last executing test programs: 16.402251604s ago: executing program 4 (id=728): syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000005240), 0x1, 0x51aa, &(0x7f0000005280)="$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") truncate(&(0x7f0000000000)='./file1\x00', 0x100003) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000001c0)={0x0, 0x0, 0x1}) 13.138202321s ago: executing program 4 (id=745): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3e8, 0x100, 0x0, 0x0, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg1\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 13.067923337s ago: executing program 4 (id=746): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f0000000080), 0x18) r1 = socket$can_j1939(0x1d, 0x2, 0x7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r5}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r5}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='d', 0x1}}, 0x0) connect(r0, &(0x7f0000000300)=@sco, 0x80) 11.803203067s ago: executing program 2 (id=749): syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='ceph\x00', 0x0, 0x0) 11.802192517s ago: executing program 4 (id=750): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xffffffff, 0x5}, 0x48) 11.725738443s ago: executing program 4 (id=752): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0xffffeffd, 0xfffffff8}, 0x8) close(r0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='pids.current\x00', 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000001c0)="101fffffffffffffed934b670a1bf2f9a5b3172aacb9e10100000000000010000084a5aa982adc83e2f6a05b43ef0de52b1f84a397813c1269246f1b2118823010d8cc873d35569996fe90187bfa935c0d1fa7ac7f", 0x55}], 0x2}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000400000007311730000000000040000000000000095000000000000006565765ff2bb01a35af4e3520e4df02cedc9cbe1ed00000000"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x90) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) brk(0x0) 11.582781134s ago: executing program 4 (id=755): syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000005240), 0x1, 0x51aa, &(0x7f0000005280)="$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") truncate(&(0x7f0000000000)='./file1\x00', 0x100003) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000001c0)={0x0, 0x0, 0x1}) 11.419502057s ago: executing program 2 (id=757): syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x80085e, &(0x7f0000000080)=ANY=[], 0xa, 0x23c, &(0x7f0000000500)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x5}, @void, @eth={@multicast, @broadcast, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@canfd={0xd, {{0x3, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "a337b0b493bca0a8d82d4872f5e905b55d9dff22b8ceaa0343fbf6496c6e38dd0765431d1a961b2ff095910d7e9c15ecd97efa5c042fe508ee3b6cc1f2228144"}}}}}, 0x5e) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101202, 0x0) read$nci(r1, &(0x7f0000000100)=""/107, 0x6b) write$nci(r1, &(0x7f0000001440)=ANY=[], 0x4) 11.290534667s ago: executing program 2 (id=760): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f00000000c0)={0x0, 0x8}) 11.202206344s ago: executing program 2 (id=762): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f0000000080), 0x18) r1 = socket$can_j1939(0x1d, 0x2, 0x7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r5}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r5}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='d', 0x1}}, 0x0) connect(r0, &(0x7f0000000300)=@sco, 0x80) 10.049884315s ago: executing program 2 (id=763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0xff}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 9.940357034s ago: executing program 2 (id=764): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) listen(r1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) 9.258618138s ago: executing program 1 (id=771): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) connect$netrom(r0, 0x0, 0x0) listen(r0, 0x0) accept$netrom(r0, &(0x7f0000000180)={{0x3, @netrom}, [@netrom, @netrom, @bcast, @netrom, @rose, @bcast, @remote, @netrom]}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44004}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x1080}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x8}]}}}]}, 0x48}}, 0x4040) listen(r1, 0xffff3fbc) accept$netrom(r0, 0x0, 0x0) unshare(0x40000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r2, &(0x7f0000000100), 0x10000000000002fc) writev(r0, &(0x7f0000000000)=[{&(0x7f00000005c0)='B', 0xfdef}], 0x1) 5.306097911s ago: executing program 0 (id=787): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000580)={@void, @void, @eth={@broadcast, @remote, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x4e23, 0x18, 0x0, @wg=@data}}}}}}, 0x42) 5.194126169s ago: executing program 3 (id=788): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x27, 0x803, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40345410, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(r3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000300)={'veth1\x00', &(0x7f0000001e00)=@ethtool_rx_ntuple={0x35, {0x0, @sctp_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x4e24, 0x4}, @tcp_ip4_spec={@empty, @dev={0xac, 0x14, 0x14, 0x14}, 0x4e21, 0x4e23, 0x9}, 0x401, 0x8, 0x101, 0xfffffffffffffffb, 0xffffffffffffffff}}}) sendmsg$NL80211_CMD_DEL_KEY(r1, 0x0, 0x8085) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="84010000100013070000000000000000fe880000000000000000000000000001fc01000000000000000000000000000000000000000000000000ac62", @ANYRES64=r3, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe8000000000000000000000000000bb00"/144], 0x184}}, 0x0) epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x38}, 0x48) shutdown(0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x6}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0x8, 0x6}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.105443015s ago: executing program 3 (id=789): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000640)=0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f0000000040)=[{r0, 0x140}], 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 3.857695715s ago: executing program 0 (id=790): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x7e87e60b9a9e954c, 0x40000}}}}}}]}, 0x48}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xd, &(0x7f0000000340)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, r1}, 0x48) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e0e, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0xffffffffffffffff, [{0x6, 0x2}]}]}}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000ab6999d0080000000000007b8af8ff00000000bfa200000000000007020004f8ffffffb70300000800000023677b237243b88f85001c00820000009500000000000000c2fd72f0e426650d684e7c36d690b608a4df357dc84a365845b29ddcd1ce5566f22aeb699e2b4c853ca71dcf52819eca06b68fe1"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @multicast2}, @in6={0xa, 0x0, 0x0, @private1}], 0x2c) sendmmsg$inet6(r5, &(0x7f0000000840)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000380)="d0", 0x1}], 0x1}}], 0x1, 0x64004045) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) socket$inet6(0xa, 0x3, 0x8000000003c) 3.305307819s ago: executing program 0 (id=791): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2, 0x0, 0x0, 0x0, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r5 = accept4(r1, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) splice(r5, 0x0, r0, 0x0, 0x16, 0x0) 3.201878657s ago: executing program 3 (id=792): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x208008, &(0x7f0000000000)=ANY=[], 0x80, 0x14e, &(0x7f0000000e40)="$eJzs2r9Kw0AcB/AfWBE6OjoFKlHQ/Ne66ljcfIPQ5tLgxZREkPYFxElQOAdfQvAJfISMbroI+hKRmKMmUWxRIR2+n+W+8Gvvfr0rN50WR6HFEo1oe3R19LIaR6HSdfb6zGIuFXpEpOQhzbIbnb54mtbTjPRvPtCs9bdi7Gz64vCCBdyzm24JAAAAAAAAAAAAAAAAAAAAAADmpLZlaA9FeM4C7lmlajKeHLuce3HSUHuNUxX5houY4Lf5/jiV+tYrkbqfp0AcxHndrH7/WoaNoeDP9f01TsORkYwnWhC6vud7J7btdM0d09y1jY+5jPqM6p3sidLs3tQpk6b10nuzx3nem8nzb60F4vKsvtrn+SMg/DX0WvhH/S4s0UK0UQozbpXWzHtnUbSXi3Gw4nQe8vtP70d8IIv/u2dyJaqWmvrhAPCz9wAAAP//MKk80A==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x10400) read$FUSE(r0, &(0x7f000000bbc0)={0x2020}, 0x2020) 3.113979914s ago: executing program 3 (id=793): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x20}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0xfdbc, 0x4000, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000280)='p', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x70d, 0x4) sendto$inet(r0, &(0x7f0000000100)='\\', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)="ab", 0x14078, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 2.892758572s ago: executing program 1 (id=794): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0xb, &(0x7f0000000000)=ANY=[], 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x80085502, &(0x7f00000000c0)={{}, "c4005a51cf48a456fe399e96793568de827d6e3af15928143f77a2c2bf19506fac2c94a8808e7365569e94b6012f452ddbdb4acaadf3199a4fa57eab4549a87e05bb9a155f3d08704dc753cff79d5128dc113e58ecd5a19e0bc7bef139e74acaed4f126be4cc57e22d44a734c7f2c44b2b2dc3ecfb59318827549e5b2679b3cc4f9e5df2bc30b674fb5f8e181e7dab6cc37989c9911a3d5b32ac444ebf78c76d68c313ed1bcaa4bfcdddc200878c72704b48f4cda8c86a41c703694c1e57aaf73751f45d5ed54010c14c30ea8ca2f620ab57b6ad6bdf3263aeab2de44576b10a1040c6cc84fcf2cb5037e025b227baf26e0c5bda231531365c778ef42bc49fd603b98b7b5173f2f1669834e8cd5167092f5d56e6c2623165710ec863179f143dba38551641ea77676773f3a18e97ada500fe448f172e6e714e16079d8233626d4c5c08c9117c5872c5d815ae0d481c25f2cfd2c76c6723e5ee78d5941b7d49e3d123294dd4c04c2691c5d086393047e3fd027daebf2114d1e9da89a36a49f7a411638060e87593ed8e45fb4292ff888e2eb7b776c9428623a34454eb2f11a47b43707e4b161faa8b8dc0d9cb2a0ac253ab41d0172190749ae06af564cabff5a0ba5df004c44138b49d2e17944f6588839fdedcf6ddef583df85490fa3a956e416e02943d56f734c3d3aa8b4898544e8f417c79bb5532b4ab2393c6723488c627a285686a0dac4cd6df370ab806b80f251256cfc058f8c2c2b46dca533048a18315caca12ad5915f077285ffbe1a4b5f46f2af4e45695348200e1f5a57a698acae6b4f6124fc076af5f40c3461e91b2639a84be51abe62d27cde1642731d31ae1264d20a21011bd221f8d0e4fc9835ccb61405e1ba6fcd48b9d3487909f89a0f40f91abfd3d33876b707d908bd2b076d37f5b2e2d530210e3930cf0418c3a7d8d4ac8cd16b4d2b2d4ebf6134c88813a808d82c86a20b7beb6534bb112b374d5b0a2beacb4e37872a2df879ebd568f0b20ce7d4aeb5ef6c960093b8a3d0e0332d821fdd099269364539d876caf78e60232baf7cc26589453666f17f94ac05fc2b752546a9586f9f18288e5944effa6f912709652113377ee14d949842910b0af467706b42d969908840fe55857f526694cdacb7735f2e0bdc49ca50ca57193aec63535f679e1486185bae007a7cd345bf8d7428e1a2881f6d327ee34ef0bbd67b51d25000fc59ed894c001ca327898dc4a3e7c33e20542772f31e7f125eedec11604b6569f051e643bff91d616284d2ea0f25320c22caba4d681781a13bf341dc22f882540aaab75d5bba9bbfe8aa960705d1d903a7ed8b7a14cc18b2ec9d1640ba3b6cf9c2a6cde4f7b23d1eb42fa57d2b2206c6cd6f84a5b7d682a09064e341c844edd3361f2e457a5057e1c3d97916190d9749adbadb70797f1729cc01c6146a23942e245021fe02748e2235582b36df8236c8b25fa94d1ed7e495f0df447b36f609b17526b2c8c43f1ded38f99344f2553fd911deed701d89fdf92ed6368d74f6f09ce2d26a3916f28eda4fac022f043aff14bab96f3841980533b2f935cfe7e40ad9cc77557d50a32a73aa71ae37a0cece6580887608d028b55fa7a1a1cf214098fe13c1a32ee5890e3d2c9a4d23041f89bac353aa1641df4375080b2181555e9667082a35b041645be39a47298b747eed9d127d8d342b620d0ecd2a48a86bd7dbfa04b3cfad62f5b1055b2259dc64b02d27599fff87c8303b47174e3ee66645d1eaaa05d63bad90ef4fdb97d21b478b37c313571d5776495460b57ba25dc2a5def286c8e81a3fdaa3dfb1dfb9deec86aa3629a03b9722bd95a96972a32552ba5d74f03989c73598b3ba0ef19151631ba4cf90d1bcc35c7cd2fecd6c271564df5ed232581417488454f5878f09523ce1b966162808d13a86872ad04bc777544ae4477459d197c6aaecf52e229a6cc94d151e014b589311f8e5bb7eb57605a80c11a7df2110b70735ae34a21e467f7bd8c3f81c1f9dfcf9464365566786b086637717df597c05b45249b04faa2269ca5a3fca2f1797682f24a34c9f70c27b6dd47fe9f6f006c934481524985afeec903f160c4e2c36c2bbe2081ff33733ca17ca2a2d794fd3af80d5a1adcbfa384e1ba851f4a554433e532f321b332d640513c9df326ddaa4691201f94d1b4b82b82f9bb986e00242fce6588d906cd820640a59707cecf78533496fdc49d90effde5769812ae474ef31adb849542ef23359a640eeeadecf273713a46e96c836823012fc190c8d1dd88d965fbe11074da36375c11fedc648160b55b8b8bc830b72a6f98b1396a72d96f06fab40ddd4729dc162d30e8a34c4041cc22fd62eb501fa685ae7d53376cca12e40f53edd0ae8abbb666c75a6ca8658b4ef8810931158868afb757831d14e81cdadc995fcb98e2da29300480ca03494f81b59985dbe3da8634a3c4a00626d08d6f1f997ccd63a1a103d292d29cdf15b2c4bca2f34ba406a47d9a184ed712356257ec45aa9a8ed8b8daca20f6a2edb1494a2af100000000000000006f1bfeb0edfdb1f10b66753f3fe900b95be3aafbfb5e2976de8b2c6b485243770da0cdc8f4d7384b6f39817f5661429442b20cab08cc28cf814ebf10d7ad4de140241ec169d70781524127a9454e5f1ee9fd5652818683a2f7ff0b11c8fea2ff7398e01df48c8eb62123f2630d561470003d020f4cc8923654fcf65d400ed0792af6bf1876099951e938adc275f47b9ba178b8ae3e9b295fab66c144ad8ad2fd29bced367833b76b2f0ded8dfead5dfccfc9ba2d658688abeb41f53eaf6efa82e5947f8d7a6e1010517032443507f5bd419317324000ca02e49db1cb985f8f11149496bfe54629f3f759c3100e0ab50c95446fd390a87b884930763ac810bdcdaee81b64343b955eba24d34d816bcf3eb5df1b6b44317e033a9015640942da607e3ea61727b97eab7511ff680dc5f4e54fa19e07c0023152272edc066010e661de98f73f913bc04983b325ff62134b41081dce65528af69b5206f9522b3e09f78dea218621e60f5ca9c58212526d96aace431133528b8a5354b213ef4883ef271e488bf629284c277843202bf7a41dbe2616e8338ab14f83bd6da1d1c4a4b50b6372564187a497036f2040f77c099bd0d98d3e4eebd4bf433360c518fc965e966642a22a335f3a9688336bd254dc9fe32632d4c1599c6b72fca290d9cae38548f4ad5d2a165053b7d392276d81ff26e97ebcfa210eddc832240de22bbfc6623929aa2d8bad6c41db54e2125063f9153e98b2316ae5e9d51a3a9efe5a81242f7045dbafa8db63cafad19e32b767dcd5adfd5e5459dce45c71f61a18a3e6a7de43bd61d6015fac48dcecb60795e02b30dc04cc4a408abc2dee10a97fb387a229ba5c07cebc63037c0102c846393b2bf865db38e51ce44b5cede8d530cb6496e5a34b9b0b060b8bd6f98cd53169518a1732d92af494c351f8ce753754f7d944865de345d8520a9232a1c5e516e61f23c39e09bac5d7c70a478e0b7a3208f61f090f69b9ab33da7a8ae16626c3d26f11065fd46851eff2c5968f937e90abe02555cad9e54b4bcaf3ee55aba96406cd457e27c1ad5b9cc640afff1d94d7d5f854fd50a66bf37355c548f840129ae0d81dc23202e4d7921236172d1c4920c1bf5e7bfad21740acd8f5fa278b6de2336276e271045d0ef0a9a566ae988269cb16f7eee941941d3a9f05d754cbb92a27ad9cb374872c3566a9db35920d63f0cfa69ef8dfc41f307f7c1f1ae712e3f6001e57e1de99777212ede107b692182c507b168c77a3824f0cd663f6d2ffe73e3d90587b3444e9a3cb093ddefd2869db927938ecf6cbd16a85d0849b7c829a37b70b24868e7ab1aa2adc012d85a8bf374225281b50882a40e6bed667f0538d8c85768cc9d8537bedfebe64cddf937a150c565e3824a75f5e7a173fed0ed3b3aa8750fde47ce1c219d5fc1977abc24c7a28aa8251e29a17eee3405d4c1f1f5e8b53df9425d6dde4b9de4715097c58062a977637b42974a40f0bf24dcca060871b759e5f42a12da7d89a494468f6c91c47ac17e7bfd61e62872541fd5d3941c0f0ebca3de06ca63cb52b186737fc61ade4eaed0fd5dd1eb4b8e2d2ebb689741fb354c8bbdc9092f68a156952395585113d78254ec826ba49204d76b8dcd854c4cf942c50c38ad5f8db2bf032d5eced178b25e56f9b39961aea03785119cab42fffbbbeaa15f0c21511f441fd72ab25014dbe5a35dfe295486e0d2e5803304deff8736e1d8df7886e4725321bc450c68459f01b5b3014735e81f989945e59b4c5e367976e90124e9cf422cc0f0d624627ab83ccd65ac7c1b91424672ebb3d91d932994c6e215a9d60efb6ed87eb579951668273e9a38f9089179459d2f670a21bd999a97c968891c59402d188dc601ef033fb9af3291b8778f2a38d379913a02d2215f2960f80847afe4d65f1fc7bcd1995e83fc88d87d799af0bf16060780efc8dbd08b041d8c2f646ca18ea18d3d295e172b344b6aea8d2a2620b6379c5c368459fee07bfcc83c83acaf3dc67755bbe8fe58b1a39051ef2327b30c886a0a5183e38c199e32365cb8194deade3262ea5ffa559b789da10f2948e135ce5858e1b016c153b14795a085b5bef350f95487a3f748afa943179d87a1e8828edc33804c2ea49979074fe162a8a36689286c390585d9f83645be3b921c4a6678b8ffd7edfb7a85265d5796ce4f12595b364fcc81b58c267beaa85dd47ad8c55783fe526d6dd0e3cc1f70a7e88d6f826b18aeab8282ff8e2a13ee8f03fab41be97af13c87883f87e6f0bdda04deebc05e35b601a55cc984478a997725d3faab2101cd9596c757c659e6b6c9178f620fbdcb87e399404f4bcd9b57dd1013818e58a785bed0a7fd1f5e5e355816ceba6745a42e10a145c87aedede2e0bed7bc75015a8354ba95a226c87df41d41e4ae368c4e84e8a032c48977601d71eae547f95375746e1f9c86135481bd09a08fee04db26b96cc9327bbde61cec27a56d114cc0e6459170e6cc44d846a2a55046b505e14dbdac32aa759e5d0268fe819a3dc503247b6c24c1607b4742671f5ad63c21812b1904b3c39ec8734fb1ee77a124a29c50154f53c89754f5e4719cc0279c851a63fc33e16f2393e5134568b78126b5680664fcd1fbf9d88f4efdadc120bbb4f21ddd7bf4c445a534631c5f2c4b51d7842743493b4a13bb99f160987284bc7960aaa6d40dbe05e20f42ff48425d1c8166b7fd457d33d808b456b7b11d3d3c1f445a9698ee8a473fb116c5c4824fa224088fa6f031f07f2972e62592d59536dc4cbe3c1cb33e922b0f35f79f1df10ab43e1d3e5dc480bdd8a7039f71ee9c73f976809ec2853ad0c18e4f0ee73fd1361591375d3db6c822e7baae597fc454aae7b426922e9fd9a87fe52a25d5cd03434d7ffb9f319fbeb403c0836f2117cf851bf7660ecb567a6cd918e85190683c1c0a79da1cd92b8527400008f047a436a4859be0e7b9469c6830a81d81f93ea8ba1b614de4386296089c9b34f4b8116ae7afedd43f6a82abf4302e4d8a9fba0b87347df1f5bb676f496bf29bf9ea9e3ea4bd1dd3f3d4feb7609f96424f35035b5a13fd6efd0441dea1c1f17feae7d5a1ef77aa05537fc87cc2021c92d5cbbbd159258a45972e112e123e306ef0daa36e1ff069be815c5d0b74b6b41c6d5b76c04057de0a43c2e40b04fc11b60f0f1e7ff0b88fb600d79e03cc8b73fed0af95601acca"}) 