loop3: rw=2049, sector=80912, nr_sectors = 136 limit=40427 [ 347.134305][ T6756] syz-executor.3: attempt to access beyond end of device [ 347.134305][ T6756] loop3: rw=34817, sector=81048, nr_sectors = 872 limit=40427 [ 347.303127][ T6744] loop4: detected capacity change from 0 to 40427 [ 347.376496][ T6744] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 347.409935][ T6744] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 347.452399][ T6744] F2FS-fs (loop4): Found nat_bits in checkpoint [ 347.532381][ T6744] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 347.581367][ T6744] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 347.589615][ T6744] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 347.669659][ T6744] syz-executor.4: attempt to access beyond end of device [ 347.669659][ T6744] loop4: rw=34817, sector=77824, nr_sectors = 2088 limit=40427 [ 347.728266][ T6777] syz-executor.4: attempt to access beyond end of device [ 347.728266][ T6777] loop4: rw=34817, sector=80912, nr_sectors = 880 limit=40427 [ 347.778321][ T6744] syz-executor.4: attempt to access beyond end of device [ 347.778321][ T6744] loop4: rw=2049, sector=81792, nr_sectors = 128 limit=40427 [ 347.821835][ T6744] syz-executor.4: attempt to access beyond end of device [ 347.821835][ T6744] loop4: rw=2049, sector=49152, nr_sectors = 8 limit=40427 [ 351.463518][ T6798] loop3: detected capacity change from 0 to 40427 [ 352.032813][ T6798] F2FS-fs (loop3): Found nat_bits in checkpoint [ 352.294946][ T6807] loop2: detected capacity change from 0 to 40427 [ 352.332745][ T6807] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 352.369616][ T6807] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 352.431999][ T6798] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 352.439594][ T6807] F2FS-fs (loop2): Found nat_bits in checkpoint [ 352.554392][ T6807] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 352.590228][ T6810] loop4: detected capacity change from 0 to 40427 [ 352.617295][ T6810] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 352.670577][ T6807] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 352.677703][ T6807] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 352.678738][ T6810] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 352.776456][ T6810] F2FS-fs (loop4): Found nat_bits in checkpoint [ 352.788400][ T6807] syz-executor.2: attempt to access beyond end of device [ 352.788400][ T6807] loop2: rw=34817, sector=77824, nr_sectors = 2048 limit=40427 [ 352.848662][ T6845] syz-executor.2: attempt to access beyond end of device [ 352.848662][ T6845] loop2: rw=34817, sector=80912, nr_sectors = 880 limit=40427 [ 352.870738][ T6810] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 352.928963][ T6810] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 352.947076][ T6810] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 353.028520][ T6807] syz-executor.2: attempt to access beyond end of device [ 353.028520][ T6807] loop2: rw=2049, sector=81792, nr_sectors = 128 limit=40427 [ 353.043501][ T6807] syz-executor.2: attempt to access beyond end of device [ 353.043501][ T6807] loop2: rw=2049, sector=49152, nr_sectors = 8 limit=40427 [ 353.215324][ T6810] syz-executor.4: attempt to access beyond end of device [ 353.215324][ T6810] loop4: rw=34817, sector=77824, nr_sectors = 2048 limit=40427 [ 353.241610][ T6855] syz-executor.4: attempt to access beyond end of device [ 353.241610][ T6855] loop4: rw=34817, sector=80912, nr_sectors = 880 limit=40427 [ 356.680376][ T6889] loop2: detected capacity change from 0 to 1024 [ 356.705814][ T6889] EXT4-fs: Ignoring removed nomblk_io_submit option [ 356.742728][ T6887] loop1: detected capacity change from 0 to 4096 [ 356.785692][ T6889] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 356.799363][ T6889] EXT4-fs (loop2): Test dummy encryption mode enabled [ 356.810246][ T6887] NILFS (loop1): invalid segment: Checksum error in segment payload [ 356.816524][ T6889] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 356.827364][ T6887] NILFS (loop1): trying rollback from an earlier position [ 356.855299][ T6889] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 356.872377][ T6887] NILFS (loop1): recovery complete [ 356.894026][ T6893] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 357.231008][ T6889] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 357.419192][ T6880] loop0: detected capacity change from 0 to 40427 [ 357.506576][ T6889] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 357.564857][ T6880] F2FS-fs (loop0): Found nat_bits in checkpoint [ 357.637580][ T5467] EXT4-fs (loop2): unmounting filesystem. [ 357.743565][ T6880] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 359.573931][ T6929] loop3: detected capacity change from 0 to 256 [ 359.637107][ T6929] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 360.030228][ T3583] Bluetooth: hci0: command 0x0406 tx timeout [ 360.616859][ T6923] loop1: detected capacity change from 0 to 40427 [ 360.699597][ T6927] loop0: detected capacity change from 0 to 40427 [ 360.759673][ T6923] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 360.813289][ T6927] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 360.833640][ T6923] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 360.867950][ T6927] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 360.888154][ T6925] loop2: detected capacity change from 0 to 40427 [ 360.898279][ T6925] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 360.907196][ T6925] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 360.940922][ T6923] F2FS-fs (loop1): Found nat_bits in checkpoint [ 360.949185][ T6927] F2FS-fs (loop0): Found nat_bits in checkpoint [ 360.975627][ T6925] F2FS-fs (loop2): Found nat_bits in checkpoint [ 361.069119][ T6925] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 361.085932][ T6923] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 361.107451][ T6927] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 361.127143][ T6925] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 361.141005][ T6925] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 361.155945][ T6927] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 361.164454][ T6923] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 361.179920][ T6927] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 361.187476][ T6923] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 361.312134][ T6923] syz-executor.1: attempt to access beyond end of device [ 361.312134][ T6923] loop1: rw=34817, sector=77824, nr_sectors = 2072 limit=40427 [ 361.345385][ T6927] syz-executor.0: attempt to access beyond end of device [ 361.345385][ T6927] loop0: rw=34817, sector=77824, nr_sectors = 2096 limit=40427 [ 361.352328][ T6925] syz-executor.2: attempt to access beyond end of device [ 361.352328][ T6925] loop2: rw=34817, sector=77824, nr_sectors = 2088 limit=40427 [ 361.398915][ T6957] syz-executor.1: attempt to access beyond end of device [ 361.398915][ T6957] loop1: rw=34817, sector=80912, nr_sectors = 880 limit=40427 [ 361.426040][ T6960] syz-executor.2: attempt to access beyond end of device [ 361.426040][ T6960] loop2: rw=34817, sector=80912, nr_sectors = 880 limit=40427 [ 361.443573][ T6961] syz-executor.0: attempt to access beyond end of device [ 361.443573][ T6961] loop0: rw=34817, sector=80912, nr_sectors = 880 limit=40427 [ 361.465662][ T6959] loop4: detected capacity change from 0 to 1024 [ 361.481145][ T6959] EXT4-fs: Ignoring removed nomblk_io_submit option [ 361.506960][ T6962] syz-executor.2: attempt to access beyond end of device [ 361.506960][ T6962] loop2: rw=2049, sector=81792, nr_sectors = 128 limit=40427 [ 361.522173][ T6959] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 361.537577][ T6927] syz-executor.0: attempt to access beyond end of device [ 361.537577][ T6927] loop0: rw=2049, sector=81792, nr_sectors = 128 limit=40427 [ 361.540365][ T6962] syz-executor.2: attempt to access beyond end of device [ 361.540365][ T6962] loop2: rw=2049, sector=49152, nr_sectors = 8 limit=40427 [ 361.567893][ T6959] EXT4-fs (loop4): Test dummy encryption mode enabled [ 361.568432][ T6923] syz-executor.1: attempt to access beyond end of device [ 361.568432][ T6923] loop1: rw=2049, sector=81792, nr_sectors = 128 limit=40427 [ 361.597208][ T6959] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 361.627192][ T6959] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 361.796207][ T5257] EXT4-fs (loop4): unmounting filesystem. [ 362.097194][ T6949] loop3: detected capacity change from 0 to 32768 [ 362.132257][ T6949] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (6949) [ 363.016213][ T6972] loop4: detected capacity change from 0 to 256 [ 363.099997][ T6949] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 363.146735][ T6972] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 363.593719][ T6949] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 363.646630][ T6949] BTRFS info (device loop3): using free space tree [ 364.107248][ T6949] BTRFS error (device loop3): open_ctree failed [ 364.364116][ T7003] syz-executor.3[7003] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 364.364204][ T7003] syz-executor.3[7003] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 365.440553][ T7013] loop4: detected capacity change from 0 to 4096 [ 365.615026][ T6426] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 365.716297][ T26] audit: type=1800 audit(1717366725.630:15): pid=7013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=33 res=0 errno=0 [ 365.784615][ T7013] overlayfs: upper fs does not support tmpfile. [ 365.810783][ T7013] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 365.823164][ T7013] overlayfs: conflicting lowerdir path [ 366.589887][ T6426] usb 3-1: Using ep0 maxpacket: 32 [ 366.803684][ T7029] loop3: detected capacity change from 0 to 1024 [ 366.827890][ T7029] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 366.860047][ T6426] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 366.869308][ T6426] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.939222][ T6426] usb 3-1: config 0 descriptor?? [ 367.011132][ T7029] UDF-fs: error (device loop3): udf_read_inode: (ino 832) failed !bh [ 367.243267][ T7029] UDF-fs: error (device loop3): udf_fill_super: Error in udf_iget, block=48, partition=0 [ 367.360899][ T6426] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 367.490342][ T7015] loop0: detected capacity change from 0 to 40427 [ 367.643365][ T7015] F2FS-fs (loop0): Found nat_bits in checkpoint [ 367.733528][ T7043] loop1: detected capacity change from 0 to 256 [ 367.802569][ T7043] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 367.871899][ T7015] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 367.873294][ T7046] loop3: detected capacity change from 0 to 4096 [ 367.930155][ T33] usb 3-1: Failed to submit usb control message: -71 [ 367.936158][ T3612] usb 3-1: USB disconnect, device number 5 [ 367.937147][ T33] usb 3-1: unable to send the bmi data to the device: -71 [ 367.956485][ T7046] NILFS (loop3): invalid segment: Checksum error in segment payload [ 367.986856][ T33] usb 3-1: unable to get target info from device [ 368.006434][ T33] usb 3-1: could not get target info (-71) [ 368.014770][ T33] usb 3-1: could not probe fw (-71) [ 368.019753][ T7046] NILFS (loop3): trying rollback from an earlier position [ 368.237978][ T7046] NILFS (loop3): recovery complete [ 368.268667][ T7051] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 368.698604][ T7031] loop4: detected capacity change from 0 to 32768 [ 368.947028][ T7031] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (7031) [ 369.098757][ T7031] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 369.139941][ T7031] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 369.192696][ T7031] BTRFS info (device loop4): disabling free space tree [ 369.199611][ T7031] BTRFS info (device loop4): turning off barriers [ 369.259237][ T7031] BTRFS info (device loop4): use no compression [ 369.309927][ T7031] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 369.337724][ T7031] BTRFS info (device loop4): trying to use backup root at mount time [ 369.390110][ T7031] BTRFS error (device loop4): cannot disable free space tree [ 369.431637][ T7031] BTRFS error (device loop4): open_ctree failed [ 369.523148][ T7067] loop0: detected capacity change from 0 to 4096 [ 369.549267][ T7067] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 369.675740][ T7067] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 369.685910][ T7070] loop1: detected capacity change from 0 to 4096 [ 370.798268][ T7082] overlayfs: './file2' not a directory [ 370.855223][ T26] audit: type=1800 audit(1717366730.810:16): pid=7070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="overlay" dev="loop1" ino=34 res=0 errno=0 [ 370.886740][ T6232] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 371.807841][ T5172] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 372.348958][ T7077] loop2: detected capacity change from 0 to 32768 [ 372.702966][ T7077] XFS (loop2): Mounting V5 Filesystem [ 372.819353][ T7077] XFS (loop2): Ending clean mount [ 372.827769][ T5172] usb 5-1: Using ep0 maxpacket: 32 [ 372.880447][ T7077] XFS (loop2): Quotacheck needed: Please wait. [ 372.900211][ T6426] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 373.007713][ T7077] XFS (loop2): Quotacheck: Done. [ 373.087069][ T26] audit: type=1804 audit(1717366733.040:17): pid=7077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1569234740/syzkaller.2oxY3c/56/file0/bus" dev="loop2" ino=9292 res=1 errno=0 [ 373.122255][ T26] audit: type=1804 audit(1717366733.080:18): pid=7077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1569234740/syzkaller.2oxY3c/56/file0/bus" dev="loop2" ino=9292 