2.419619219s ago: executing program 0 (id=795): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x2000000, &(0x7f0000000000)=ANY=[], 0x7e, 0x1cf, &(0x7f0000000200)="$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") llistxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) 2.362253883s ago: executing program 1 (id=796): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f0000000080), 0x18) r1 = socket$can_j1939(0x1d, 0x2, 0x7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r5}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r5}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='d', 0x1}}, 0x0) connect(r0, &(0x7f0000000300)=@sco, 0x80) 2.265750971s ago: executing program 0 (id=797): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x27, 0x803, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40345410, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(r3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000300)={'veth1\x00', &(0x7f0000001e00)=@ethtool_rx_ntuple={0x35, {0x0, @sctp_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x4e24, 0x4}, @tcp_ip4_spec={@empty, @dev={0xac, 0x14, 0x14, 0x14}, 0x4e21, 0x4e23, 0x9}, 0x401, 0x8, 0x101, 0xfffffffffffffffb, 0xffffffffffffffff}}}) sendmsg$NL80211_CMD_DEL_KEY(r1, 0x0, 0x8085) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="84010000100013070000000000000000fe880000000000000000000000000001fc01000000000000000000000000000000000000000000000000ac62", @ANYRES64=r3, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe8000000000000000000000000000bb00"/144], 0x184}}, 0x0) epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x38}, 0x48) shutdown(0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x6}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0x8, 0x6}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.221032864s ago: executing program 3 (id=798): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={0x0}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other'], 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r1, 0x3, r0, 0x5}) 1.215610714s ago: executing program 1 (id=799): unshare(0x2040600) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541d, 0x0) 1.158428158s ago: executing program 1 (id=800): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x1, @raw_data}) 998.581372ms ago: executing program 1 (id=801): socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1, 0x4, 0x2}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @val=@tcx}, 0x40) syz_emit_ethernet(0x22, &(0x7f0000000100)={@broadcast, @local, @val={@void}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "534ead40a3537293"}}}}, 0x0) 130.37µs ago: executing program 0 (id=802): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) connect$netrom(r0, 0x0, 0x0) listen(r0, 0x0) accept$netrom(r0, &(0x7f0000000180)={{0x3, @netrom}, [@netrom, @netrom, @bcast, @netrom, @rose, @bcast, @remote, @netrom]}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44004}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x1080}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x8}]}}}]}, 0x48}}, 0x4040) listen(r1, 0xffff3fbc) accept$netrom(r0, 0x0, 0x0) unshare(0x40000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r2, &(0x7f0000000100), 0x10000000000002fc) writev(r0, &(0x7f0000000000)=[{&(0x7f00000005c0)='B', 0xfdef}], 0x1) 0s ago: executing program 3 (id=803): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) mount(&(0x7f0000000c80)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)='v7\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): ng '.' [ 58.328164][ T3971] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /33/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 58.374930][ T3971] EXT4-fs error (device loop4): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 58.406421][ T3971] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 58.409659][ T3971] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /33/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 58.451916][ T3971] EXT4-fs error (device loop4): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 58.463869][ T3971] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 58.474890][ T3971] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 58.762321][ T4331] usb usb8: usbfs: process 4331 (syz.3.111) did not claim interface 0 before use [ 59.373408][ T3971] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 59.435706][ T3971] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 59.447948][ T3971] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 59.461938][ T3971] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 59.593832][ T4330] netlink: 'syz.1.115': attribute type 10 has an invalid length. [ 59.608470][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.611867][ T4330] bond0: (slave team0): Enslaving as an active interface with an up link [ 59.653615][ T1608] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.844533][ T4337] chnl_net:caif_netlink_parms(): no params data found [ 59.904256][ T1608] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.571405][ T1608] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.798120][ T1608] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.803843][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.805684][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.808323][ T4337] device bridge_slave_0 entered promiscuous mode [ 60.815088][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.816990][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.819613][ T4337] device bridge_slave_1 entered promiscuous mode [ 60.899826][ T4337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.925088][ T4337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.028250][ T4337] team0: Port device team_slave_0 added [ 61.031707][ T4337] team0: Port device team_slave_1 added [ 61.056793][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.058891][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.078569][ T4337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.150867][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.157053][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.168906][ T4337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.408975][ T4337] device hsr_slave_0 entered promiscuous mode [ 61.498765][ T4337] device hsr_slave_1 entered promiscuous mode [ 62.171574][ T4397] "syz.2.141" (4397) uses obsolete ecb(arc4) skcipher [ 62.208108][ T4052] Bluetooth: hci2: command 0x0409 tx timeout [ 62.242482][ T4337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.244524][ T4337] Cannot create hsr debugfs directory [ 62.251924][ T4401] loop1: detected capacity change from 0 to 1024 [ 62.301417][ T4403] ip6t_srh: unknown srh invflags 7401 [ 62.381324][ T4401] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 63.492555][ T4052] Bluetooth: hci1: command 0x0409 tx timeout [ 63.801111][ T4389] chnl_net:caif_netlink_parms(): no params data found [ 64.114315][ T4389] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.116225][ T4389] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.119167][ T4389] device bridge_slave_0 entered promiscuous mode [ 64.143645][ T4389] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.156676][ T4389] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.159392][ T4389] device bridge_slave_1 entered promiscuous mode [ 64.173697][ T4337] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.185072][ T4468] "syz.3.154" (4468) uses obsolete ecb(arc4) skcipher [ 64.245992][ T4337] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.282507][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 64.286313][ T4337] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.376157][ T4477] nvme_fabrics: missing parameter 'transport=%s' [ 64.378915][ T4477] nvme_fabrics: missing parameter 'nqn=%s' [ 64.429489][ T4337] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.435555][ T4482] loop1: detected capacity change from 0 to 128 [ 64.484220][ T4389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.510402][ T4389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.548434][ T4482] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 64.635923][ T4389] team0: Port device team_slave_0 added [ 64.639212][ T4389] team0: Port device team_slave_1 added [ 64.711600][ T4494] "syz.3.163" (4494) uses obsolete ecb(arc4) skcipher [ 64.784012][ T4389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.785778][ T4389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.799141][ T4389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.805612][ T4389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.807346][ T4389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.827946][ T4389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.865290][ T4502] capability: warning: `syz.3.166' uses deprecated v2 capabilities in a way that may be insecure [ 64.939671][ T4337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.950953][ T4506] loop1: detected capacity change from 0 to 512 [ 64.974770][ T4337] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.981341][ T1608] device hsr_slave_0 left promiscuous mode [ 65.003637][ T1608] device hsr_slave_1 left promiscuous mode [ 65.011948][ T4506] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,barrier=0x0000000000000002,errors=remount-ro,delalloc,. Quota mode: writeback. [ 65.039502][ T4506] EXT4-fs error (device loop1): ext4_xattr_block_find:1851: inode #15: comm syz.1.165: corrupted xattr block 32 [ 65.048360][ T4506] EXT4-fs (loop1): Remounting filesystem read-only [ 65.072668][ T1608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.074955][ T1608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.078309][ T1608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.080264][ T1608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.084054][ T1608] device bridge_slave_1 left promiscuous mode [ 65.086753][ T1608] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.126917][ T1608] device bridge_slave_0 left promiscuous mode [ 65.128621][ T1608] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.282879][ T1608] device veth1_macvtap left promiscuous mode [ 65.284887][ T1608] device veth0_macvtap left promiscuous mode [ 65.286503][ T1608] device veth1_vlan left promiscuous mode [ 65.288841][ T1608] device veth0_vlan left promiscuous mode [ 65.388811][ T4523] loop1: detected capacity change from 0 to 128 [ 65.440056][ T4523] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 65.562594][ T4016] Bluetooth: hci1: command 0x041b tx timeout [ 65.630544][ T4526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.175'. [ 65.707870][ T4530] loop1: detected capacity change from 0 to 512 [ 65.757112][ T4530] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,barrier=0x0000000000000002,errors=remount-ro,delalloc,. Quota mode: writeback. [ 65.760271][ T1608] team0 (unregistering): Port device team_slave_1 removed [ 65.813063][ T1608] team0 (unregistering): Port device team_slave_0 removed [ 65.826665][ T4530] EXT4-fs error (device loop1): ext4_xattr_block_find:1851: inode #15: comm syz.1.177: corrupted xattr block 32 [ 65.831727][ T1608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.837177][ T4530] EXT4-fs (loop1): Remounting filesystem read-only [ 65.909439][ T1608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.088349][ T1608] bond0 (unregistering): Released all slaves [ 66.186184][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.190037][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.222384][ T4554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'. [ 66.231342][ T4389] device hsr_slave_0 entered promiscuous mode [ 66.267199][ T4389] device hsr_slave_1 entered promiscuous mode [ 66.333977][ T4558] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 66.356874][ T3961] Bluetooth: hci2: command 0x040f tx timeout [ 66.369124][ T4560] loop1: detected capacity change from 0 to 512 [ 66.377560][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.380256][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.382868][ T4538] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.384820][ T4538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.406230][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.413794][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.425308][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.437255][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.439153][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.510564][ T4560] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,barrier=0x0000000000000002,errors=remount-ro,delalloc,. Quota mode: writeback. [ 66.537916][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.558710][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.602674][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.607391][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.610540][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.626228][ T4560] EXT4-fs error (device loop1): ext4_xattr_block_find:1851: inode #15: comm syz.1.188: corrupted xattr block 32 [ 66.626879][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.634425][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.637155][ T4560] EXT4-fs (loop1): Remounting filesystem read-only [ 66.698396][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.701676][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.704079][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.706512][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.723291][ T4573] loop2: detected capacity change from 0 to 128 [ 66.743687][ T4389] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.757073][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.762868][ T4575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.195'. [ 66.805371][ T4573] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 66.869070][ T4578] nvme_fabrics: missing parameter 'transport=%s' [ 66.870875][ T4578] nvme_fabrics: missing parameter 'nqn=%s' [ 66.900556][ T4389] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.960571][ T4389] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.966475][ T4587] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 66.992392][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.994601][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.001673][ T4337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.091578][ T4389] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.126382][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.129092][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.161599][ T4337] device veth0_vlan entered promiscuous mode [ 67.184388][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.186886][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.189604][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.191914][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.195343][ T4598] loop2: detected capacity change from 0 to 512 [ 67.208131][ T4337] device veth1_vlan entered promiscuous mode [ 67.261240][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.264338][ T3961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.270302][ T4337] device veth0_macvtap entered promiscuous mode [ 67.276442][ T4337] device veth1_macvtap entered promiscuous mode [ 67.286978][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.291499][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.294259][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.297024][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.337007][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.354252][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.377944][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.380790][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.398848][ T4598] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,barrier=0x0000000000000002,errors=remount-ro,delalloc,. Quota mode: writeback. [ 67.435966][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.453154][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.456053][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.458584][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.463315][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.464289][ T4607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.480756][ T4598] EXT4-fs error (device loop2): ext4_xattr_block_find:1851: inode #15: comm syz.2.202: corrupted xattr block 32 [ 67.483333][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.486789][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.489279][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.491950][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.493409][ T4598] EXT4-fs (loop2): Remounting filesystem read-only [ 67.516171][ T4609] loop1: detected capacity change from 0 to 128 [ 67.536960][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.539576][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.568899][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.573307][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.579090][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.601229][ T4337] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.604419][ T4337] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.606643][ T4337] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.608858][ T4337] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.619362][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 67.627094][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.629896][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.670630][ T4609] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 67.796348][ T4389] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.861111][ T4389] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.938211][ T4607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.948634][ T4389] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.010259][ T4423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.015696][ T4423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.016559][ T4389] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.231782][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.520390][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.546807][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.723482][ T3553] Bluetooth: hci2: command 0x0419 tx timeout [ 68.840075][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.186217][ T4636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.216'. [ 69.268729][ T4389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.279023][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.285137][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.299138][ T4389] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.311905][ T26] audit: type=1326 audit(69.328:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4638 comm="syz.2.217" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff89681fa8 code=0x0 [ 69.328779][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.341824][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.344243][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.346173][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.348796][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.456085][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.458955][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.462612][ T4018] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.464566][ T4018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.473053][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.474623][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.494140][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.495646][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.496271][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.497308][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.498120][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.519402][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.545464][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.575115][ T3273] cfg80211: failed to load regulatory.db [ 69.577793][ T2046] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.579666][ T2046] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.622630][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.625327][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.630243][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.651428][ T3273] Bluetooth: hci1: command 0x0419 tx timeout [ 70.442131][ T4659] sctp: failed to load transform for md5: -2 [ 70.571978][ T4669] loop0: detected capacity change from 0 to 1024 [ 70.639985][ T4669] hfsplus: Filesystem is marked locked, mounting read-only. [ 70.713313][ T4676] loop3: detected capacity change from 0 to 1024 [ 70.756269][ T4676] ======================================================= [ 70.756269][ T4676] WARNING: The mand mount option has been deprecated and [ 70.756269][ T4676] and is ignored by this kernel. Remove the mand [ 70.756269][ T4676] option from the mount to silence this warning. [ 70.756269][ T4676] ======================================================= [ 70.780229][ T4678] loop1: detected capacity change from 0 to 736 [ 70.812274][ T4676] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 70.825100][ T4676] EXT4-fs (loop3): group descriptors corrupted! [ 70.852925][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.855281][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.872275][ T4389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.903947][ T4684] loop0: detected capacity change from 0 to 512 [ 70.954192][ T4684] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 70.956326][ T4684] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 71.051502][ T4698] loop3: detected capacity change from 0 to 2048 [ 71.116870][ T4684] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 71.118974][ T4684] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 71.163663][ T4684] EXT4-fs (loop0): 1 truncate cleaned up [ 71.197790][ T4698] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 71.203014][ T4684] EXT4-fs (loop0): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 71.241159][ T4684] EXT4-fs error (device loop0): ext4_map_blocks:601: inode #2: block 4: comm syz.0.231: lblock 0 mapped to illegal pblock 4 (length 1) [ 71.332956][ T4684] EXT4-fs (loop0): Remounting filesystem read-only [ 71.380143][ T4707] sctp: failed to load transform for md5: -2 [ 71.588751][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.592316][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.706664][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.709524][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.712394][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.723551][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.746907][ T4389] device veth0_vlan entered promiscuous mode [ 71.861743][ T4389] device veth1_vlan entered promiscuous mode [ 71.947444][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.950067][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.952881][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.955678][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.976525][ T4389] device veth0_macvtap entered promiscuous mode [ 72.023209][ T4389] device veth1_macvtap entered promiscuous mode [ 72.192665][ T4732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.245'. [ 72.214995][ T4389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.217668][ T4389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.220221][ T4389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.222835][ T4389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.237902][ T4730] loop1: detected capacity change from 0 to 1024 [ 72.240445][ T4389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.243198][ T4389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.245941][ T4389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.248795][ T4389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.251946][ T4389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.256101][ T4389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.267890][ T4389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.281729][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.282621][ T4736] loop0: detected capacity change from 0 to 1024 [ 72.284977][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.288145][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.290829][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.315613][ T4389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.318265][ T4389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.320739][ T4389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.328078][ T4389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.330643][ T4389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.342001][ T4389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.346800][ T4389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.349489][ T4389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.352000][ T4389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.355158][ T4389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.359203][ T4389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.363338][ T3273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.379633][ T3273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.691426][ T4389] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.755702][ T4389] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.822125][ T4389] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.895632][ T4389] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.148318][ T4740] sctp: failed to load transform for md5: -2 [ 73.361514][ T136] hfsplus: b-tree write err: -5, ino 4 [ 73.402034][ T148] hfsplus: b-tree write err: -5, ino 4 [ 73.430799][ T4722] chnl_net:caif_netlink_parms(): no params data found [ 73.452696][ T4316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.454807][ T4316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.488297][ T4756] loop2: detected capacity change from 0 to 1024 [ 73.506028][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.531781][ T4316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.535906][ T4316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.542402][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.592472][ T4756] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 73.595978][ T4756] EXT4-fs (loop2): group descriptors corrupted! [ 73.634337][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.636283][ T4722] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.639012][ T4722] device bridge_slave_0 entered promiscuous mode [ 73.658489][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.665912][ T4722] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.668466][ T4722] device bridge_slave_1 entered promiscuous mode [ 73.770119][ T4771] netlink: 'syz.4.137': attribute type 10 has an invalid length. [ 73.775610][ T4774] binder: 4773:4774 tried to acquire reference to desc 0, got 1 instead [ 73.790338][ T4771] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 73.814400][ T4021] binder: release 4773:4774 transaction 6 out, still active [ 73.817230][ T4021] binder: undelivered TRANSACTION_COMPLETE [ 74.031006][ T4052] Bluetooth: hci5: command 0x0409 tx timeout [ 74.581708][ T4780] sctp: failed to load transform for md5: -2 [ 74.631130][ T4052] binder: send failed reply for transaction 6, target dead [ 74.663552][ T4778] loop2: detected capacity change from 0 to 1024 [ 74.687300][ T4789] loop0: detected capacity change from 0 to 1024 [ 74.775446][ T4207] hfsplus: b-tree write err: -5, ino 4 [ 74.798291][ T4722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.868003][ T1608] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.880140][ T4799] loop4: detected capacity change from 0 to 8 [ 74.894942][ T4722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.937174][ T4207] hfsplus: b-tree write err: -5, ino 4 [ 74.974709][ T4722] team0: Port device team_slave_0 added [ 74.997651][ T4804] loop1: detected capacity change from 0 to 128 [ 75.003644][ T1608] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.021815][ T4804] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.059107][ T4804] FAT-fs (loop1): bogus number of FAT sectors [ 75.060749][ T4804] FAT-fs (loop1): Can't find a valid FAT filesystem [ 75.064404][ T4722] team0: Port device team_slave_1 added [ 75.133567][ T1608] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.144849][ T4812] loop4: detected capacity change from 0 to 64 [ 75.155358][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.157997][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.175811][ T4722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.186686][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.187167][ T4814] loop2: detected capacity change from 0 to 512 [ 75.188690][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.213442][ T4722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.247076][ T4814] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 75.249193][ T4814] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 75.269356][ T1608] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.270577][ T4814] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 75.275016][ T4814] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 