res=1 errno=0 [ 373.280724][ T5172] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 373.309975][ T6426] usb 2-1: Using ep0 maxpacket: 32 [ 373.330624][ T5172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.430424][ T6426] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 373.442452][ T5172] usb 5-1: Product: syz [ 373.477481][ T6426] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.495746][ T5172] usb 5-1: Manufacturer: syz [ 373.531450][ T5172] usb 5-1: SerialNumber: syz [ 373.576951][ T6426] usb 2-1: config 0 descriptor?? [ 373.610288][ T5172] usb 5-1: config 0 descriptor?? [ 373.668410][ T5467] XFS (loop2): Unmounting Filesystem [ 373.733745][ T7088] loop0: detected capacity change from 0 to 32768 [ 373.835510][ T6426] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 373.887682][ T7088] XFS (loop0): Mounting V5 Filesystem [ 374.042094][ T7088] XFS (loop0): Ending clean mount [ 374.128144][ T3289] usb 2-1: USB disconnect, device number 7 [ 374.151225][ T3673] usb 2-1: Failed to submit usb control message: -71 [ 374.158272][ T3673] usb 2-1: unable to send the bmi data to the device: -71 [ 374.185449][ T3673] usb 2-1: unable to get target info from device [ 374.201970][ T3673] usb 2-1: could not get target info (-71) [ 374.211998][ T3673] usb 2-1: could not probe fw (-71) [ 376.159952][ T5172] rtl8150 5-1:0.0: couldn't reset the device [ 376.887983][ T5172] rtl8150: probe of 5-1:0.0 failed with error -5 [ 376.918473][ T5172] usb 5-1: USB disconnect, device number 3 [ 376.959512][ T7153] loop3: detected capacity change from 0 to 512 [ 377.075245][ T7153] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 377.108001][ T6232] XFS (loop0): Unmounting Filesystem [ 377.115823][ T7153] ext4 filesystem being mounted at /root/syzkaller-testdir3717437240/syzkaller.Gr5DxM/44/file0 supports timestamps until 2038 (0x7fffffff) [ 377.616167][ T5826] EXT4-fs (loop3): unmounting filesystem. [ 377.988439][ T7156] loop4: detected capacity change from 0 to 32768 [ 378.126067][ T5172] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 378.154099][ T7156] XFS (loop4): Mounting V5 Filesystem [ 379.886424][ T7156] XFS (loop4): Ending clean mount [ 379.906716][ T7156] XFS (loop4): Quotacheck needed: Please wait. [ 379.972841][ T5172] usb 1-1: Using ep0 maxpacket: 32 [ 379.998950][ T7156] XFS (loop4): Quotacheck: Done. [ 380.324893][ T5172] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 380.343825][ T5257] XFS (loop4): Unmounting Filesystem [ 380.356227][ T5172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.365809][ T5172] usb 1-1: Product: syz [ 380.374941][ T5172] usb 1-1: Manufacturer: syz [ 381.128690][ T3610] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 381.136269][ T5172] usb 1-1: SerialNumber: syz [ 381.142696][ T5172] usb 1-1: config 0 descriptor?? [ 381.177643][ T5172] usb 1-1: can't set config #0, error -71 [ 381.234836][ T5172] usb 1-1: USB disconnect, device number 5 [ 381.483652][ T7203] device vlan2 entered promiscuous mode [ 381.491334][ T7203] device dummy0 entered promiscuous mode [ 381.504588][ T7203] team0: Port device vlan2 added [ 381.510027][ T3610] usb 3-1: Using ep0 maxpacket: 32 [ 381.830001][ T3610] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 381.923625][ T3610] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.287154][ T3610] usb 3-1: config 0 descriptor?? [ 382.362997][ T7210] loop0: detected capacity change from 0 to 512 [ 382.389203][ T3610] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 382.504031][ T7210] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 382.520196][ T7210] ext4 filesystem being mounted at /root/syzkaller-testdir3911883039/syzkaller.2EffpG/24/file0 supports timestamps until 2038 (0x7fffffff) [ 382.750055][ T3764] usb 3-1: Failed to submit usb control message: -71 [ 382.752429][ T3610] usb 3-1: USB disconnect, device number 6 [ 382.757117][ T3764] usb 3-1: unable to send the bmi data to the device: -71 [ 382.778817][ T3764] usb 3-1: unable to get target info from device [ 382.786818][ T3764] usb 3-1: could not get target info (-71) [ 383.638344][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.654385][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.730147][ T3764] usb 3-1: could not probe fw (-71) [ 384.893749][ T6232] EXT4-fs (loop0): unmounting filesystem. [ 385.066734][ T3610] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 385.310608][ T3610] usb 4-1: Using ep0 maxpacket: 32 [ 385.316013][ T7222] loop4: detected capacity change from 0 to 40427 [ 385.358224][ T7222] F2FS-fs (loop4): invalid crc value [ 385.389709][ T7222] F2FS-fs (loop4): Found nat_bits in checkpoint [ 385.589970][ T3610] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 385.610744][ T3610] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.642931][ T3610] usb 4-1: Product: syz [ 385.668736][ T3610] usb 4-1: Manufacturer: syz [ 385.686115][ T3610] usb 4-1: SerialNumber: syz [ 385.700038][ T3583] Bluetooth: hci2: command 0x0406 tx timeout [ 385.718696][ T3610] usb 4-1: config 0 descriptor?? [ 385.931391][ T7245] loop0: detected capacity change from 0 to 40427 [ 385.963989][ T7243] loop2: detected capacity change from 0 to 32768 [ 386.019965][ T7243] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (7243) [ 386.043048][ T7245] F2FS-fs (loop0): Found nat_bits in checkpoint [ 386.071742][ T7243] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 386.091865][ T7243] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 386.161913][ T7243] BTRFS info (device loop2): turning off barriers [ 386.209028][ T7243] BTRFS info (device loop2): enabling auto defrag [ 386.279950][ T7243] BTRFS info (device loop2): force clearing of disk cache [ 386.288120][ T7243] BTRFS info (device loop2): use zlib compression, level 3 [ 386.302536][ T7243] BTRFS info (device loop2): using free space tree [ 386.551144][ T7243] BTRFS info (device loop2): rebuilding free space tree [ 387.085980][ T7245] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 387.152755][ T7243] BTRFS info (device loop2): checking UUID tree [ 387.198521][ T6232] bio_check_eod: 2 callbacks suppressed [ 387.198563][ T6232] syz-executor.0: attempt to access beyond end of device [ 387.198563][ T6232] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 387.224063][ T26] audit: type=1800 audit(1717366747.180:19): pid=7243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 387.401569][ T5467] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 387.423338][ T7286] loop4: detected capacity change from 0 to 1024 [ 387.504746][ T7286] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 387.555416][ T7286] UDF-fs: error (device loop4): udf_read_inode: (ino 832) failed !bh [ 387.610290][ T7286] UDF-fs: error (device loop4): udf_fill_super: Error in udf_iget, block=48, partition=0 [ 387.878208][ T7288] device vlan2 entered promiscuous mode [ 387.903082][ T7288] device dummy0 entered promiscuous mode [ 387.926846][ T7288] team0: Port device vlan2 added [ 388.301286][ T7297] loop2: detected capacity change from 0 to 256 [ 388.347445][ T7297] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 389.399943][ T3610] rtl8150 4-1:0.0: couldn't reset the device [ 389.406111][ T3610] rtl8150: probe of 4-1:0.0 failed with error -5 [ 389.452702][ T3610] usb 4-1: USB disconnect, device number 6 [ 389.836144][ T3610] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 390.079873][ T3610] usb 4-1: Using ep0 maxpacket: 32 [ 390.199966][ T3610] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 390.204883][ T7309] loop2: detected capacity change from 0 to 40427 [ 390.221375][ T3610] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.255764][ T7309] F2FS-fs (loop2): invalid crc value [ 390.266988][ T3610] usb 4-1: config 0 descriptor?? [ 390.330688][ T7309] F2FS-fs (loop2): Found nat_bits in checkpoint [ 390.372144][ T3610] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 390.373548][ T7311] loop0: detected capacity change from 0 to 40427 [ 390.487827][ T7317] loop4: detected capacity change from 0 to 40427 [ 390.503777][ T7317] F2FS-fs (loop4): invalid crc value [ 390.511965][ T7311] F2FS-fs (loop0): Found nat_bits in checkpoint [ 390.536130][ T7309] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 390.558814][ T7317] F2FS-fs (loop4): Found nat_bits in checkpoint [ 390.593201][ T7309] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 390.647665][ T7309] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 390.669971][ T7311] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 390.740081][ T3583] Bluetooth: hci1: command 0x0406 tx timeout [ 390.776498][ T6232] syz-executor.0: attempt to access beyond end of device [ 390.776498][ T6232] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 390.790089][ T7317] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 390.878991][ T5857] usb 4-1: USB disconnect, device number 7 [ 390.885452][ T7317] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 390.894775][ T3764] usb 4-1: Failed to submit usb control message: -71 [ 390.916974][ T3764] usb 4-1: unable to send the bmi data to the device: -71 [ 390.926049][ T7317] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 390.943115][ T3764] usb 4-1: unable to get target info from device [ 390.949471][ T3764] usb 4-1: could not get target info (-71) [ 390.990819][ T3764] usb 4-1: could not probe fw (-71) [ 391.537250][ T7345] loop3: detected capacity change from 0 to 1024 [ 391.538829][ T7345] EXT4-fs: Ignoring removed nomblk_io_submit option [ 391.543049][ T7345] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 391.543070][ T7345] EXT4-fs (loop3): Test dummy encryption mode enabled [ 391.566149][ T7345] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 391.628892][ T7345] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 391.806271][ T5826] EXT4-fs (loop3): unmounting filesystem. [ 391.819215][ T7352] loop4: detected capacity change from 0 to 256 [ 391.862538][ T7352] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 392.179964][ T5857] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 392.709969][ T5857] usb 1-1: Using ep0 maxpacket: 32 [ 393.055653][ T5857] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 393.084716][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.272299][ T26] audit: type=1800 audit(1717366753.234:20): pid=7371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1964 res=0 errno=0 [ 393.276380][ T5857] usb 1-1: Product: syz [ 393.298160][ T5857] usb 1-1: Manufacturer: syz [ 393.303104][ T5857] usb 1-1: SerialNumber: syz [ 393.320886][ T5857] usb 1-1: config 0 descriptor?? [ 394.387805][ T7381] loop4: detected capacity change from 0 to 1024 [ 394.409167][ T7381] EXT4-fs: Ignoring removed nomblk_io_submit option [ 394.418676][ T7381] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 394.418698][ T7381] EXT4-fs (loop4): Test dummy encryption mode enabled [ 394.436534][ T7381] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 394.457693][ T7381] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 394.569255][ T5257] EXT4-fs (loop4): unmounting filesystem. [ 394.581451][ T7385] loop2: detected capacity change from 0 to 256 [ 394.644678][ T7385] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 395.613092][ T7396] loop3: detected capacity change from 0 to 164 [ 395.635843][ T7397] loop2: detected capacity change from 0 to 512 [ 395.699141][ T7397] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 395.715530][ T7397] ext4 filesystem being mounted at /root/syzkaller-testdir1569234740/syzkaller.2oxY3c/68/file0 supports timestamps until 2038 (0x7fffffff) [ 395.786290][ T7403] loop4: detected capacity change from 0 to 256 [ 395.817144][ T7397] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #2: comm syz-executor.2: corrupted inode contents [ 395.857482][ T26] audit: type=1800 audit(1717366755.814:21): pid=7403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=1048641 res=0 errno=0 [ 395.889959][ T7397] EXT4-fs error (device loop2): ext4_dirty_inode:6072: inode #2: comm syz-executor.2: mark_inode_dirty error [ 395.929018][ T7397] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #2: comm syz-executor.2: corrupted inode contents [ 395.973099][ T7367] loop1: detected capacity change from 0 to 40427 [ 395.979996][ T7397] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz-executor.2: mark_inode_dirty error [ 396.086127][ T7367] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12) [ 396.228547][ T5467] EXT4-fs (loop2): unmounting filesystem. [ 397.057394][ T7420] loop4: detected capacity change from 0 to 1024 [ 397.064900][ T7420] EXT4-fs: Ignoring removed nomblk_io_submit option [ 397.073163][ T7420] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 397.081994][ T7420] EXT4-fs (loop4): Test dummy encryption mode enabled [ 397.109861][ T7420] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 397.150962][ T7420] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 397.230032][ T5857] rtl8150 1-1:0.0: couldn't reset the device [ 397.230159][ T5857] rtl8150: probe of 1-1:0.0 failed with error -5 [ 397.232894][ T5857] usb 1-1: USB disconnect, device number 6 [ 397.325953][ T5257] EXT4-fs (loop4): unmounting filesystem. [ 397.572110][ T7436] loop4: detected capacity change from 0 to 64 [ 398.338764][ T7443] loop3: detected capacity change from 0 to 256 [ 398.371719][ T7442] loop2: detected capacity change from 0 to 1024 [ 398.464055][ T7443] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 398.496079][ T7442] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 398.515699][ T7446] loop0: detected capacity change from 0 to 512 [ 398.550122][ T7432] loop1: detected capacity change from 0 to 32768 [ 398.562546][ T7432] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (7432) [ 398.580798][ T7446] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 398.588811][ T7446] System zones: 1-12 [ 398.595373][ T7432] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 398.607011][ T7432] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 398.616837][ T7432] BTRFS info (device loop1): force clearing of disk cache [ 398.624310][ T7432] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 398.634449][ T7432] BTRFS info (device loop1): use zstd compression, level 3 [ 398.642133][ T7432] BTRFS info (device loop1): enabling ssd optimizations [ 398.649089][ T7432] BTRFS info (device loop1): using free space tree [ 398.658161][ T7446] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor.0: bg 0: block 361: padding at end of block bitmap is not set [ 398.678031][ T7446] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6171: Corrupt filesystem [ 398.700001][ T7446] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz-executor.0: attempt to clear invalid blocks 33619980 len 1 [ 398.701931][ T7442] overlayfs: failed to resolve './file0': -2 [ 398.727855][ T7446] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 0) [ 398.774559][ T7452] device vlan2 entered promiscuous mode [ 398.877056][ T7446] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 1) [ 399.001402][ T7446] EXT4-fs (loop0): 1 orphan inode deleted [ 399.007283][ T7446] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 399.046832][ T7446] EXT4-fs error (device loop0): ext4_map_blocks:607: inode #2: block 2: comm syz-executor.0: lblock 0 mapped to illegal pblock 2 (length 1) [ 399.057685][ T7432] BTRFS info (device loop1): rebuilding free space tree [ 399.084976][ T7446] EXT4-fs warning (device loop0): dx_probe:822: inode #2: lblock 0: comm syz-executor.0: error -117 reading directory block [ 399.169120][ T6232] EXT4-fs (loop0): unmounting filesystem. [ 399.248435][ T5538] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 399.358821][ T7475] loop0: detected capacity change from 0 to 2048 [ 399.414042][ T7475] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 399.455058][ T7475] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 399.463126][ T5467] EXT4-fs (loop2): unmounting filesystem. [ 399.744922][ T26] audit: type=1800 audit(1717366759.704:22): pid=7485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 399.823693][ T7482] loop1: detected capacity change from 0 to 1024 [ 399.881561][ T7482] EXT4-fs: Ignoring removed nomblk_io_submit option [ 399.895833][ T7457] loop3: detected capacity change from 0 to 40427 [ 399.905923][ T7482] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 399.984338][ T7457] F2FS-fs (loop3): Found nat_bits in checkpoint [ 400.000644][ T7482] EXT4-fs (loop1): Test dummy encryption mode enabled [ 400.029788][ T46] kworker/u4:3: attempt to access beyond end of device [ 400.029788][ T46] loop0: rw=2049, sector=2089, nr_sectors = 8 limit=2048 [ 400.032662][ T7482] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 400.081128][ T7482] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 400.194294][ T5538] EXT4-fs (loop1): unmounting filesystem. [ 400.197853][ T7475] syz-executor.0: attempt to access beyond end of device [ 400.197853][ T7475] loop0: rw=2049, sector=2097, nr_sectors = 280 limit=2048 [ 400.210075][ T7457] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 400.379599][ T7495] loop1: detected capacity change from 0 to 256 [ 400.566074][ T7473] loop4: detected capacity change from 0 to 32768 [ 400.630314][ T7473] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (7473) [ 400.718960][ T7473] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 400.824778][ T7473] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 401.071760][ T7473] BTRFS info (device loop4): turning off barriers [ 401.240820][ T7473] BTRFS info (device loop4): enabling auto defrag [ 401.484577][ T7473] BTRFS info (device loop4): force clearing of disk cache [ 401.491834][ T7473] BTRFS info (device loop4): allowing degraded mounts [ 401.498615][ T7473] BTRFS info (device loop4): enabling disk space caching [ 401.506572][ T7473] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 401.515842][ T7473] BTRFS info (device loop4): use lzo compression, level 0 [ 401.522998][ T7473] BTRFS info (device loop4): disk space caching is enabled [ 401.585375][ T7503] device vlan2 entered promiscuous mode [ 401.869061][ T7514] loop0: detected capacity change from 0 to 64 [ 402.205201][ T7473] BTRFS error (device loop4): open_ctree failed [ 402.681436][ T7541] loop4: detected capacity change from 0 to 1024 [ 402.727810][ T7541] EXT4-fs: Ignoring removed nomblk_io_submit option [ 402.772385][ T7541] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 402.799895][ T7541] EXT4-fs (loop4): Test dummy encryption mode enabled [ 402.851225][ T7541] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 402.917983][ T7541] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 403.083875][ T5257] EXT4-fs (loop4): unmounting filesystem. [ 403.266812][ T7546] loop4: detected capacity change from 0 to 2048 [ 403.312129][ T7546] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 403.358696][ T7546] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 403.483559][ T7533] loop3: detected capacity change from 0 to 32768 [ 403.616867][ T7533] XFS (loop3): Mounting V5 Filesystem [ 403.631861][ T7529] loop2: detected capacity change from 0 to 32768 [ 403.710485][ T7529] XFS (loop2): Mounting V5 Filesystem [ 403.711941][ T7539] loop1: detected capacity change from 0 to 32768 [ 403.774248][ T7539] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (7539) [ 403.790922][ T7533] XFS (loop3): Ending clean mount [ 403.818910][ T7543] loop0: detected capacity change from 0 to 40427 [ 403.828521][ T7533] XFS (loop3): Quotacheck needed: Please wait. [ 403.868098][ T7539] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 403.891356][ T7529] XFS (loop2): Ending clean mount [ 403.911224][ T7533] XFS (loop3): Quotacheck: Done. [ 403.930753][ T7543] F2FS-fs (loop0): Found nat_bits in checkpoint [ 403.940478][ T7539] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 403.955916][ T7529] XFS (loop2): Quotacheck needed: Please wait. [ 403.971168][ T7539] BTRFS info (device loop1): using free space tree [ 404.047576][ T5826] XFS (loop3): Unmounting Filesystem [ 404.074576][ T7529] XFS (loop2): Quotacheck: Done. [ 404.152987][ T7543] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 404.380892][ T7539] BTRFS info (device loop1): enabling ssd optimizations [ 404.591974][ T5538] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 404.763506][ T7596] device vlan2 entered promiscuous mode [ 404.764018][ T5467] XFS (loop2): Unmounting Filesystem [ 404.920339][ T3763] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.137717][ T3763] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.001100][ T7610] loop4: detected capacity change from 0 to 1024 [ 406.040236][ T7590] loop3: detected capacity change from 0 to 32768 [ 406.082375][ T7610] EXT4-fs: Ignoring removed nomblk_io_submit option [ 406.117479][ T3763] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.138966][ T7610] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 406.161105][ T7610] EXT4-fs (loop4): Test dummy encryption mode enabled [ 406.193328][ T7590] XFS (loop3): Mounting V5 Filesystem [ 406.218769][ T7610] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 406.259085][ T7610] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 406.284543][ T3763] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.341032][ T7590] XFS (loop3): Ending clean mount [ 406.398568][ T7590] XFS (loop3): Quotacheck needed: Please wait. [ 406.475112][ T7590] XFS (loop3): Quotacheck: Done. [ 406.554608][ T5257] EXT4-fs (loop4): unmounting filesystem. [ 406.729118][ T5826] XFS (loop3): Unmounting Filesystem [ 407.200588][ T3576] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 407.210510][ T3576] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 407.218436][ T3576] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 407.226332][ T3576] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 407.234730][ T3576] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 407.243770][ T3576] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 407.598749][ T3763] device hsr_slave_0 left promiscuous mode [ 407.639147][ T3763] device hsr_slave_1 left promiscuous mode [ 407.709991][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.727475][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.741611][ T7627] loop1: detected capacity change from 0 to 40427 [ 407.786243][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.805238][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.819014][ T7627] F2FS-fs (loop1): Found nat_bits in checkpoint [ 407.835386][ T3763] device bridge_slave_1 left promiscuous mode [ 407.849543][ T3763] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.885559][ T3763] device bridge_slave_0 left promiscuous mode [ 407.902022][ T3763] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.937970][ T3763] device dummy0 left promiscuous mode [ 407.966418][ T3763] device veth1_macvtap left promiscuous mode [ 407.980439][ T3763] device veth0_macvtap left promiscuous mode [ 408.004914][ T7627] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 408.010000][ T3763] device veth1_vlan left promiscuous mode [ 408.018238][ T3763] device veth0_vlan left promiscuous mode [ 408.173745][ T7632] loop4: detected capacity change from 0 to 32768 [ 408.180555][ T5538] syz-executor.1: attempt to access beyond end of device [ 408.180555][ T5538] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 408.327841][ T7632] XFS (loop4): Mounting V5 Filesystem [ 408.457233][ T7632] XFS (loop4): Ending clean mount [ 408.469033][ T7632] XFS (loop4): Quotacheck needed: Please wait. [ 408.497098][ T3763] team0 (unregistering): Port device vlan2 removed [ 408.514118][ T7632] XFS (loop4): Quotacheck: Done. [ 408.827769][ T3763] team0 (unregistering): Port device team_slave_1 removed [ 408.867324][ T3763] team0 (unregistering): Port device team_slave_0 removed [ 408.905596][ T3763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.957865][ T3763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.112971][ T3763] bond0 (unregistering): Released all slaves [ 409.199326][ T7637] chnl_net:caif_netlink_parms(): no params data found [ 409.290889][ T7667] device vlan2 entered promiscuous mode [ 409.299972][ T3576] Bluetooth: hci2: command tx timeout [ 409.457583][ T5257] XFS (loop4): Unmounting Filesystem [ 409.467524][ T7676] loop1: detected capacity change from 0 to 64 [ 409.585489][ T7637] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.645671][ T7637] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.671413][ T7637] device bridge_slave_0 entered promiscuous mode [ 409.694484][ T7637] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.716940][ T7637] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.728871][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 409.741739][ T7637] device bridge_slave_1 entered promiscuous mode [ 409.888574][ T7637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.951163][ T7637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.376709][ T7637] team0: Port device team_slave_0 added [ 410.488707][ T7637] team0: Port device team_slave_1 added [ 410.722800][ T7690] loop3: detected capacity change from 0 to 8192 [ 410.830200][ T7637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.923063][ T7637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.109767][ T7696] loop1: detected capacity change from 0 to 1024 [ 411.134537][ T7697] FAT-fs (loop3): error, clusters badly computed (8 != 1) [ 411.135627][ T7637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.180979][ T7696] EXT4-fs: Ignoring removed nomblk_io_submit option [ 411.199656][ T7637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.220537][ T7696] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 411.232506][ T7697] FAT-fs (loop3): Filesystem has been set read-only [ 411.235943][ T7637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.270048][ T7696] EXT4-fs (loop1): Test dummy encryption mode enabled [ 411.270120][ T7697] FAT-fs (loop3): error, clusters badly computed (9 != 2) [ 411.307213][ T7696] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 411.331591][ T7696] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 411.351066][ T7637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.379930][ T3576] Bluetooth: hci2: command tx timeout [ 411.410920][ T7697] FAT-fs (loop3): error, clusters badly computed (10 != 3) [ 411.418248][ T7697] FAT-fs (loop3): error, clusters badly computed (11 != 4) [ 411.509718][ T5538] EXT4-fs (loop1): unmounting filesystem. [ 411.532841][ T7697] FAT-fs (loop3): error, clusters badly computed (12 != 5) [ 411.568415][ T7637] device hsr_slave_0 entered promiscuous mode [ 411.605438][ T7697] FAT-fs (loop3): error, clusters badly computed (13 != 6) [ 411.613035][ T7637] device hsr_slave_1 entered promiscuous mode [ 411.657997][ T7697] FAT-fs (loop3): error, clusters badly computed (14 != 7) [ 411.969589][ T3583] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 411.979390][ T3583] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 411.988079][ T3583] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 412.002402][ T3583] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 412.010978][ T3583] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 412.125488][ T3583] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 413.090216][ T7719] loop3: detected capacity change from 0 to 256 [ 413.197583][ T7719] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 