75.280785][ T4814] EXT4-fs (loop2): 1 truncate cleaned up [ 75.283313][ T4814] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 75.333229][ T4814] EXT4-fs error (device loop2): ext4_map_blocks:601: inode #2: block 4: comm syz.2.270: lblock 0 mapped to illegal pblock 4 (length 1) [ 75.341074][ T4814] EXT4-fs (loop2): Remounting filesystem read-only [ 75.373489][ T4722] device hsr_slave_0 entered promiscuous mode [ 75.423220][ T4722] device hsr_slave_1 entered promiscuous mode [ 75.460343][ T4722] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.462160][ T4722] Cannot create hsr debugfs directory [ 75.666458][ T4824] sctp: failed to load transform for md5: -2 [ 75.880099][ T4832] loop1: detected capacity change from 0 to 1024 [ 76.051137][ T3273] Bluetooth: hci5: command 0x041b tx timeout [ 76.221413][ T4207] hfsplus: b-tree write err: -5, ino 4 [ 76.229307][ T4843] loop2: detected capacity change from 0 to 8 [ 76.247317][ T4842] loop0: detected capacity change from 0 to 736 [ 76.481772][ T4851] Soft offlining pfn 0x12716e at process virtual address 0x20000000 [ 76.516160][ T4851] Soft offlining pfn 0x1b7357 at process virtual address 0x20001000 [ 76.518624][ T4851] Memory failure: 0x1b7357: unhandlable page. [ 76.537924][ T4855] loop2: detected capacity change from 0 to 128 [ 76.581357][ T4855] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.604368][ T4855] FAT-fs (loop2): bogus number of FAT sectors [ 76.606061][ T4855] FAT-fs (loop2): Can't find a valid FAT filesystem [ 77.395196][ T4862] sctp: failed to load transform for md5: -2 [ 77.686467][ T4879] loop4: detected capacity change from 0 to 512 [ 77.771959][ T4879] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 77.774091][ T4879] System zones: 1-12 [ 77.784960][ T4879] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.291: invalid indirect mapped block 8323072 (level 1) [ 77.798057][ T4879] EXT4-fs (loop4): 1 truncate cleaned up [ 77.799520][ T4879] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 77.809143][ T4722] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.869615][ T4722] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.926344][ T4722] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.076673][ T4722] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.080846][ T4017] Bluetooth: hci5: command 0x040f tx timeout [ 78.385002][ T4920] loop1: detected capacity change from 0 to 65 [ 78.392817][ T4918] Soft offlining pfn 0x11f1b9 at process virtual address 0x20000000 [ 78.428567][ T4920] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 78.433239][ T4918] Soft offlining pfn 0x1b7357 at process virtual address 0x20001000 [ 78.433649][ T4722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.437383][ T4918] Memory failure: 0x1b7357: unhandlable page. [ 78.446680][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.449164][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.455836][ T4722] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.461231][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.464142][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.466497][ T4538] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.468366][ T4538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.471244][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.477572][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.480136][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.490041][ T4019] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.492046][ T4019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.536392][ T4899] chnl_net:caif_netlink_parms(): no params data found [ 78.569539][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.572471][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.575408][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.578465][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.686061][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.846657][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.850010][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.187585][ T4951] usb usb8: usbfs: process 4951 (syz.4.308) did not claim interface 0 before use [ 79.812596][ T4722] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.815126][ T4722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.819456][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.822390][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.825064][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.827600][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.963657][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.973400][ T4899] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.975316][ T4899] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.978155][ T4899] device bridge_slave_0 entered promiscuous mode [ 79.982227][ T4899] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.984065][ T4899] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.986576][ T4899] device bridge_slave_1 entered promiscuous mode [ 80.107382][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 80.116806][ T4017] Bluetooth: hci5: command 0x0419 tx timeout [ 80.122764][ T4899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.148092][ T4899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.015844][ T4899] team0: Port device team_slave_0 added [ 81.042785][ T4899] team0: Port device team_slave_1 added [ 81.062062][ T4899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.075026][ T4899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.103246][ T4899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.122589][ T4899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.124622][ T4899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.131471][ T4899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.189393][ T3976] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.191532][ T3976] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.198016][ T4722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.236402][ T4899] device hsr_slave_0 entered promiscuous mode [ 81.256989][ T4997] loop2: detected capacity change from 0 to 16 [ 81.267671][ T4997] erofs: (device loop2): mounted with root inode @ nid 36. [ 81.283639][ T4899] device hsr_slave_1 entered promiscuous mode [ 81.323068][ T4899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.325020][ T4899] Cannot create hsr debugfs directory [ 81.421543][ T5001] netlink: 'syz.2.325': attribute type 10 has an invalid length. [ 81.437082][ T5001] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 81.501054][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.504037][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.553176][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.556077][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.563662][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.566436][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.591518][ T4722] device veth0_vlan entered promiscuous mode [ 81.617170][ T4722] device veth1_vlan entered promiscuous mode [ 81.631139][ T4899] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.655085][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.657965][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.660710][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.664310][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.671005][ T4722] device veth0_macvtap entered promiscuous mode [ 81.678565][ T4722] device veth1_macvtap entered promiscuous mode [ 81.692693][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.701942][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.704666][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.710847][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.713727][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.716554][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.719369][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.723262][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.725974][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.728606][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.731155][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.733742][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.737892][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.740323][ T3976] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.742912][ T3976] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.745662][ T3976] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.748372][ T3976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.753419][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.756186][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.758540][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.761088][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.763515][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.766879][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.769362][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.914800][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.917628][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.920316][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.923711][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.926326][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.936122][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.942238][ T4722] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.944545][ T4722] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.946861][ T4722] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.949061][ T4722] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.081525][ T4207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.083962][ T4207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.187383][ T4207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.190514][ T4207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.296520][ T5013] loop1: detected capacity change from 0 to 4096 [ 82.350557][ T5017] loop4: detected capacity change from 0 to 1024 [ 82.372613][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.375376][ T4538] Bluetooth: hci2: command 0x041b tx timeout [ 82.376896][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.377099][ T4538] Bluetooth: hci5: command 0x0405 tx timeout [ 82.379813][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.390062][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.455098][ T4899] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.516335][ T5013] NILFS (loop1): invalid segment: Checksum error in segment payload [ 82.518615][ T5013] NILFS (loop1): trying rollback from an earlier position [ 82.900789][ T5030] sctp: failed to load transform for md5: -2 [ 82.973867][ T5013] NILFS (loop1): recovery complete [ 82.991827][ T5040] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.002909][ T5017] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 83.262892][ T4899] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.298353][ T26] audit: type=1326 audit(83.638:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5037 comm="syz.3.336" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb41bcfa8 code=0x0 [ 84.333210][ T4899] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.360951][ T3273] Bluetooth: hci2: command 0x040f tx timeout [ 84.430822][ T5057] xt_l2tp: v2 sid > 0xffff: 536870912 [ 84.443346][ T5057] loop3: detected capacity change from 0 to 256 [ 84.582361][ T1608] device hsr_slave_0 left promiscuous mode [ 84.644924][ T1608] device hsr_slave_1 left promiscuous mode [ 84.815987][ T1608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.818032][ T1608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.822842][ T5072] loop3: detected capacity change from 0 to 4096 [ 84.842828][ T26] audit: type=1326 audit(85.192:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5077 comm="syz.4.351" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff91d95fa8 code=0x0 [ 84.850908][ T1608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.859329][ T1608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.868722][ T1608] device bridge_slave_1 left promiscuous mode [ 84.870478][ T1608] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.879620][ T5072] NILFS (loop3): invalid segment: Checksum error in segment payload [ 84.881744][ T5072] NILFS (loop3): trying rollback from an earlier position [ 84.888028][ T5081] loop1: detected capacity change from 0 to 2048 [ 84.904779][ T5081] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.909877][ T5083] loop2: detected capacity change from 0 to 512 [ 84.937633][ T5072] NILFS (loop3): recovery complete [ 84.948045][ T5085] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.957848][ T5083] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 84.964577][ T1608] device bridge_slave_0 left promiscuous mode [ 84.966549][ T1608] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.982991][ T5083] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 84.991987][ T5083] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 84.994072][ T5083] System zones: 0-2, 18-18, 34-35 [ 85.018308][ T5083] EXT4-fs (loop2): mounted filesystem without journal. Opts: data=journal,journal_ioprio=0x0000000000000005,,errors=continue. Quota mode: none. [ 85.084213][ T1608] device hsr_slave_0 left promiscuous mode [ 85.159245][ T1608] device hsr_slave_1 left promiscuous mode [ 85.170525][ T5092] xt_l2tp: v2 sid > 0xffff: 536870912 [ 85.204532][ T5092] loop3: detected capacity change from 0 to 256 [ 85.237249][ T1608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.239501][ T1608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.243191][ T1608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.245297][ T1608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.251824][ T1608] device bridge_slave_1 left promiscuous mode [ 85.254702][ T1608] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.323929][ T1608] device bridge_slave_0 left promiscuous mode [ 85.326865][ T1608] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.448590][ T5113] loop1: detected capacity change from 0 to 512 [ 85.593569][ T1608] device veth1_macvtap left promiscuous mode [ 85.595216][ T1608] device veth0_macvtap left promiscuous mode [ 85.596846][ T1608] device veth1_vlan left promiscuous mode [ 85.599297][ T5113] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,data_err=abort,minixdf,,errors=continue. Quota mode: writeback. [ 85.606425][ T1608] device veth0_vlan left promiscuous mode [ 85.773979][ T26] audit: type=1400 audit(86.095:5): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=5D9625292F2F2E212D pid=5107 comm="syz.3.365" [ 85.780824][ T1608] device veth1_macvtap left promiscuous mode [ 85.785296][ T1608] device veth0_macvtap left promiscuous mode [ 85.787474][ T1608] device veth1_vlan left promiscuous mode [ 86.003762][ T1608] device veth0_vlan left promiscuous mode [ 86.449072][ T4017] Bluetooth: hci2: command 0x0419 tx timeout [ 86.598309][ T5138] loop3: detected capacity change from 0 to 512 [ 86.697537][ T5138] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.377: inode #1: comm syz.3.377: iget: illegal inode # [ 86.715606][ T5138] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.377: error while reading EA inode 1 err=-117 [ 86.727285][ T5146] loop1: detected capacity change from 0 to 8 [ 86.737307][ T5138] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 86.742760][ T5138] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.377: inode #1: comm syz.3.377: iget: illegal inode # [ 86.763801][ T5138] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.377: error while reading EA inode 1 err=-117 [ 86.768677][ T5138] EXT4-fs (loop3): 1 orphan inode deleted [ 86.770402][ T5138] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,nogrpid,debug_want_extra_isize=0x0000000000000058,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 86.799601][ T5138] EXT4-fs error (device loop3): ext4_find_dest_de:2112: inode #2: block 13: comm syz.3.377: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 86.899463][ T26] audit: type=1326 audit(87.281:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5147 comm="syz.3.381" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb41bcfa8 code=0x0 [ 86.976008][ T5150] loop1: detected capacity change from 0 to 1024 [ 86.999553][ T5150] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 87.025880][ T5150] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 87.226992][ T1608] team0 (unregistering): Port device team_slave_1 removed [ 87.258003][ T1608] team0 (unregistering): Port device team_slave_0 removed [ 87.280661][ T1608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.329806][ T1608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.504135][ T1608] bond0 (unregistering): Released all slaves [ 87.697696][ T1608] team0 (unregistering): Port device team_slave_1 removed [ 87.707763][ T1608] team0 (unregistering): Port device team_slave_0 removed [ 87.734423][ T1608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.773127][ T5170] block nbd3: shutting down sockets [ 87.782840][ T1608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.784301][ T5170] block nbd3: NBD_DISCONNECT [ 87.786352][ T5170] block nbd3: Send disconnect failed -32 [ 87.792675][ T5170] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 87.803726][ T5170] loop3: detected capacity change from 0 to 1024 [ 87.842716][ T5170] hfsplus: type requires a 4 character value [ 87.844312][ T5170] hfsplus: unable to parse mount options [ 87.928449][ T1608] bond0 (unregistering): Released all slaves [ 88.143208][ T5181] loop1: detected capacity change from 0 to 64 [ 88.172473][ T4899] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.200256][ T4899] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.200759][ T26] audit: type=1326 audit(88.608:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5182 comm="syz.4.397" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff91d95fa8 code=0x0 [ 88.249762][ T4899] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.311369][ T5192] netlink: 'syz.3.399': attribute type 2 has an invalid length. [ 88.319823][ T4899] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.422565][ T5200] bond0: Unable to set down delay as MII monitoring is disabled [ 88.623335][ T4899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.657856][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.660341][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.687955][ T4899] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.696310][ T5214] loop2: detected capacity change from 0 to 512 [ 88.704354][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.707080][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.710439][ T4017] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.712399][ T4017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.719701][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.801210][ T5214] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 88.805452][ T5214] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 88.807631][ T5214] System zones: 0-2, 18-18, 34-35 [ 88.809697][ T5214] EXT4-fs (loop2): mounted filesystem without journal. Opts: data=journal,journal_ioprio=0x0000000000000005,,errors=continue. Quota mode: none. [ 88.881887][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.884446][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.886854][ T4017] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.889398][ T4017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.897785][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.288696][ T26] audit: type=1400 audit(89.498:8): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=5D9625292F2F2E212D pid=5213 comm="syz.3.410" [ 89.869782][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.872584][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.878449][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.881471][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.884440][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.887707][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.890523][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.893108][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.900814][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.905846][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.931477][ T5227] bond0: Unable to set down delay as MII monitoring is disabled [ 89.964046][ T4899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.000108][ T5225] netlink: 'syz.2.413': attribute type 2 has an invalid length. [ 90.048488][ T5234] xt_l2tp: v2 sid > 0xffff: 536870912 [ 90.106497][ T5234] loop3: detected capacity change from 0 to 256 [ 90.210765][ T5240] loop4: detected capacity change from 0 to 128 [ 90.323848][ T26] audit: type=1326 audit(90.752:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5250 comm="syz.3.424" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb41bcfa8 code=0x0 [ 90.365693][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.367957][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.375208][ T4899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.413192][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.416482][ T4019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.477366][ T3976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.480447][ T3976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.483785][ T3976] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.486227][ T3976] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.489156][ T5263] loop1: detected capacity change from 0 to 512 [ 90.501042][ T4899] device veth0_vlan entered promiscuous mode [ 90.528289][ T5264] netlink: 'syz.4.427': attribute type 2 has an invalid length. [ 90.542785][ T4899] device veth1_vlan entered promiscuous mode [ 90.576383][ T3976] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.579078][ T3976] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.579131][ T5263] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz.1.428: inline data xattr refers to an external xattr inode [ 90.582056][ T3976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.586876][ T5263] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.428: couldn't read orphan inode 12 (err -117) [ 90.590088][ T3976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.592971][ T5263] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.596416][ T4899] device veth0_macvtap entered promiscuous mode [ 90.602024][ T4899] device veth1_macvtap entered promiscuous mode [ 90.716163][ T4899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.718908][ T4899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.754529][ T4899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.765334][ T4899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.784563][ T4899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.804901][ T4899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.818112][ T4899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.820993][ T4899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.823674][ T4899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.826239][ T4899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.844118][ T4899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.852280][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.854882][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.857535][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.866089][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.025210][ T4899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.027906][ T4899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.030525][ T4899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.046189][ T4899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.048886][ T4899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.051530][ T4899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.054008][ T4899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.074037][ T4899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.088169][ T5278] usb usb8: usbfs: process 5278 (syz.4.431) did not claim interface 0 before use [ 91.097226][ T4899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.125238][ T4899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.159236][ T4899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.220570][ T4899] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.241322][ T4899] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.257919][ T4899] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.274282][ T4899] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.561377][ T3976] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.564389][ T3976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.631366][ T4783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.633687][ T4783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.637935][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.691675][ T4783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.693854][ T4783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.697879][ T3273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.702516][ T5293] netlink: 24 bytes leftover after parsing attributes in process `syz.3.437'. [ 91.876776][ T5299] loop0: detected capacity change from 0 to 2048 [ 91.936091][ T5303] loop4: detected capacity change from 0 to 1024 [ 91.961037][ T5299] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 91.969623][ T5299] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.974724][ T26] audit: type=1326 audit(92.418:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5304 comm="syz.3.442" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb41bcfa8 code=0x0 [ 92.053937][ T5303] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 93.313648][ T5314] loop0: detected capacity change from 0 to 64 [ 93.361836][ T26] audit: type=1326 audit(93.811:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5316 comm="syz.1.444" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb806efa8 code=0x0 [ 93.424717][ T5323] netlink: 24 bytes leftover after parsing attributes in process `syz.2.448'. [ 93.680718][ T5340] loop4: detected capacity change from 0 to 1024 [ 93.715045][ T26] audit: type=1326 audit(94.174:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5342 comm="syz.2.458" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff89681fa8 code=0x0 [ 93.762745][ T5340] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 95.058417][ T5358] loop1: detected capacity change from 0 to 64 [ 95.080524][ T5354] loop0: detected capacity change from 0 to 1024 [ 95.205897][ T5367] loop2: detected capacity change from 0 to 128 [ 95.352411][ T5367] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 95.686529][ T5375] netlink: 'syz.0.460': attribute type 16 has an invalid length. [ 95.688623][ T5375] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.460'. [ 96.310650][ T5367] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.403370][ T5382] loop4: detected capacity change from 0 to 1024 [ 96.539471][ T5382] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 96.575493][ T5390] loop1: detected capacity change from 0 to 2048 [ 96.578716][ T26] audit: type=1326 audit(97.067:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5389 comm="syz.0.473" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff98a49fa8 code=0x0 [ 96.630228][ T5390] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.810001][ T5405] bond0: (slave team0): Error: Slave device does not support XDP [ 97.857975][ T5409] loop0: detected capacity change from 0 to 128 [ 97.916037][ T5409] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 97.951364][ T5409] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.990449][ T5417] loop3: detected capacity change from 0 to 1024 [ 98.551123][ T5428] netlink: 'syz.3.484': attribute type 16 has an invalid length. [ 98.553297][ T5428] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.484'. [ 99.276686][ T5435] loop2: detected capacity change from 0 to 1024 [ 99.352430][ T5435] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.396991][ T5435] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,dioread_nolock,,errors=continue. Quota mode: none. [ 99.417442][ T5435] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.424021][ T5443] loop3: detected capacity change from 0 to 1024 [ 99.428943][ T5435] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: none. [ 99.490199][ T5443] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 99.587670][ T5453] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 101.026200][ T5491] loop3: detected capacity change from 0 to 128 [ 101.094651][ T5491] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 101.105176][ T5491] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.532567][ T5486] loop1: detected capacity change from 0 to 32768 [ 101.558167][ T5486] XFS: attr2 mount option is deprecated. [ 101.559788][ T5486] XFS: ikeep mount option is deprecated. [ 101.561271][ T5486] XFS: noikeep mount option is deprecated. [ 101.573338][ T5516] loop0: detected capacity change from 0 to 17 [ 101.581577][ T5516] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop0 [ 101.620933][ T5486] XFS (loop1): Mounting V5 Filesystem [ 101.768789][ T5486] XFS (loop1): Ending clean mount [ 101.777769][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 101.808147][ T5486] XFS (loop1): Quotacheck needed: Please wait. [ 101.869495][ T5527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'. [ 101.891667][ T5486] XFS (loop1): Quotacheck: Done. [ 101.969615][ T3970] XFS (loop1): Unmounting Filesystem [ 102.145193][ T5533] loop0: detected capacity change from 0 to 512 [ 102.179316][ T5533] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 102.184860][ T5537] sctp: [Deprecated]: syz.4.521 (pid 5537) Use of int in maxseg socket option. [ 102.184860][ T5537] Use struct sctp_assoc_value instead [ 102.202833][ T5533] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.519: invalid indirect mapped block 83886080 (level 1) [ 102.221197][ T5533] EXT4-fs (loop0): Remounting filesystem read-only [ 102.223627][ T5533] EXT4-fs (loop0): 1 orphan inode deleted [ 102.244409][ T5533] EXT4-fs (loop0): 1 truncate cleaned up [ 102.245935][ T5533] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,grpquota,inode_readahead_blks=0x0000000000010000,minixdf,noinit_itable,. Quota mode: writeback. [ 102.327654][ T5533] EXT4-fs error (device loop0): ext4_empty_dir:3108: inode #2: block 13: comm syz.0.519: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 102.386948][ T1608] device hsr_slave_0 left promiscuous mode [ 102.403824][ T5533] EXT4-fs (loop0): Remounting filesystem read-only [ 102.405573][ T5533] EXT4-fs warning (device loop0): ext4_empty_dir:3110: inode #2: comm syz.0.519: directory missing '..' [ 102.444136][ T4899] EXT4-fs error (device