413.415835][ T7711] chnl_net:caif_netlink_parms(): no params data found [ 413.459977][ T3576] Bluetooth: hci2: command tx timeout [ 413.464004][ T7637] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 413.588811][ T7637] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 413.652942][ T7707] loop0: detected capacity change from 0 to 40427 [ 413.670007][ T7637] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 413.771705][ T7637] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 413.783444][ T7707] F2FS-fs (loop0): Found nat_bits in checkpoint [ 413.910975][ T7711] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.968313][ T7711] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.010879][ T7711] device bridge_slave_0 entered promiscuous mode [ 414.038151][ T7711] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.070629][ T7707] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 414.070645][ T7711] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.072107][ T7711] device bridge_slave_1 entered promiscuous mode [ 414.210449][ T6232] syz-executor.0: attempt to access beyond end of device [ 414.210449][ T6232] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 414.234362][ T7711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.261971][ T3576] Bluetooth: hci0: command tx timeout [ 414.334407][ T7711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.477732][ T7711] team0: Port device team_slave_0 added [ 414.522047][ T7711] team0: Port device team_slave_1 added [ 414.610561][ T7711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.617719][ T7711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.719863][ T7711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.747420][ T7711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.771548][ T7711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.843177][ T7711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.616994][ T3583] Bluetooth: hci2: command tx timeout [ 415.702924][ T7711] device hsr_slave_0 entered promiscuous mode [ 415.730451][ T7711] device hsr_slave_1 entered promiscuous mode [ 415.776550][ T7711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 415.776617][ T7711] Cannot create hsr debugfs directory [ 415.803239][ T7759] loop1: detected capacity change from 0 to 64 [ 415.838169][ T7637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.981353][ T7637] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.982751][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 415.983334][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 416.005124][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 416.005728][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 416.006157][ T6425] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.006240][ T6425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.006817][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 416.073895][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 416.074426][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 416.074788][ T6425] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.074842][ T6425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.177381][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 416.178158][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 416.178821][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 416.179767][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 416.180757][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 416.186502][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 416.187250][ T5151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 416.237448][ T7711] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.250419][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 416.250980][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 416.255032][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 416.255599][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 416.283298][ T7637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 416.309217][ T7711] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.340140][ T3576] Bluetooth: hci4: command 0x0406 tx timeout [ 416.340194][ T3576] Bluetooth: hci0: command tx timeout [ 416.382136][ T7711] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.433118][ T7775] loop1: detected capacity change from 0 to 1024 [ 416.444514][ T7711] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.452370][ T7775] EXT4-fs: Ignoring removed nomblk_io_submit option [ 416.468280][ T7775] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 416.468300][ T7775] EXT4-fs (loop1): Test dummy encryption mode enabled [ 416.477402][ T7775] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 416.499657][ T7775] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 416.613798][ T5538] EXT4-fs (loop1): unmounting filesystem. [ 416.926799][ T7711] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 416.939400][ T7711] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 416.946197][ T7711] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 417.002625][ T7711] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 417.175808][ T7711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.221331][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 417.221898][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 417.248493][ T7711] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.256549][ T7755] tty tty2: ldisc open failed (-12), clearing slot 1 [ 418.022761][ T7798] loop3: detected capacity change from 0 to 256 [ 418.049020][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 418.075100][ T7798] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 418.095943][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 418.129636][ T7801] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 418.144202][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.151344][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.169278][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 418.182895][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 418.191904][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.199029][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.236122][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 418.260936][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 418.268383][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 418.337993][ T7711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 418.419963][ T3582] Bluetooth: hci0: command tx timeout [ 418.440752][ T7711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 418.472418][ T7637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.486500][ T5859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 418.497193][ T5859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 419.267498][ T5859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 419.276849][ T5859] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 419.285396][ T5859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 419.294219][ T5859] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 419.302857][ T5859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 419.312213][ T5859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 419.340590][ T5859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 419.349603][ T5859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 419.410053][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 419.421272][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 419.486682][ T3763] device hsr_slave_0 left promiscuous mode [ 419.520440][ T3763] device hsr_slave_1 left promiscuous mode [ 419.527786][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.553506][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.581925][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.589342][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.630598][ T3763] device bridge_slave_1 left promiscuous mode [ 419.636839][ T3763] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.668109][ T3763] device bridge_slave_0 left promiscuous mode [ 419.680401][ T3763] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.714405][ T3763] device veth1_macvtap left promiscuous mode [ 419.733916][ T3763] device veth0_macvtap left promiscuous mode [ 419.760189][ T3763] device veth0_vlan left promiscuous mode [ 419.979314][ T7823] loop1: detected capacity change from 0 to 1024 [ 420.026486][ T7823] EXT4-fs: Ignoring removed nomblk_io_submit option [ 420.050700][ T7823] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 420.059411][ T7823] EXT4-fs (loop1): Test dummy encryption mode enabled [ 420.099769][ T7805] loop3: detected capacity change from 0 to 40427 [ 420.146080][ T7823] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 420.174458][ T7805] F2FS-fs (loop3): Found nat_bits in checkpoint [ 420.188158][ T3763] team0 (unregistering): Port device team_slave_1 removed [ 420.207287][ T7823] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 420.207690][ T3763] team0 (unregistering): Port device team_slave_0 removed [ 420.247333][ T3763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.288743][ T7819] loop0: detected capacity change from 0 to 40427 [ 420.296867][ T7819] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 420.305671][ T7819] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 420.320407][ T3763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.372468][ T7819] F2FS-fs (loop0): Found nat_bits in checkpoint [ 420.377040][ T5538] EXT4-fs (loop1): unmounting filesystem. [ 420.385157][ T7805] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 420.464544][ T5826] syz-executor.3: attempt to access beyond end of device [ 420.464544][ T5826] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 420.499976][ T3576] Bluetooth: hci0: command tx timeout [ 420.516768][ T3763] bond0 (unregistering): Released all slaves [ 420.525053][ T7819] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 420.573507][ T7819] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 420.580670][ T7819] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 420.682042][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 420.708400][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 420.722212][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 420.730693][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 420.742547][ T7637] device veth0_vlan entered promiscuous mode [ 420.750470][ T7819] syz-executor.0: attempt to access beyond end of device [ 420.750470][ T7819] loop0: rw=34817, sector=77824, nr_sectors = 2080 limit=40427 [ 420.790098][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 420.810504][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 420.822951][ T7637] device veth1_vlan entered promiscuous mode [ 420.898925][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 420.913431][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 420.939513][ T7637] device veth0_macvtap entered promiscuous mode [ 420.977629][ T7637] device veth1_macvtap entered promiscuous mode [ 421.018592][ T7637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.029103][ T7637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.039057][ T7637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.050277][ T7637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.079953][ T7637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.096723][ T7637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.111977][ T7637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.124326][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 421.133159][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 421.150653][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 421.170339][ T5851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 421.184869][ T7637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.237690][ T7637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.254408][ T7637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.267320][ T7637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.300170][ T7637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.339876][ T7637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.378751][ T7637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.410640][ T7711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.418577][ T5859] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 421.428695][ T5859] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 421.436636][ T5859] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 421.460647][ T5859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 421.472965][ T7637] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.496483][ T7637] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.540389][ T7637] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.549107][ T7637] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.631541][ T7849] loop0: detected capacity change from 0 to 256 [ 421.769415][ T7849] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 421.821979][ T7852] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 421.834779][ T3672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.852814][ T3672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.938605][ T5859] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 421.976034][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.008357][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.041022][ T5859] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 423.157245][ T7844] loop3: detected capacity change from 0 to 40427 [ 423.184617][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 423.193790][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 423.216468][ T7711] device veth0_vlan entered promiscuous mode [ 423.247065][ T7844] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 423.247611][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 423.281516][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 423.287926][ T7844] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 423.297528][ T3582] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 423.314840][ T7711] device veth1_vlan entered promiscuous mode [ 423.398254][ T7844] F2FS-fs (loop3): Found nat_bits in checkpoint [ 423.405034][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 423.422948][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 423.453872][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 423.502901][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 423.509849][ T7871] loop1: detected capacity change from 0 to 1024 [ 423.524445][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 423.536508][ T7871] EXT4-fs: Ignoring removed nomblk_io_submit option [ 423.543404][ T7844] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 423.570746][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 423.579596][ T7871] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 423.598219][ T7711] device veth0_macvtap entered promiscuous mode [ 423.607494][ T7871] EXT4-fs (loop1): Test dummy encryption mode enabled [ 423.623533][ T7844] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 423.629543][ T7711] device veth1_macvtap entered promiscuous mode [ 423.644706][ T7844] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 423.696765][ T7871] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 423.704068][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.715942][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.726323][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.736817][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.747131][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.757658][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.767753][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.778582][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.790372][ T7711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.798136][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 423.798747][ T7871] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 423.806932][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 423.823778][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 423.832796][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 423.843405][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.855532][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.856214][ T7854] loop0: detected capacity change from 0 to 32768 [ 423.898072][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.923627][ T7854] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (7854) [ 423.947463][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.976340][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.999848][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.022015][ T7854] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 424.042112][ T7711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.061005][ T7854] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 424.089957][ T7711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.097978][ T7854] BTRFS info (device loop0): using free space tree [ 424.137649][ T5538] EXT4-fs (loop1): unmounting filesystem. [ 424.158547][ T7711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.263212][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 424.296680][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 424.369076][ T7711] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.410581][ T7711] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.469961][ T7711] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.561794][ T7711] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.599942][ T7854] BTRFS info (device loop0): enabling ssd optimizations [ 424.615959][ T7859] loop2: detected capacity change from 0 to 32768 [ 424.800243][ T7859] XFS (loop2): Mounting V5 Filesystem [ 424.872178][ T6232] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 424.902037][ T4900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.917855][ T7859] XFS (loop2): Ending clean mount [ 424.941933][ T4900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.957010][ T7859] XFS (loop2): Quotacheck needed: Please wait. [ 424.989529][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 425.022450][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.055757][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.131436][ T7859] XFS (loop2): Quotacheck: Done. [ 425.166492][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 425.207251][ T7637] XFS (loop2): Unmounting Filesystem [ 425.317694][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 425.495175][ T7911] loop4: detected capacity change from 0 to 256 [ 425.589874][ T7911] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 425.637141][ T7914] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 425.811989][ T7918] loop0: detected capacity change from 0 to 256 [ 426.928535][ T7926] loop4: detected capacity change from 0 to 2048 [ 426.986924][ T7926] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 426.992754][ T7929] loop2: detected capacity change from 0 to 1024 [ 427.017339][ T7926] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 362: padding at end of block bitmap is not set [ 427.041520][ T7926] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 427.050922][ T7929] EXT4-fs: Ignoring removed nomblk_io_submit option [ 427.070071][ T7926] EXT4-fs (loop4): This should not happen!! Data will be lost [ 427.070071][ T7926] [ 427.087146][ T7926] EXT4-fs (loop4): Total free blocks count 0 [ 427.107333][ T7929] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 427.116252][ T7926] EXT4-fs (loop4): Free/Dirty block details [ 427.128742][ T7926] EXT4-fs (loop4): free_blocks=0 [ 427.132326][ T7895] loop1: detected capacity change from 0 to 32768 [ 427.137265][ T7926] EXT4-fs (loop4): dirty_blocks=32 [ 427.151287][ T7929] EXT4-fs (loop2): Test dummy encryption mode enabled [ 427.174772][ T7895] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 427.175111][ T7926] EXT4-fs (loop4): Block reservation details [ 427.197301][ T7895] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 427.200162][ T7926] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 427.221646][ T7929] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 427.250632][ T7929] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 427.277970][ T7895] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 427.286047][ T7903] loop3: detected capacity change from 0 to 32768 [ 427.316890][ T5151] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 427.324887][ T5151] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 427.332558][ T7903] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 427.346876][ T7711] EXT4-fs (loop4): unmounting filesystem. [ 427.384481][ T5151] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 59ms [ 427.386974][ T7903] CPU: 0 PID: 7903 Comm: syz-executor.3 Not tainted 6.1.92-syzkaller #0 [ 427.393590][ T5151] gfs2: fsid=syz:syz.0: jid=0: Done [ 427.400156][ T7903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 427.400181][ T7903] Call Trace: [ 427.400188][ T7903] [ 427.400197][ T7903] dump_stack_lvl+0x1e3/0x2cb [ 427.407761][ T7895] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 427.415434][ T7903] ? nf_tcp_handle_invalid+0x642/0x642 [ 427.415471][ T7903] ? panic+0x764/0x764 [ 427.415502][ T7903] sysfs_create_dir_ns+0x2c6/0x390 [ 427.415534][ T7903] ? sysfs_warn_dup+0xa0/0xa0 [ 427.415570][ T7903] kobject_add_internal+0x6df/0xd10 [ 427.415601][ T7903] kobject_init_and_add+0x120/0x190 [ 427.415624][ T7903] ? lockdep_softirqs_off+0x420/0x420 [ 427.415651][ T7903] ? widen_string+0x3a/0x310 [ 427.415678][ T7903] ? kobject_add+0x210/0x210 [ 427.415706][ T7903] ? __init_swait_queue_head+0xaa/0x140 [ 427.415738][ T7903] gfs2_sys_fs_add+0x237/0x4a0 [ 427.415764][ T7903] ? gfs2_recover_set+0x240/0x240 [ 427.415787][ T7903] ? snprintf+0xd6/0x120 [ 427.415815][ T7903] ? vscnprintf+0x80/0x80 [ 427.415843][ T7903] ? read_word_at_a_time+0xe/0x20 [ 427.415864][ T7903] ? strscpy+0x89/0x220 [ 427.415888][ T7903] gfs2_fill_super+0x1228/0x26e0 [ 427.415935][ T7903] ? gfs2_reconfigure+0xcf0/0xcf0 [ 427.415961][ T7903] ? ptr_to_hashval+0x70/0x70 [ 427.415984][ T7903] ? up_write+0x19d/0x580 [ 427.416028][ T7903] ? set_blocksize+0x1c6/0x350 [ 427.416055][ T7903] get_tree_bdev+0x3fe/0x620 [ 427.539380][ T7903] ? gfs2_reconfigure+0xcf0/0xcf0 [ 427.544405][ T7903] gfs2_get_tree+0x50/0x210 [ 427.548901][ T7903] ? bpf_lsm_capable+0x5/0x10 [ 427.553580][ T7903] vfs_get_tree+0x88/0x270 [ 427.557992][ T7903] do_new_mount+0x2ba/0xb40 [ 427.562488][ T7903] ? ns_capable+0x85/0xe0 [ 427.566812][ T7903] ? do_move_mount_old+0x160/0x160 [ 427.571925][ T7903] __se_sys_mount+0x2d5/0x3c0 [ 427.576604][ T7903] ? __x64_sys_mount+0xc0/0xc0 [ 427.581361][ T7903] ? syscall_enter_from_user_mode+0x2e/0x230 [ 427.587330][ T7903] ? lockdep_hardirqs_on+0x94/0x130 [ 427.592521][ T7903] ? __x64_sys_mount+0x1c/0xc0 [ 427.597278][ T7903] do_syscall_64+0x3b/0xb0 [ 427.601689][ T7903] ? clear_bhb_loop+0x45/0xa0 [ 427.606364][ T7903] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 427.612249][ T7903] RIP: 0033:0x7fc3ed07e5ea [ 427.616663][ T7903] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 427.636260][ T7903] RSP: 002b:00007fc3edea3ef8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 427.644662][ T7903] RAX: ffffffffffffffda RBX: 00007fc3edea3f80 RCX: 00007fc3ed07e5ea [ 427.652624][ T7903] RDX: 00000000200000c0 RSI: 00000000200002c0 RDI: 00007fc3edea3f40 [ 427.660583][ T7903] RBP: 00000000200000c0 R08: 00007fc3edea3f80 R09: 0000000000000000 [ 427.668546][ T7903] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000200002c0 [ 427.676507][ T7903] R13: 00007fc3edea3f40 R14: 0000000000037f59 R15: 0000000020000140 [ 427.684481][ T7903] [ 427.688939][ T7895] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 427.718932][ T7903] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 427.734161][ T7903] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 427.752485][ T7637] EXT4-fs (loop2): unmounting filesystem. [ 428.133090][ T7938] loop2: detected capacity change from 0 to 8192 [ 428.195367][ T7938] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 428.603091][ T7937] loop4: detected capacity change from 0 to 32768 [ 428.620478][ T7937] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (7937) [ 428.638643][ T7954] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 428.656804][ T7937] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 428.689035][ T7937] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 428.704764][ T7937] BTRFS info (device loop4): doing ref verification [ 428.735648][ T7937] BTRFS info (device loop4): max_inline at 4096 [ 428.760972][ T7937] BTRFS info (device loop4): max_inline at 0 [ 428.770381][ T7956] loop2: detected capacity change from 0 to 256 [ 428.778348][ T7937] BTRFS info (device loop4): turning off barriers [ 428.789315][ T7956] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 428.806482][ T7937] BTRFS info (device loop4): using free space tree [ 429.096121][ T7711] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 429.416936][ T7942] loop1: detected capacity change from 0 to 32768 [ 429.568204][ T7942] XFS (loop1): Mounting V5 Filesystem [ 429.599050][ T7962] loop2: detected capacity change from 0 to 32768 [ 429.717580][ T7942] XFS (loop1): Ending clean mount [ 429.733491][ T7962] XFS (loop2): Mounting V5 Filesystem [ 429.744718][ T7942] XFS (loop1): Quotacheck needed: Please wait. [ 429.810169][ T7942] XFS (loop1): Quotacheck: Done. [ 429.931985][ T7943] loop3: detected capacity change from 0 to 32768 [ 429.953026][ T7962] XFS (loop2): Ending clean mount [ 429.973433][ T7962] XFS (loop2): Quotacheck needed: Please wait. [ 430.022212][ T7943] XFS (loop3): Mounting V5 Filesystem [ 430.028301][ T7962] XFS (loop2): Quotacheck: Done. [ 430.333888][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 430.357919][ T7943] XFS (loop3): Ending clean mount [ 430.457876][ T5538] XFS (loop1): Unmounting Filesystem [ 430.480173][ T5826] XFS (loop3): Unmounting Filesystem [ 430.624793][ T8014] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 430.642644][ T7637] XFS (loop2): Unmounting Filesystem [ 430.671486][ T3892] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.718598][ T8016] loop4: detected capacity change from 0 to 256 [ 430.775592][ T3892] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.797729][ T8016] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 430.913250][ T3892] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.144530][ T3892] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.460866][ T8030] loop3: detected capacity change from 0 to 1024 [ 431.541990][ T8030] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 431.548626][ T8030] hfsplus: failed to load root directory [ 431.725559][ T8030] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 432.003943][ T8042] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 432.125504][ T3576] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 432.160927][ T3583] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 432.168802][ T3583] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 432.177280][ T3583] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 432.185767][ T3583] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 432.208218][ T3583] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 432.568421][ T8050] loop3: detected capacity change from 0 to 40427 [ 432.576853][ T8050] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 432.584664][ T8050] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 432.617951][ T8050] F2FS-fs (loop3): Found nat_bits in checkpoint [ 432.653901][ T8050] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 432.675001][ T8050] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 432.682213][ T8050] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 432.763979][ T3583] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 432.775673][ T3583] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 432.787983][ T3583] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 432.796288][ T3583] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 432.798715][ T8063] loop0: detected capacity change from 0 to 2048 [ 432.811541][ T3576] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 432.818904][ T3576] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 432.920849][ T8063] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 433.155137][ T8078] loop4: detected capacity change from 0 to 8 [ 433.172967][ T8063] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 433.236717][ T8078] SQUASHFS error: lzo decompression failed, data probably corrupt [ 433.258632][ T8063] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 201 with error 28 [ 433.277481][ T8078] SQUASHFS error: Failed to read block 0x91: -5 [ 433.283938][ T8078] SQUASHFS error: Unable to read metadata cache entry [8f] [ 433.296306][ T8078] SQUASHFS error: Unable to read inode 0x11f [ 433.302723][ T8063] EXT4-fs (loop0): This should not happen!! Data will be lost [ 433.302723][ T8063] [ 433.335259][ T8063] EXT4-fs (loop0): Total free blocks count 0 [ 433.391145][ T8063] EXT4-fs (loop0): Free/Dirty block details [ 433.402936][ T8063] EXT4-fs (loop0): free_blocks=2415919104 [ 433.428985][ T8044] chnl_net:caif_netlink_parms(): no params data found [ 433.441839][ T8063] EXT4-fs (loop0): dirty_blocks=224 [ 433.448123][ T8063] EXT4-fs (loop0): Block reservation details [ 433.470616][ T8063] EXT4-fs (loop0): i_reserved_data_blocks=14 [ 433.480283][ T3892] device hsr_slave_0 left promiscuous mode [ 433.486178][ T8078] loop4: detected capacity change from 0 to 1024 [ 433.495177][ T8080] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 433.541092][ T3892] device hsr_slave_1 left promiscuous mode [ 433.550144][ T3892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.570231][ T3892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.579520][ T3892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.595843][ T3892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.605411][ T3892] device bridge_slave_1 left promiscuous mode [ 433.617203][ T3892] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.626881][ T3892] device bridge_slave_0 left promiscuous mode [ 433.646069][ T3892] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.728601][ T3892] device veth1_macvtap left promiscuous mode [ 433.742761][ T3892] device veth0_macvtap left promiscuous mode [ 433.748875][ T3892] device veth1_vlan left promiscuous mode [ 433.788559][ T3892] device veth0_vlan left promiscuous mode [ 433.934623][ T8089] capability: warning: `syz-executor.3' uses deprecated v2 capabilities in a way that may be insecure [ 433.950399][ T8089] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 433.961038][ T8089] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 434.341557][ T3576] Bluetooth: hci1: command tx timeout [ 434.694427][ T3892] team0 (unregistering): Port device team_slave_1 removed [ 434.727345][ T3892] team0 (unregistering): Port device team_slave_0 removed [ 434.853924][ T8096] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 434.868801][ T3892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.899909][ T3582] Bluetooth: hci2: command tx timeout [ 434.916605][ T3892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.056841][ T3892] bond0 (unregistering): Released all slaves [ 435.248292][ T8061] chnl_net:caif_netlink_parms(): no params data found [ 435.321132][ T8044] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.328456][ T8044] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.338317][ T8044] device bridge_slave_0 entered promiscuous mode [ 435.363679][ T8044] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.393020][ T8044] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.411926][ T102] Trying to write to read-only block-device loop4 [ 435.412109][ T8044] device bridge_slave_1 entered promiscuous mode [ 435.419691][ T102] Trying to write to read-only block-device loop4 [ 435.443357][ T102] Trying to write to read-only block-device loop4 [ 435.457257][ T102] Trying to write to read-only block-device loop4 [ 435.465130][ T8061] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.471602][ T102] Trying to write to read-only block-device loop4 [ 435.475774][ T8061] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.478735][ T102] Trying to write to read-only block-device loop4 [ 435.494460][ T8061] device bridge_slave_0 entered promiscuous mode [ 435.504783][ T102] Trying to write to read-only block-device loop4 [ 435.505860][ T8061] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.519307][ T8061] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.527825][ T8061] device bridge_slave_1 entered promiscuous mode [ 435.537876][ T8044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.541893][ T102] Trying to write to read-only block-device loop4 [ 435.571242][ T102] Trying to write to read-only block-device loop4 [ 435.579916][ T8044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.599557][ T102] Trying to write to read-only block-device loop4 [ 435.683517][ T8061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.774686][ T8061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.835408][ T8044] team0: Port device team_slave_0 added [ 435.894468][ T8044] team0: Port device team_slave_1 added [ 435.968164][ T8061] team0: Port device team_slave_0 added [ 436.018426][ T8061] team0: Port device team_slave_1 added [ 436.040417][ T8044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.049519][ T8044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.088824][ T8044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.193247][ T8044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.206000][ T8044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.285755][ T8044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.323995][ T8133] loop3: detected capacity change from 0 to 2048 [ 436.338083][ T8061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.351653][ T8061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.419840][ T8061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.421397][ T3582] Bluetooth: hci1: command tx timeout [ 436.456530][ T8061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.469840][ T8061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.496679][ T8133] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 436.545693][ T8133] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 436.582957][ T8133] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 201 with error 28 [ 436.596605][ T8061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.681857][ T8133] EXT4-fs (loop3): This should not happen!! Data will be lost [ 436.681857][ T8133] [ 436.730048][ T8133] EXT4-fs (loop3): Total free blocks count 0 [ 436.749557][ T3576] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 436.763998][ T8044] device hsr_slave_0 entered promiscuous mode [ 436.766849][ T8133] EXT4-fs (loop3): Free/Dirty block details [ 436.776691][ T3576] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 436.776952][ T8140] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 436.785475][ T8133] EXT4-fs (loop3): free_blocks=2415919104 [ 436.803252][ T3576] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 436.816995][ T8133] EXT4-fs (loop3): dirty_blocks=224 [ 436.822442][ T3576] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 436.841933][ T3576] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 436.849195][ T3576] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 436.856873][ T8140] EXT4-fs (loop3): This should not happen!! Data will be lost [ 436.856873][ T8140] [ 436.856949][ T8044] device hsr_slave_1 entered promiscuous mode [ 436.866651][ T8140] EXT4-fs (loop3): Total free blocks count 0 [ 436.924677][ T8044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 436.942305][ T8044] Cannot create hsr debugfs directory [ 436.979882][ T3576] Bluetooth: hci2: command tx timeout [ 437.055420][ T8061] device hsr_slave_0 entered promiscuous mode [ 437.110197][ T8061] device hsr_slave_1 entered promiscuous mode [ 437.134694][ T8061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 437.159903][ T8061] Cannot create hsr debugfs directory [ 437.792218][ T8141] chnl_net:caif_netlink_parms(): no params data found [ 437.804958][ T8139] loop0: detected capacity change from 0 to 32768 [ 438.059333][ T8139] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 438.500220][ T3576] Bluetooth: hci1: command tx timeout [ 438.771659][ T8139] XFS (loop0): Mounting V5 Filesystem [ 438.901968][ T3576] Bluetooth: hci0: command tx timeout [ 438.945916][ T8141] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.997323][ T8141] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.017375][ T8141] device bridge_slave_0 entered promiscuous mode [ 439.035500][ T8141] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.043188][ T8141] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.050449][ T8139] XFS (loop0): Ending clean mount [ 439.060605][ T3576] Bluetooth: hci2: command tx timeout [ 439.067200][ T8141] device bridge_slave_1 entered promiscuous mode [ 439.071992][ T8139] XFS (loop0): Quotacheck needed: Please wait. [ 439.129276][ T8184] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 439.142409][ T8141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.172887][ T8139] XFS (loop0): Quotacheck: Done. [ 439.222097][ T8141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.251148][ T6232] XFS (loop0): Unmounting Filesystem [ 439.282459][ T8186] device vlan3 entered promiscuous mode [ 439.288229][ T8186] team0: Device vlan3 is already an upper device of the team interface [ 439.421783][ T8141] team0: Port device team_slave_0 added [ 439.439611][ T8044] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 439.484640][ T8044] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 439.583789][ T8141] team0: Port device team_slave_1 added [ 439.614349][ T8044] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 439.653650][ T8061] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.680839][ T8141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.687792][ T8141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.722738][ T8141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.745554][ T8044] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 439.779014][ T8061] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.833533][ T8141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.869365][ T8141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.897087][ T8141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.924086][ T8061] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.981121][ T3892] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.013905][ T8061] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.062054][ T3892] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.114076][ T8141] device hsr_slave_0 entered promiscuous mode [ 440.128981][ T8141] device hsr_slave_1 entered promiscuous mode [ 440.153426][ T8141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 440.163296][ T8141] Cannot create hsr debugfs directory [ 440.190736][ T3892] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.201162][ T6425] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 440.253933][ T8044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.271386][ T3892] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.330717][ T6426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 440.338615][ T6426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 440.348841][ T8044] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.378128][ T8061] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 440.449964][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 440.460016][ T6425] usb 1-1: Using ep0 maxpacket: 32 [ 440.478190][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 440.495255][ T8212] loop3: detected capacity change from 0 to 512 [ 440.495488][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.508635][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.534051][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 440.543015][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 440.556597][ T8212] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 440.566209][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.573362][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.584403][ T8061] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 440.591624][ T3576] Bluetooth: hci1: command tx timeout [ 440.600040][ T6425] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 440.611650][ T6425] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 440.616455][ T8061] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 440.646112][ T6426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 440.658786][ T6426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 440.669139][ T8212] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #17: comm syz-executor.3: iget: bad i_size value: -6917529027641081756 [ 440.687994][ T6425] usb 1-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 440.705967][ T6426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 440.716511][ T8212] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 17 (err -117) [ 440.737071][ T6425] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.746562][ T8061] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 440.770839][ T8212] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 440.796181][ T6425] usb 1-1: config 0 descriptor?? [ 440.803932][ T8212] EXT4-fs error (device loop3): ext4_lookup:1859: inode #2: comm syz-executor.3: deleted inode referenced: 15 [ 440.851511][ T8199] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 440.871199][ T5826] EXT4-fs (loop3): unmounting filesystem. [ 440.877316][ T6426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 440.901882][ T6426] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 440.916486][ T6426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 440.928632][ T6426] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 440.945157][ T6426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 440.956730][ T6426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 440.969145][ T6426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 440.979124][ T6426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 440.990211][ T3576] Bluetooth: hci0: command tx timeout [ 441.018899][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 441.120072][ T6426] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 441.200133][ T3576] Bluetooth: hci2: command tx timeout [ 441.308956][ T6425] hid-led 0003:1294:1320.0003: unbalanced delimiter at end of report description [ 441.319568][ T6425] hid-led: probe of 0003:1294:1320.0003 failed with error -22 [ 441.388141][ T8061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.487585][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 441.499020][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 441.506289][ T6425] usb 1-1: USB disconnect, device number 7 [ 441.547449][ T8061] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.600958][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 441.613712][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 441.622709][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 441.631769][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 441.641499][ T7531] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.648620][ T7531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.657553][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 441.674603][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 441.686655][ T7531] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.693818][ T7531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.712299][ T6426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 441.762946][ T8044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.775436][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 441.800342][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 441.855626][ T6426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 441.866758][ T6426] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 441.875613][ T6426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 441.885079][ T6426] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 441.929456][ T8061] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 441.950467][ T3583] Bluetooth: hci5: command 0x0406 tx timeout [ 441.958834][ T8061] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 441.991530][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 441.999367][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 442.016381][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 442.102092][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 442.129723][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 442.158613][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 442.174963][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 442.199171][ T8044] device veth0_vlan entered promiscuous mode [ 442.232179][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 442.242430][ T26] audit: type=1800 audit(1717366802.204:23): pid=8250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1948 res=0 errno=0 [ 442.270823][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 442.290269][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 442.359476][ T8044] device veth1_vlan entered promiscuous mode [ 442.395160][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 442.407903][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 442.541349][ T3612] libceph: connect (1)[c::]:6789 error -101 [ 442.547950][ T3612] libceph: mon0 (1)[c::]:6789 connect error [ 442.563150][ T8044] device veth0_macvtap entered promiscuous mode [ 442.573279][ T8044] device veth1_macvtap entered promiscuous mode [ 442.598283][ T3612] libceph: connect (1)[c::]:6789 error -101 [ 442.604406][ T3612] libceph: mon0 (1)[c::]:6789 connect error [ 442.620533][ T5854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 442.630030][ T5854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 442.638538][ T5854] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 442.653871][ T5854] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 442.673283][ T8044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.685336][ T8044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.686090][ T8250] ceph: No mds server is up or the cluster is laggy [ 442.696497][ T8044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.727075][ T8044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.756163][ T8044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.796162][ T8044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.807613][ T8044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.818220][ T8044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.851521][ T8044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.885123][ T5854] libceph: connect (1)[c::]:6789 error -101 [ 442.892460][ T5854] libceph: mon0 (1)[c::]:6789 connect error [ 442.912189][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 442.926934][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 442.941717][ T8044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.966069][ T8044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.989158][ T8044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.007212][ T8044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.017470][ T8044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.042690][ T8044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.052735][ T8044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.063644][ T3582] Bluetooth: hci0: command tx timeout [ 443.070341][ T8044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.082402][ T8044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.110701][ T8262] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 443.122328][ T8141] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 443.136482][ T8262] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 443.163387][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 443.176988][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 443.196214][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 443.203964][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 443.213940][ T8044] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.224045][ T8044] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.246563][ T8044] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.255455][ T8044] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.281989][ T8061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.316173][ T8141] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 443.337023][ T8141] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 443.362781][ T8141] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 443.458214][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 443.467584][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 443.514552][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 443.538773][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 443.557196][ T8061] device veth0_vlan entered promiscuous mode [ 443.586768][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 443.608289][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 443.716687][ T8061] device veth1_vlan entered promiscuous mode [ 443.730031][ T3673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.748980][ T3892] device hsr_slave_0 left promiscuous mode [ 443.751239][ T3673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.768711][ T3892] device hsr_slave_1 left promiscuous mode [ 443.778312][ T3892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.794987][ T3892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.811903][ T3892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.819304][ T3892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.837502][ T3892] device bridge_slave_1 left promiscuous mode [ 443.851145][ T3892] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.866272][ T3892] device bridge_slave_0 left promiscuous mode [ 443.874795][ T3892] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.925065][ T3892] device hsr_slave_0 left promiscuous mode [ 443.949465][ T3892] device hsr_slave_1 left promiscuous mode [ 443.962139][ T3892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.969552][ T3892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.989692][ T3892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.005425][ T3892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.017173][ T3892] device bridge_slave_1 left promiscuous mode [ 444.029543][ T3892] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.047003][ T3892] device bridge_slave_0 left promiscuous mode [ 444.054392][ T3892] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.077043][ T3892] device veth1_macvtap left promiscuous mode [ 444.089183][ T3892] device veth0_macvtap left promiscuous mode [ 444.096455][ T3892] device veth1_vlan left promiscuous mode [ 444.111393][ T3892] device veth0_vlan left promiscuous mode [ 444.123645][ T3892] device veth1_macvtap left promiscuous mode [ 444.134297][ T3892] device veth0_macvtap left promiscuous mode [ 444.143376][ T3892] device veth1_vlan left promiscuous mode [ 444.149289][ T3892] device veth0_vlan left promiscuous mode [ 444.576891][ T3892] team0 (unregistering): Port device team_slave_1 removed [ 444.594406][ T3892] team0 (unregistering): Port device team_slave_0 removed [ 444.609106][ T3892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.631408][ T3892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.742175][ T3892] bond0 (unregistering): Released all slaves [ 444.898324][ T3892] team0 (unregistering): Port device team_slave_1 removed [ 444.914925][ T3892] team0 (unregistering): Port device team_slave_0 removed [ 444.927296][ T3892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.940759][ T3892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.981724][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.988051][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.039150][ T3892] bond0 (unregistering): Released all slaves [ 445.135720][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 445.143439][ T3583] Bluetooth: hci0: command tx timeout [ 445.149707][ T7531] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 445.165528][ T8273] device vlan2 entered promiscuous mode [ 445.178084][ T8273] team0: Device vlan2 is already an upper device of the team interface [ 445.204384][ T8141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.244304][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 445.252903][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 445.262813][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.275387][ T8141] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.293394][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.311631][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 445.337238][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 445.349409][ T5172] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.356555][ T5172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.498837][ T8277] loop3: detected capacity change from 0 to 2048 [ 445.553207][ T8061] device veth0_macvtap entered promiscuous mode [ 445.580176][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 445.591249][ T8277] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 445.595256][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 445.747839][ T8283] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 445.793642][ T8283] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 201 with error 28 [ 445.831592][ T8283] EXT4-fs (loop3): This should not happen!! Data will be lost [ 445.831592][ T8283] [ 445.864764][ T8283] EXT4-fs (loop3): Total free blocks count 0 [ 445.887552][ T8283] EXT4-fs (loop3): Free/Dirty block details [ 445.906809][ T8283] EXT4-fs (loop3): free_blocks=2415919104 [ 445.926379][ T8283] EXT4-fs (loop3): dirty_blocks=224 [ 445.939990][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 445.949085][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 445.957637][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 445.966441][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 445.974864][ T5172] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.982048][ T5172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.985633][ T8283] EXT4-fs (loop3): Block reservation details [ 446.000578][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 446.008558][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 446.019131][ T8283] EXT4-fs (loop3): i_reserved_data_blocks=14 [ 446.039968][ T8284] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 446.063447][ T8061] device veth1_macvtap entered promiscuous mode [ 446.105344][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 446.119052][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 446.128673][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 446.152343][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 446.161152][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 446.192084][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 446.195165][ T8289] loop1: detected capacity change from 0 to 512 [ 446.213123][ T8289] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 446.239715][ T8141] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 446.255728][ T8141] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 446.270803][ T8289] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 446.294785][ T8289] EXT4-fs (loop1): fragment/cluster size (4096) != block size (1024) [ 446.327338][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.346129][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.358964][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.374766][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.384822][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.409239][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.428928][ T8061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.438675][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 446.472057][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 446.516194][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 446.536098][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 446.554703][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 446.594789][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 446.617820][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 446.629646][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 446.645495][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.667283][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.679662][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.695270][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.705460][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.716232][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.742532][ T8061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.763515][ T8061] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.773312][ T8061] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.783801][ T8061] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.800896][ T8061] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.816352][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 446.836888][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 447.030231][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.039226][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.093127][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 447.156965][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.174376][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.200068][ T5852] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 447.341457][ T8316] loop2: detected capacity change from 0 to 1024 [ 447.412250][ T8316] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 447.422937][ T8316] hfsplus: failed to load root directory [ 447.490509][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 447.493408][ T8319] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 447.497940][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 447.554783][ T8141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.634609][ T8324] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 447.648610][ T8325] loop0: detected capacity change from 0 to 256 [ 447.678731][ T8325] exfat: Deprecated parameter 'utf8' [ 447.709390][ T8325] exfat: Deprecated parameter 'namecase' [ 447.739404][ T8325] exfat: Deprecated parameter 'utf8' [ 447.755024][ T8327] device vlan2 entered promiscuous mode [ 447.784484][ T8327] team0: Device vlan2 is already an upper device of the team interface [ 447.793571][ T8298] loop3: detected capacity change from 0 to 40427 [ 447.809597][ T8325] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 447.848810][ T8298] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288) [ 447.892454][ T8298] F2FS-fs (loop3): invalid crc value [ 447.908586][ T8298] F2FS-fs (loop3): invalid crc value [ 447.933324][ T8298] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 447.982351][ T8325] exFAT-fs (loop0): error, tried to truncate zeroed cluster. [ 448.019706][ T8325] exFAT-fs (loop0): error, tried to truncate zeroed cluster. [ 448.031752][ T8325] syz-executor.0: attempt to access beyond end of device [ 448.031752][ T8325] loop0: rw=2049, sector=34359738488, nr_sectors = 8 limit=256 [ 448.591311][ T8339] loop0: detected capacity change from 0 to 2048 [ 448.727644][ T8339] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 448.920483][ T8339] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 449.016155][ T8339] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 201 with error 28 [ 449.054427][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 449.073244][ T8339] EXT4-fs (loop0): This should not happen!! Data will be lost [ 449.073244][ T8339] [ 449.098248][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 449.104286][ T8339] EXT4-fs (loop0): Total free blocks count 0 [ 449.123540][ T8141] device veth0_vlan entered promiscuous mode [ 449.136234][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 449.146148][ T8339] EXT4-fs (loop0): Free/Dirty block details [ 449.170413][ T8339] EXT4-fs (loop0): free_blocks=2415919104 [ 449.176163][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 449.180483][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 449.218131][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 449.226341][ T8339] EXT4-fs (loop0): dirty_blocks=224 [ 449.237747][ T8141] device veth1_vlan entered promiscuous mode [ 449.239521][ T8339] EXT4-fs (loop0): Block reservation details [ 449.297873][ T8339] EXT4-fs (loop0): i_reserved_data_blocks=14 [ 449.306882][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 449.333614][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 449.349473][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 449.389642][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 449.411761][ T3763] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 449.415745][ T8141] device veth0_macvtap entered promiscuous mode [ 449.437122][ T8359] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 449.464133][ T8332] loop1: detected capacity change from 0 to 40427 [ 449.477191][ T8141] device veth1_macvtap entered promiscuous mode [ 449.580179][ T8332] F2FS-fs (loop1): Found nat_bits in checkpoint [ 449.586380][ T8141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.633909][ T8141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.707891][ T8141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.737843][ T8141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.768893][ T8141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.797235][ T8332] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 449.813184][ T8141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.836661][ T8141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.855684][ T8141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.875294][ T8332] ------------[ cut here ]------------ [ 449.881334][ T8332] kernel BUG at fs/f2fs/file.c:101! [ 449.893902][ T8141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.906633][ T8332] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 449.912723][ T8332] CPU: 0 PID: 8332 Comm: syz-executor.1 Not tainted 6.1.92-syzkaller #0 [ 449.921060][ T8332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 449.931116][ T8332] RIP: 0010:f2fs_vm_page_mkwrite+0xf42/0x1410 [ 449.937203][ T8332] Code: fe e9 a6 f4 ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 07 fb ff ff e8 cd 57 20 fe e9 fd fa ff ff e8 13 53 c9 06 e8 4e d8 c8 fd <0f> 0b e8 47 d8 c8 fd 4c 89 ff 48 c7 c6 a0 73 31 8b e8 48 89 08 fe [ 449.956820][ T8332] RSP: 0018:ffffc90002faf7c0 EFLAGS: 00010287 [ 449.962902][ T8332] RAX: ffffffff83c1b502 RBX: 0000000000000400 RCX: 0000000000040000 [ 449.970884][ T8332] RDX: ffffc90004a3a000 RSI: 00000000000008e7 RDI: 00000000000008e8 [ 449.978858][ T8332] RBP: ffffc90002faf908 R08: ffffffff83c1aa71 R09: ffffed100df1bf03 [ 449.986834][ T8332] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90002fafb70 [ 449.994809][ T8332] R13: 0000000020010601 R14: 0000000020010602 R15: ffff88806f8df810 [ 450.002786][ T8332] FS: 00007f97b2dee6c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 450.011718][ T8332] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 450.014369][ T8368] device vlan3 entered promiscuous mode [ 450.018287][ T8332] CR2: 0000001b30a2e000 CR3: 000000007732e000 CR4: 00000000003506f0 [ 450.018307][ T8332] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 450.018320][ T8332] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 450.025601][ T8368] team0: Device vlan3 is already an upper device of the team interface [ 450.031784][ T8332] Call Trace: [ 450.031793][ T8332] [ 450.031800][ T8332] ? __die_body+0x5e/0xa0 [ 450.031830][ T8332] ? die+0x83/0xb0 [ 450.031853][ T8332] ? do_trap+0x11e/0x350 [ 450.074371][ T8332] ? f2fs_vm_page_mkwrite+0xf42/0x1410 [ 450.079823][ T8332] ? f2fs_vm_page_mkwrite+0xf42/0x1410 [ 450.085270][ T8332] ? do_error_trap+0x13d/0x1e0 [ 450.090024][ T8332] ? f2fs_vm_page_mkwrite+0xf42/0x1410 [ 450.095469][ T8332] ? do_int3+0x30/0x30 [ 450.099526][ T8332] ? report_bug+0x3e0/0x500 [ 450.104016][ T8332] ? rcu_is_watching+0x11/0xb0 [ 450.108765][ T8332] ? handle_invalid_op+0x2c/0x40 [ 450.113694][ T8332] ? f2fs_vm_page_mkwrite+0xf42/0x1410 [ 450.119142][ T8332] ? exc_invalid_op+0x2f/0x40 [ 450.123813][ T8332] ? asm_exc_invalid_op+0x16/0x20 [ 450.128831][ T8332] ? f2fs_vm_page_mkwrite+0x4b1/0x1410 [ 450.134275][ T8332] ? f2fs_vm_page_mkwrite+0xf42/0x1410 [ 450.139721][ T8332] ? f2fs_vm_page_mkwrite+0xf42/0x1410 [ 450.145172][ T8332] ? f2fs_filemap_fault+0x300/0x300 [ 450.150359][ T8332] ? do_raw_spin_lock+0x14a/0x370 [ 450.155376][ T8332] do_page_mkwrite+0x1a1/0x5f0 [ 450.160137][ T8332] wp_page_shared+0x164/0x380 [ 450.164807][ T8332] handle_mm_fault+0x2525/0x5340 [ 450.169733][ T8332] ? mt_find+0x29a/0xc60 [ 450.173965][ T8332] ? mt_find+0x29a/0xc60 [ 450.178208][ T8332] ? numa_migrate_prep+0x250/0x250 [ 450.183317][ T8332] ? lock_mm_and_find_vma+0xae/0x2e0 [ 450.188595][ T8332] exc_page_fault+0x26f/0x660 [ 450.193354][ T8332] asm_exc_page_fault+0x22/0x30 [ 450.198200][ T8332] RIP: 0010:copy_user_short_string+0xd/0x40 [ 450.204087][ T8332] Code: 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 0f 1f 80 00 00 00 00 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 450.223682][ T8332] RSP: 0018:ffffc90002fafd70 EFLAGS: 00050202 [ 450.229740][ T8332] RAX: ffffffff84385601 RBX: 00007fffffffeff0 RCX: 0000000000000002 [ 450.237699][ T8332] RDX: 0000000000000000 RSI: ffffc90002fafde0 RDI: 0000000020000280 [ 450.245656][ T8332] RBP: ffffc90002fafe50 R08: 00000000665cf019 R09: fffff520005f5fbe [ 450.253613][ T8332] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000010 [ 450.261571][ T8332] R13: dffffc0000000000 R14: 0000000020000280 R15: ffffc90002fafde0 [ 450.269536][ T8332] ? _copy_to_user+0x71/0x130 [ 450.274203][ T8332] _copy_to_user+0xe9/0x130 [ 450.278692][ T8332] put_timespec64+0xf6/0x150 [ 450.283282][ T8332] ? pvclock_gtod_unregister_notifier+0x50/0x50 [ 450.289512][ T8332] ? get_timespec64+0x270/0x270 [ 450.294358][ T8332] ? restore_fpregs_from_fpstate+0xfc/0x230 [ 450.300255][ T8332] __x64_sys_clock_gettime+0x1cd/0x220 [ 450.305702][ T8332] ? print_irqtrace_events+0x210/0x210 [ 450.311152][ T8332] ? __ia32_sys_clock_settime+0x270/0x270 [ 450.316857][ T8332] ? syscall_enter_from_user_mode+0x2e/0x230 [ 450.322824][ T8332] ? lockdep_hardirqs_on+0x94/0x130 [ 450.328010][ T8332] ? syscall_enter_from_user_mode+0x2e/0x230 [ 450.333996][ T8332] do_syscall_64+0x3b/0xb0 [ 450.338424][ T8332] ? clear_bhb_loop+0x45/0xa0 [ 450.343104][ T8332] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 450.348990][ T8332] RIP: 0033:0x7f97b207cee9 [ 450.353395][ T8332] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 2024/06/02 22:20:10 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 450.372986][ T8332] RSP: 002b:00007f97b2dee0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 450.381388][ T8332] RAX: ffffffffffffffda RBX: 00007f97b21b3fa0 RCX: 00007f97b207cee9 [ 450.389347][ T8332] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000000 [ 450.397307][ T8332] RBP: 00007f97b20c947f R08: 0000000000000000 R09: 0000000000000000 [ 450.405265][ T8332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.413234][ T8332] R13: 000000000000000b R14: 00007f97b21b3fa0 R15: 00007fff27ddd4d8 [ 450.421206][ T8332] [ 450.424212][ T8332] Modules linked in: [ 450.449843][ T8332] ---[ end trace 0000000000000000 ]--- [ 450.483013][ T8332] RIP: 0010:f2fs_vm_page_mkwrite+0xf42/0x1410 [ 450.489110][ T8332] Code: fe e9 a6 f4 ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 07 fb ff ff e8 cd 57 20 fe e9 fd fa ff ff e8 13 53 c9 06 e8 4e d8 c8 fd <0f> 0b e8 47 d8 c8 fd 4c 89 ff 48 c7 c6 a0 73 31 8b e8 48 89 08 fe [ 450.513075][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 450.530687][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 450.550498][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 450.561324][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 450.609858][ T5852] usb 3-1: new high-speed USB device number 7 using dummy_hcd