loop0): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 102.450578][ T1608] device hsr_slave_1 left promiscuous mode [ 102.535020][ T1608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.537122][ T1608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.539645][ T1608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.542429][ T1608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.547271][ T1608] device bridge_slave_1 left promiscuous mode [ 102.550707][ T1608] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.607057][ T1608] device bridge_slave_0 left promiscuous mode [ 102.608910][ T1608] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.667263][ T5555] loop1: detected capacity change from 0 to 1024 [ 102.733564][ T5548] loop3: detected capacity change from 0 to 32768 [ 102.771527][ T1608] device veth1_macvtap left promiscuous mode [ 102.773062][ T1608] device veth0_macvtap left promiscuous mode [ 102.774573][ T1608] device veth1_vlan left promiscuous mode [ 102.776097][ T1608] device veth0_vlan left promiscuous mode [ 102.779463][ T5548] XFS: attr2 mount option is deprecated. [ 102.781080][ T5548] XFS: ikeep mount option is deprecated. [ 102.782506][ T5548] XFS: noikeep mount option is deprecated. [ 102.850081][ T5548] XFS (loop3): Mounting V5 Filesystem [ 103.022154][ T5548] XFS (loop3): Ending clean mount [ 103.036890][ T5548] XFS (loop3): Quotacheck needed: Please wait. [ 103.082077][ T5548] XFS (loop3): Quotacheck: Done. [ 103.162407][ T4722] XFS (loop3): Unmounting Filesystem [ 103.274324][ T1608] team0 (unregistering): Port device team_slave_1 removed [ 103.284850][ T1608] team0 (unregistering): Port device team_slave_0 removed [ 103.294866][ T1608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.348792][ T1608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.506962][ T1608] bond0 (unregistering): Released all slaves [ 103.700517][ T5574] loop4: detected capacity change from 0 to 512 [ 103.703099][ T5576] sctp: [Deprecated]: syz.3.534 (pid 5576) Use of int in maxseg socket option. [ 103.703099][ T5576] Use struct sctp_assoc_value instead [ 103.770765][ T5574] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 103.787583][ T5574] EXT4-fs (loop4): 1 truncate cleaned up [ 103.789248][ T5574] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.253300][ T5608] sctp: [Deprecated]: syz.3.547 (pid 5608) Use of int in maxseg socket option. [ 104.253300][ T5608] Use struct sctp_assoc_value instead [ 104.301137][ T5612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.545'. [ 104.349617][ T5598] chnl_net:caif_netlink_parms(): no params data found [ 104.515160][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.527158][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.541155][ T5598] device bridge_slave_0 entered promiscuous mode [ 104.570185][ T26] audit: type=1326 audit(105.092:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz.3.553" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb41bcfa8 code=0x0 [ 104.597865][ T5625] loop2: detected capacity change from 0 to 512 [ 104.606928][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.608918][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.617039][ T5598] device bridge_slave_1 entered promiscuous mode [ 104.640024][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.644876][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.645436][ T5625] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 104.666437][ T5598] team0: Port device team_slave_0 added [ 104.668606][ T5625] EXT4-fs (loop2): 1 truncate cleaned up [ 104.675099][ T5625] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.676908][ T5598] team0: Port device team_slave_1 added [ 104.693950][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.695711][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.702139][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.707520][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.709290][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.715971][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.773927][ T5598] device hsr_slave_0 entered promiscuous mode [ 104.811973][ T5598] device hsr_slave_1 entered promiscuous mode [ 104.851506][ T5598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.853637][ T5598] Cannot create hsr debugfs directory [ 104.932018][ T5598] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.999134][ T5598] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.089503][ T5598] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.107073][ T5634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.555'. [ 105.157300][ T5598] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.259347][ T5642] loop4: detected capacity change from 0 to 1024 [ 105.295306][ T5642] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 105.439935][ T5598] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.520128][ T5598] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.428668][ T3273] Bluetooth: hci2: command 0x0409 tx timeout [ 106.446703][ T5598] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.490344][ T5598] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.519114][ T5655] sctp: [Deprecated]: syz.1.561 (pid 5655) Use of int in maxseg socket option. [ 106.519114][ T5655] Use struct sctp_assoc_value instead [ 106.817825][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.844807][ T5664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.565'. [ 106.849214][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.851673][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.860363][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.881748][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.884824][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.887683][ T4020] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.889636][ T4020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.917712][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.941703][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.944563][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.946974][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.948714][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.950977][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.978156][ T5662] loop3: detected capacity change from 0 to 8192 [ 106.996431][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.999545][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.003673][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.005065][ T5671] loop1: detected capacity change from 0 to 1024 [ 107.016489][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.024284][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.041576][ T5598] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.048172][ T5662] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 107.051100][ T5662] REISERFS (device loop3): using ordered data mode [ 107.055133][ T5662] reiserfs: using flush barriers [ 107.066666][ T5671] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 107.073288][ T5662] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 107.074191][ T5598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.080429][ T5662] REISERFS (device loop3): checking transaction log (loop3) [ 107.094886][ T5662] REISERFS (device loop3): Using r5 hash to sort names [ 107.097516][ T5662] REISERFS (device loop3): using 3.5.x disk format [ 107.101991][ T5662] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 107.115630][ T5671] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,dioread_nolock,,errors=continue. Quota mode: none. [ 107.132906][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.134058][ T5671] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 107.135472][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.140429][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.153415][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.159375][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.162316][ T5671] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: none. [ 107.167610][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.314568][ T5679] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 3685, free_space(entry_count) 2 [ 107.319631][ T5679] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 107.323095][ T5679] REISERFS (device loop3): Remounting filesystem read-only [ 107.325153][ T5679] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 4 0x0 SD] stat data [ 107.418047][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.420149][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.446835][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.493725][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 107.496512][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 107.532513][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 107.534960][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.537814][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.541578][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.553064][ T5598] device veth0_vlan entered promiscuous mode [ 107.583728][ T5598] device veth1_vlan entered promiscuous mode [ 107.609530][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 107.614917][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 107.618801][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.626811][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.636351][ T5598] device veth0_macvtap entered promiscuous mode [ 107.643397][ T5598] device veth1_macvtap entered promiscuous mode [ 107.678014][ T5598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.685350][ T5598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.692394][ T5598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.706768][ T5598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.715082][ T5598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.723483][ T5598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.730719][ T5598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.736782][ T5598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.741505][ T5598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.747564][ T5598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.755405][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.769065][ T5598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.773279][ T5598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.775938][ T5598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.778830][ T5598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.781781][ T5598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.784557][ T5598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.787300][ T5598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.790566][ T5598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.793312][ T5598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.796116][ T5598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.803051][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.805135][ T5686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.570'. [ 107.807609][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 107.810335][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 107.812785][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.815276][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.831401][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 107.840825][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.855345][ T5690] device batadv_slave_1 entered promiscuous mode [ 107.857937][ T5687] device batadv_slave_1 left promiscuous mode [ 107.871165][ T5598] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.873563][ T5598] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.879972][ T5598] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.883559][ T5598] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.035120][ T4254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.038400][ T4254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.049707][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 108.084072][ T4423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.086562][ T4423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.095913][ T4020] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.216371][ T5701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.548'. [ 108.252788][ T5700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.576'. [ 108.514475][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 108.536836][ T5719] loop0: detected capacity change from 0 to 512 [ 108.815186][ T26] audit: type=1400 audit(109.359:15): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5703 comm="syz.2.577" [ 109.064606][ T5697] loop3: detected capacity change from 0 to 32768 [ 109.112391][ T5719] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 109.117078][ T5697] XFS: attr2 mount option is deprecated. [ 109.118551][ T5697] XFS: ikeep mount option is deprecated. [ 109.120392][ T5697] XFS: noikeep mount option is deprecated. [ 109.167241][ T5719] EXT4-fs error (device loop0): ext4_do_update_inode:5160: inode #2: comm syz.0.584: corrupted inode contents [ 109.183336][ T5719] EXT4-fs error (device loop0): ext4_dirty_inode:5993: inode #2: comm syz.0.584: mark_inode_dirty error [ 109.192095][ T5697] XFS (loop3): Mounting V5 Filesystem [ 109.196585][ T5719] EXT4-fs error (device loop0): ext4_do_update_inode:5160: inode #2: comm syz.0.584: corrupted inode contents [ 109.200116][ T5719] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.584: mark_inode_dirty error [ 109.246387][ T5716] device batadv_slave_1 entered promiscuous mode [ 109.284877][ T5715] device batadv_slave_1 left promiscuous mode [ 109.317466][ T5697] XFS (loop3): Ending clean mount [ 109.376928][ T5697] XFS (loop3): Quotacheck needed: Please wait. [ 109.397000][ T5744] netlink: 14569 bytes leftover after parsing attributes in process `syz.1.587'. [ 109.423216][ T5746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'. [ 109.448154][ T5748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.591'. [ 109.455591][ T5697] XFS (loop3): Quotacheck: Done. [ 109.480074][ T4722] XFS (loop3): Unmounting Filesystem [ 109.558729][ T5753] udc-core: couldn't find an available UDC or it's busy [ 109.560570][ T5753] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 109.693345][ T5752] loop0: detected capacity change from 0 to 8192 [ 109.767999][ T5752] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 109.770409][ T5752] REISERFS (device loop0): using ordered data mode [ 109.771997][ T5752] reiserfs: using flush barriers [ 109.774937][ T5752] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 109.779304][ T5752] REISERFS (device loop0): checking transaction log (loop0) [ 109.783376][ T5752] REISERFS warning: reiserfs-5081 is_leaf: nr_item seems wrong: level=1, nr_items=1538, free_space=0 rdkey [ 109.789786][ T5752] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 109.801785][ T5752] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 109.806346][ T5752] REISERFS warning (device loop0): reiserfs_fill_super: corrupt root inode, run fsck [ 109.858569][ T5759] loop4: detected capacity change from 0 to 512 [ 109.947657][ T5759] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 110.152105][ T26] audit: type=1326 audit(110.704:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5762 comm="syz.3.592" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb41bcfa8 code=0x0 [ 111.080252][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 111.299105][ T5774] device batadv_slave_1 entered promiscuous mode [ 111.316025][ T5773] device batadv_slave_1 left promiscuous mode [ 111.333044][ T5776] loop1: detected capacity change from 0 to 512 [ 111.348933][ T5778] netlink: 14569 bytes leftover after parsing attributes in process `syz.3.601'. [ 111.400570][ T5776] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 111.405747][ T5781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.602'. [ 111.449162][ T5769] netlink: 'syz.0.597': attribute type 4 has an invalid length. [ 111.506871][ T5776] EXT4-fs error (device loop1): ext4_do_update_inode:5160: inode #2: comm syz.1.600: corrupted inode contents [ 111.525437][ T5776] EXT4-fs error (device loop1): ext4_dirty_inode:5993: inode #2: comm syz.1.600: mark_inode_dirty error [ 111.541393][ T5776] EXT4-fs error (device loop1): ext4_do_update_inode:5160: inode #2: comm syz.1.600: corrupted inode contents [ 111.551477][ T5776] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.600: mark_inode_dirty error [ 111.556053][ T5786] loop3: detected capacity change from 0 to 1024 [ 111.666374][ T5786] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 111.888210][ T5797] loop1: detected capacity change from 0 to 256 [ 111.956778][ T5797] FAT-fs (loop1): Unrecognized mount option "ÿÿ0xffffffffffffffff" or missing value [ 112.911039][ T13] kernel write not supported for file bpf-prog (pid: 13 comm: kworker/0:1) [ 112.952153][ T5800] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -107 0 [ 113.062760][ T5805] loop3: detected capacity change from 0 to 512 [ 113.067992][ T1608] device hsr_slave_0 left promiscuous mode [ 113.106961][ T1608] device hsr_slave_1 left promiscuous mode [ 113.120508][ T4538] Bluetooth: hci2: command 0x0419 tx timeout [ 113.170368][ T5805] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 113.174379][ T1608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.176293][ T1608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.190010][ T1608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.192059][ T1608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.213328][ T1608] device bridge_slave_1 left promiscuous mode [ 113.215014][ T1608] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.307920][ T5787] loop4: detected capacity change from 0 to 32768 [ 113.363943][ T5787] XFS: attr2 mount option is deprecated. [ 113.371377][ T5787] XFS: ikeep mount option is deprecated. [ 113.375443][ T5787] XFS: noikeep mount option is deprecated. [ 113.376067][ T1608] device bridge_slave_0 left promiscuous mode [ 113.378705][ T1608] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.389707][ T5787] XFS (loop4): Mounting V5 Filesystem [ 114.443408][ T5787] XFS (loop4): Ending clean mount [ 114.446456][ T5787] XFS (loop4): Quotacheck needed: Please wait. [ 114.479851][ T1608] device veth1_macvtap left promiscuous mode [ 114.481733][ T1608] device veth0_macvtap left promiscuous mode [ 114.483317][ T1608] device veth1_vlan left promiscuous mode [ 114.484936][ T1608] device veth0_vlan left promiscuous mode [ 114.492337][ T5787] XFS (loop4): Quotacheck: Done. [ 114.509626][ T4389] XFS (loop4): Unmounting Filesystem [ 114.541948][ T5833] loop3: detected capacity change from 0 to 512 [ 114.571955][ T5833] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 114.587133][ T5833] EXT4-fs (loop3): 1 orphan inode deleted [ 114.588625][ T5833] EXT4-fs (loop3): 1 truncate cleaned up [ 114.590189][ T5833] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,nolazytime,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 114.660147][ T5833] EXT4-fs error (device loop3): ext4_lookup:1855: inode #15: comm syz.3.615: iget: bad extra_isize 46 (inode size 256) [ 114.667462][ T5833] EXT4-fs (loop3): Remounting filesystem read-only [ 114.964837][ T5843] loop3: detected capacity change from 0 to 1024 [ 115.071318][ T5843] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 115.130112][ T1608] team0 (unregistering): Port device team_slave_1 removed [ 115.172121][ T1608] team0 (unregistering): Port device team_slave_0 removed [ 115.251697][ T1608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.460503][ T5853] loop1: detected capacity change from 0 to 256 [ 115.850505][ T5853] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 116.178654][ T26] audit: type=1326 audit(116.740:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.1.621" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb806efa8 code=0x0 [ 116.209897][ T1608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.227588][ T5850] loop4: detected capacity change from 0 to 8192 [ 116.256895][ T5850] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 116.259213][ T5850] REISERFS (device loop4): using ordered data mode [ 116.260844][ T5850] reiserfs: using flush barriers [ 116.294966][ T5850] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 116.299489][ T5850] REISERFS (device loop4): checking transaction log (loop4) [ 116.304007][ T5850] REISERFS (device loop4): Using r5 hash to sort names [ 116.310552][ T5850] REISERFS (device loop4): using 3.5.x disk format [ 116.322290][ T5850] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 117.386047][ T1608] bond0 (unregistering): Released all slaves [ 117.503249][ T5815] device batadv_slave_1 entered promiscuous mode [ 117.505484][ T5819] device batadv_slave_1 left promiscuous mode [ 117.507563][ T5822] netlink: 14569 bytes leftover after parsing attributes in process `syz.0.614'. [ 117.596754][ T5865] loop2: detected capacity change from 0 to 256 [ 117.629449][ T5865] exfat: Unknown parameter 'ud Œ0x0000000000000000' [ 117.699137][ T5867] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 117.858556][ T5870] loop1: detected capacity change from 0 to 512 [ 117.860699][ T5867] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 117.862765][ T5867] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 117.886912][ T5867] vhci_hcd vhci_hcd.0: Device attached [ 117.897286][ T5875] vhci_hcd: connection closed [ 117.914155][ T5403] vhci_hcd: stop threads [ 117.917237][ T5403] vhci_hcd: release socket [ 117.918870][ T5403] vhci_hcd: disconnect device [ 117.949921][ T5870] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 118.880995][ T5870] EXT4-fs (loop1): 1 orphan inode deleted [ 118.882578][ T5870] EXT4-fs (loop1): 1 truncate cleaned up [ 118.899161][ T5870] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,nolazytime,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 118.977863][ T5870] EXT4-fs error (device loop1): ext4_lookup:1855: inode #15: comm syz.1.628: iget: bad extra_isize 46 (inode size 256) [ 118.999784][ T5870] EXT4-fs (loop1): Remounting filesystem read-only [ 119.461043][ T5900] netlink: 14569 bytes leftover after parsing attributes in process `syz.1.635'. [ 119.629003][ T5903] loop2: detected capacity change from 0 to 256 [ 120.322415][ T5903] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 120.356207][ T26] audit: type=1326 audit(120.928:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz.2.633" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff89681fa8 code=0x0 [ 120.437325][ T5902] loop0: detected capacity change from 0 to 8192 [ 120.572921][ T5902] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 120.575452][ T5902] REISERFS (device loop0): using ordered data mode [ 120.577824][ T5902] reiserfs: using flush barriers [ 120.582792][ T5902] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 120.591259][ T5902] REISERFS (device loop0): checking transaction log (loop0) [ 120.594465][ T5902] REISERFS (device loop0): Using r5 hash to sort names [ 120.597567][ T5902] REISERFS (device loop0): using 3.5.x disk format [ 120.599713][ T5902] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 120.865241][ T5910] usb usb8: usbfs: process 5910 (syz.1.636) did not claim interface 0 before use [ 121.669899][ T5902] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 3685, free_space(entry_count) 2 [ 121.684154][ T5919] netlink: 44 bytes leftover after parsing attributes in process `syz.3.642'. [ 121.710977][ T5902] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 121.719869][ T5902] REISERFS (device loop0): Remounting filesystem read-only [ 121.721873][ T5902] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 4 0x0 SD] stat data [ 121.728541][ T5924] loop2: detected capacity change from 0 to 256 [ 121.738814][ T5924] exfat: Unknown parameter 'ud Œ0x0000000000000000' [ 121.775339][ T5919] netlink: 20 bytes leftover after parsing attributes in process `syz.3.642'. [ 121.782240][ T5916] loop4: detected capacity change from 0 to 8192 [ 121.960910][ T5916] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 121.982144][ T5916] REISERFS (device loop4): using ordered data mode [ 121.984231][ T5916] reiserfs: using flush barriers [ 121.989262][ T5916] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 122.014021][ T5916] REISERFS (device loop4): checking transaction log (loop4) [ 122.019403][ T5916] REISERFS (device loop4): Using r5 hash to sort names [ 122.340221][ T5931] loop2: detected capacity change from 0 to 1024 [ 122.355136][ T5931] hfsplus: unable to parse mount options [ 122.968247][ T5916] reiserfs: enabling write barrier flush mode [ 123.046271][ T5916] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 123.054134][ T5933] loop0: detected capacity change from 0 to 1024 [ 123.163405][ T5933] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,user_xattr,,errors=continue. Quota mode: writeback. [ 123.255813][ T5940] loop3: detected capacity change from 0 to 2048 [ 123.324085][ T5940] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 123.329662][ T5940] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.639213][ T5927] loop1: detected capacity change from 0 to 32768 [ 123.800850][ T5956] loop4: detected capacity change from 0 to 256 [ 124.479972][ T5956] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 124.512915][ T26] audit: type=1326 audit(125.095:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5946 comm="syz.4.649" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff91d95fa8 code=0x0 [ 124.534655][ T5958] loop2: detected capacity change from 0 to 128 [ 124.550937][ T5927] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop1 scanned by syz.1.645 (5927) [ 124.595012][ T5958] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 124.608875][ T5927] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 124.614982][ T5927] BTRFS info (device loop1): using free space tree [ 124.620003][ T5927] BTRFS info (device loop1): has skinny extents [ 124.983152][ T5927] BTRFS error (device loop1): open_ctree failed [ 125.132490][ T5997] loop3: detected capacity change from 0 to 8192 [ 125.181926][ T5997] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 125.184309][ T5997] REISERFS (device loop3): using ordered data mode [ 125.185890][ T5997] reiserfs: using flush barriers [ 125.190905][ T5997] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 125.196085][ T5997] REISERFS (device loop3): checking transaction log (loop3) [ 125.261211][ T6005] loop4: detected capacity change from 0 to 128 [ 125.302355][ T6005] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 125.489286][ T6010] netlink: 44 bytes leftover after parsing attributes in process `syz.4.667'. [ 125.519658][ T5997] REISERFS (device loop3): Using tea hash to sort names [ 125.521774][ T5997] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 125.672375][ T6010] netlink: 20 bytes leftover after parsing attributes in process `syz.4.667'. [ 126.773020][ T6016] loop1: detected capacity change from 0 to 1024 [ 126.880223][ T6018] loop3: detected capacity change from 0 to 256 [ 127.067635][ T6018] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 127.595103][ T6031] netlink: 'syz.1.669': attribute type 16 has an invalid length. [ 127.597424][ T6031] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.669'. [ 127.894581][ T26] audit: type=1326 audit(128.009:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.3.668" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb41bcfa8 code=0x0 [ 128.334460][ T26] audit: type=1400 audit(128.910:21): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=6034 comm="syz.2.676" [ 128.404534][ T6044] loop2: detected capacity change from 0 to 512 [ 128.456670][ T6042] loop4: detected capacity change from 0 to 64 [ 129.053592][ T26] audit: type=1400 audit(129.321:22): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=5D9625292F2F2E212D pid=6039 comm="syz.1.678" [ 129.483890][ T6044] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.856154][ T6029] loop0: detected capacity change from 0 to 32768 [ 129.908109][ T6029] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop0 scanned by syz.0.674 (6029) [ 130.010352][ T6068] netlink: 36 bytes leftover after parsing attributes in process `syz.2.684'. [ 130.445476][ T2046] ieee802154 phy0 wpan0: encryption failed: -22 [ 130.445637][ T2046] ieee802154 phy1 wpan1: encryption failed: -22 [ 130.680994][ T6029] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 130.686808][ T6029] BTRFS info (device loop0): using free space tree [ 130.692205][ T6029] BTRFS info (device loop0): has skinny extents [ 130.880248][ T6029] BTRFS error (device loop0): open_ctree failed [ 130.888007][ T6097] loop3: detected capacity change from 0 to 64 [ 130.911481][ T6083] loop2: detected capacity change from 0 to 1024 [ 131.174165][ T6110] loop1: detected capacity change from 0 to 64 [ 131.458524][ T6113] netlink: 'syz.2.689': attribute type 16 has an invalid length. [ 131.460746][ T6113] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.689'. [ 132.097875][ T6116] loop3: detected capacity change from 0 to 512 [ 132.230352][ T26] audit: type=1400 audit(132.815:23): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=5D9625292F2F2E212D pid=6111 comm="syz.4.693" [ 132.266076][ T6116] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 132.307307][ T6122] loop2: detected capacity change from 0 to 1024 [ 132.391957][ T6104] loop0: detected capacity change from 0 to 32768 [ 132.412029][ T6124] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 132.441475][ T6124] CIFS mount error: No usable UNC path provided in device string! [ 132.441475][ T6124] [ 132.444293][ T6124] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 132.449489][ T6122] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,user_xattr,,errors=continue. Quota mode: writeback. [ 132.524119][ T6127] loop1: detected capacity change from 0 to 256 [ 132.570505][ T6127] exfat: Unknown parameter 'ud Œ0x0000000000000000' [ 132.914803][ T6132] netlink: 36 bytes leftover after parsing attributes in process `syz.3.700'. [ 133.663907][ T6134] loop1: detected capacity change from 0 to 1024 [ 133.719820][ T6134] hfsplus: unable to parse mount options [ 134.278054][ C0] sched: RT throttling activated [ 134.812910][ T6142] loop1: detected capacity change from 0 to 8192 [ 134.887716][ T6142] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 134.889958][ T6142] REISERFS (device loop1): using ordered data mode [ 134.891687][ T6142] reiserfs: using flush barriers [ 134.913628][ T6145] loop0: detected capacity change from 0 to 8192 [ 134.917887][ T6142] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 134.922317][ T6142] REISERFS (device loop1): checking transaction log (loop1) [ 134.960506][ T6145] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 134.962971][ T6145] REISERFS (device loop0): using ordered data mode [ 134.964526][ T6145] reiserfs: using flush barriers [ 134.987769][ T6142] REISERFS (device loop1): Using r5 hash to sort names [ 134.997894][ T6145] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 135.032458][ T6145] REISERFS (device loop0): checking transaction log (loop0) [ 135.060552][ T6145] REISERFS (device loop0): Using r5 hash to sort names [ 135.062785][ T6145] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 135.082686][ T6142] reiserfs: enabling write barrier flush mode [ 135.108868][ T6155] CIFS mount error: No usable UNC path provided in device string! [ 135.108868][ T6155] [ 135.117429][ T6155] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 135.138000][ T6142] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 135.195465][ T6157] loop2: detected capacity change from 0 to 512 [ 135.305530][ T6136] loop3: detected capacity change from 0 to 32768 [ 135.333117][ T6157] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 135.366524][ T6136] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop3 scanned by syz.3.702 (6136) [ 135.466895][ T6136] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 135.469299][ T6136] BTRFS info (device loop3): using free space tree [ 135.470960][ T6136] BTRFS info (device loop3): has skinny extents [ 135.914088][ T6176] netlink: 36 bytes leftover after parsing attributes in process `syz.0.713'. [ 136.796221][ T6136] BTRFS info (device loop3): enabling ssd optimizations [ 136.813022][ T6197] loop2: detected capacity change from 0 to 1024 [ 136.841094][ T6192] loop0: detected capacity change from 0 to 2048 [ 137.722342][ T6197] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,user_xattr,,errors=continue. Quota mode: writeback. [ 137.766805][ T6192] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 137.968562][ T6209] CIFS mount error: No usable UNC path provided in device string! [ 137.968562][ T6209] [ 137.977253][ T6209] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 138.635043][ T6192] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 138.805132][ T6192] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.717: bg 0: block 234: padding at end of block bitmap is not set [ 138.866481][ T6192] EXT4-fs (loop0): Remounting filesystem read-only [ 138.996914][ T6216] loop1: detected capacity change from 0 to 40427 [ 139.055230][ T6216] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 139.057696][ T6216] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 139.179670][ T6216] F2FS-fs (loop1): Found nat_bits in checkpoint [ 139.184129][ T6228] ceph: No path or : separator in source [ 139.206354][ T6216] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 139.208494][ T6216] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 139.220366][ T6226] loop2: detected capacity change from 0 to 256 [ 139.746415][ T26] audit: type=1400 audit(140.172:24): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=5D9625292F2F2E212D pid=6230 comm="syz.3.727" [ 141.338524][ T6241] loop0: detected capacity change from 0 to 4096 [ 141.470287][ T6252] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.523035][ T6251] loop3: detected capacity change from 0 to 1024 [ 141.659117][ T6251] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,user_xattr,,errors=continue. Quota mode: writeback. [ 141.829792][ T6237] loop4: detected capacity change from 0 to 32768 [ 141.920008][ T6260] loop3: detected capacity change from 0 to 1024 [ 141.964859][ T6237] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop4 scanned by syz.4.728 (6237) [ 141.993636][ T6237] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 141.996076][ T6237] BTRFS info (device loop4): using free space tree [ 142.004427][ T6237] BTRFS info (device loop4): has skinny extents [ 142.206750][ T6273] loop1: detected capacity change from 0 to 512 [ 142.226736][ T6276] ceph: No path or : separator in source [ 142.290453][ T6273] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 142.299425][ T6249] loop2: detected capacity change from 0 to 32768 [ 142.386642][ T6249] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop2 scanned by syz.2.731 (6249) [ 142.545608][ T6237] BTRFS error (device loop4): open_ctree failed [ 142.547812][ T6249] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 142.550018][ T6249] BTRFS info (device loop2): using free space tree [ 142.552642][ T6249] BTRFS info (device loop2): has skinny extents [ 142.586598][ T6302] loop0: detected capacity change from 0 to 64 [ 142.663212][ T6306] loop1: detected capacity change from 0 to 256 [ 142.965875][ T6249] BTRFS info (device loop2): enabling ssd optimizations [ 144.182698][ T6343] netlink: 'syz.0.753': attribute type 4 has an invalid length. [ 144.216474][ T6343] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 144.341544][ T6353] ceph: No path or : separator in source [ 144.792046][ T6292] loop3: detected capacity change from 0 to 32768 [ 145.676622][ T6292] gfs2: Bad value for 'quota_quantum' [ 145.686315][ T6363] loop0: detected capacity change from 0 to 8192 [ 145.785767][ T6363] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 145.788084][ T6363] REISERFS (device loop0): using ordered data mode [ 145.802415][ T6363] reiserfs: using flush barriers [ 145.820768][ T6363] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 145.859356][ T6363] REISERFS (device loop0): checking transaction log (loop0) [ 145.876489][ T6363] REISERFS (device loop0): Using r5 hash to sort names [ 145.878386][ T6363] REISERFS (device loop0): using 3.5.x disk format [ 145.897940][ T6363] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 145.908563][ T6367] loop1: detected capacity change from 0 to 32768 [ 145.954028][ T6367] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop1 scanned by syz.1.761 (6367) [ 145.966479][ T6367] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 145.968718][ T6367] BTRFS info (device loop1): using free space tree [ 145.979015][ T6367] BTRFS info (device loop1): has skinny extents [ 146.001672][ T6348] loop4: detected capacity change from 0 to 32768 [ 146.033691][ T6363] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 3685, free_space(entry_count) 2 [ 146.039067][ T6363] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 146.069492][ T6363] REISERFS (device loop0): Remounting filesystem read-only [ 146.071417][ T6363] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 4 0x0 SD] stat data [ 146.119782][ T6348] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop4 scanned by syz.4.755 (6348) [ 146.166010][ T6348] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 146.168561][ T6348] BTRFS info (device loop4): using free space tree [ 146.184131][ T6391] ceph: No path or : separator in source [ 146.186197][ T6348] BTRFS info (device loop4): has skinny extents [ 146.253260][ T6397] loop3: detected capacity change from 0 to 128 [ 146.286941][ T6367] BTRFS info (device loop1): enabling ssd optimizations [ 146.397471][ T6397] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 146.427436][ T6348] BTRFS info (device loop4): enabling ssd optimizations [ 146.514191][ T6397] process 'syz.3.770' launched './file2' with NULL argv: empty string added [ 146.730577][ T6429] netlink: 'syz.0.767': attribute type 4 has an invalid length. [ 146.733332][ T6429] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 146.775138][ T6386] chnl_net:caif_netlink_parms(): no params data found [ 148.130077][ T6386] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.132197][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.135310][ T6386] device bridge_slave_0 entered promiscuous mode [ 148.163757][ T6386] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.169053][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.176327][ T6386] device bridge_slave_1 entered promiscuous mode [ 148.197869][ T6098] Bluetooth: hci4: command 0x0409 tx timeout [ 148.353406][ T6386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.392899][ T6386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.600197][ T6386] team0: Port device team_slave_0 added [ 148.621837][ T6386] team0: Port device team_slave_1 added [ 148.666697][ T6471] ceph: No path or : separator in source [ 148.675757][ T6386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.677792][ T6386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.702142][ T6386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.746564][ T6386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.748585][ T6386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.775707][ T6386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.799735][ T6443] chnl_net:caif_netlink_parms(): no params data found [ 148.949172][ T6386] device hsr_slave_0 entered promiscuous mode [ 148.980437][ T6386] device hsr_slave_1 entered promiscuous mode [ 149.017063][ T6386] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.020387][ T6386] Cannot create hsr debugfs directory [ 149.058439][ T6443] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.060440][ T6443] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.063391][ T6443] device bridge_slave_0 entered promiscuous mode [ 149.077120][ T5988] Bluetooth: hci3: command 0x0409 tx timeout [ 149.128776][ T6443] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.130647][ T6443] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.136198][ T6443] device bridge_slave_1 entered promiscuous mode [ 149.241904][ T149] block nbd3: Attempted send on invalid socket [ 149.244386][ T149] blk_update_request: I/O error, dev nbd3, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.248018][ T6484] VFS: unable to read V7 FS superblock on device nbd3. [ 149.250225][ T6484] VFS: could not find a valid V7 on nbd3. [ 149.331983][ T6443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.354221][ T6443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.548588][ T6443] team0: Port device team_slave_0 added [ 150.411002][ T5988] Bluetooth: hci4: command 0x041b tx timeout [ 150.459368][ T6386] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.470079][ T6443] team0: Port device team_slave_1 added [ 150.555010][ T6443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.557347][ T6443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.564199][ T6443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.600180][ T6386] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.616486][ T6443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.618590][ T6443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.631907][ T6443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.778160][ T6386] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.657091][ T6098] Bluetooth: hci3: command 0x041b tx timeout [ 151.707706][ T6443] device hsr_slave_0 entered promiscuous mode [ 151.745881][ T6443] device hsr_slave_1 entered promiscuous mode [ 151.835507][ T6443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.837522][ T6443] Cannot create hsr debugfs directory [ 151.844801][ T6386] bond0: (slave netdevsim0): Releasing backup interface [ 151.887006][ T6386] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.425250][ T4017] Bluetooth: hci4: command 0x040f tx timeout [ 152.492947][ T5403] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.554782][ T6512] loop3: detected capacity change from 0 to 24 [ 152.594695][ T5403] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.683083][ T5403] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.738816][ T5403] bond0: (slave netdevsim0): Releasing backup interface [ 152.770090][ T5403] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.397851][ T6535] loop0: detected capacity change from 0 to 16 [ 153.478325][ T6535] erofs: (device loop0): mounted with root inode @ nid 36. [ 154.492888][ T4017] Bluetooth: hci3: command 0x040f tx timeout [ 154.504171][ T6293] Bluetooth: hci4: command 0x0419 tx timeout [ 154.742937][ T6443] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 155.754875][ T6443] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 155.791785][ T149] block nbd3: Attempted send on invalid socket [ 155.793636][ T149] blk_update_request: I/O error, dev nbd3, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 155.797837][ T6443] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 155.799982][ T6568] VFS: unable to read V7 FS superblock on device nbd3. [ 155.801691][ T6568] VFS: could not find a valid V7 on nbd3. [ 155.825400][ T6443] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 155.827561][ T6565] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [ 155.830422][ T6565] Mem abort info: [ 155.831446][ T6565] ESR = 0x0000000086000006 [ 155.832672][ T6565] EC = 0x21: IABT (current EL), IL = 32 bits [ 155.834343][ T6565] SET = 0, FnV = 0 [ 155.835389][ T6565] EA = 0, S1PTW = 0 [ 155.836314][ T6565] FSC = 0x06: level 2 translation fault [ 155.837787][ T6565] user pgtable: 4k pages, 48-bit VAs, pgdp=000000012266f000 [ 155.839550][ T6565] [0000000000000000] pgd=080000012460d003, p4d=080000012460d003, pud=08000001085fb003, pmd=0000000000000000 [ 155.842851][ T6565] Internal error: Oops: 0000000086000006 [#1] PREEMPT SMP [ 155.844793][ T6565] Modules linked in: [ 155.845805][ T6565] CPU: 0 PID: 6565 Comm: syz.1.801 Not tainted 5.15.163-syzkaller #0 [ 155.847917][ T6565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 155.850455][ T6565] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 155.852646][ T6565] pc : 0x0 [ 155.853471][ T6565] lr : bond_xdp_xmit+0x310/0x4f4 [ 155.854776][ T6565] sp : ffff80001cec7360 [ 155.855885][ T6565] x29: ffff80001cec74a0 x28: 1ffff000039d8e8a x27: 1ffff000039d8e86 [ 155.857853][ T6565] x26: dfff800000000000 x25: ffff0000cb684000 x24: ffff80001cec7420 [ 155.859857][ T6565] x23: ffff80001cec7400 x22: ffff800012971f78 x21: fffffbffeff94f20 [ 155.861892][ T6565] x20: ffff0000d63b0140 x19: 0000000000000000 x18: 0000000000000200 [ 155.864034][ T6565] x17: 0000000000000002 x16: ffff8000082ea3dc x15: 0000000000000001 [ 155.866169][ T6565] x14: ffff0000cc05b680 x13: 0000000000ff0100 x12: 0000000000040000 [ 155.868237][ T6565] x11: 0000000000000537 x10: ffff80001dcaa000 x9 : 0000000000000538 [ 155.870282][ T6565] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 155.872327][ T6565] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000001 [ 155.874442][ T6565] x2 : ffff80001cec7400 x1 : 0000000000000001 x0 : ffff0000cb684000 [ 155.876555][ T6565] Call trace: [ 155.877366][ T6565] 0x0 [ 155.878088][ T6565] bq_xmit_all+0xcf4/0x111c [ 155.879284][ T6565] __dev_flush+0xc8/0x1a0 [ 155.880402][ T6565] xdp_do_flush+0x14/0x28 [ 155.881523][ T6565] tun_get_user+0x27d8/0x3774 [ 155.882780][ T6565] tun_chr_write_iter+0xfc/0x20c [ 155.883912][ T6565] vfs_write+0x884/0xb44 [ 155.885007][ T6565] ksys_write+0x15c/0x26c [ 155.886172][ T6565] __arm64_sys_write+0x7c/0x90 [ 155.887432][ T6565] invoke_syscall+0x98/0x2b8 [ 155.888606][ T6565] el0_svc_common+0x138/0x258 [ 155.889868][ T6565] do_el0_svc+0x58/0x14c [ 155.890870][ T6565] el0_svc+0x7c/0x1f0 [ 155.891964][ T6565] el0t_64_sync_handler+0x84/0xe4 [ 155.893301][ T6565] el0t_64_sync+0x1a0/0x1a4 [ 155.894450][ T6565] Code: bad PC value [ 155.895436][ T6565] ---[ end trace 68ab771ae369bcad ]--- [ 156.426327][ T6565] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 156.428520][ T6565] SMP: stopping secondary CPUs [ 156.429788][ T6565] Kernel Offset: disabled [ 156.430918][ T6565] CPU features: 0x0,000081c1,21302e40 [ 156.432444][ T6565] Memory Limit: none [ 156.983477][ T6565] Rebooting in 86400 seconds..