last executing test programs: 14.264078239s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b076859268cb89e14f088a847", 0x0, 0xec0f, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) 13.101278399s ago: executing program 2: syz_mount_image$hfs(&(0x7f00000001c0), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x4, 0x2b9, &(0x7f00000004c0)="$eJzs3c9q1FwYx/HfyaRt5n1Lm9aKIIJQLbiStm7EjSLdunclameE0qGCVlBX1bV4Ae69BfduXYk3UFeuvICCYuScJG1mJpnEaWfS0e8HNKeZPCfPkz/NOQMlAvDPur2x//7aN/vPSA01JN2QPEmB5Es6q3PBs53drd1OuzWoo4aLsCEmXrhlt82ddl6ojXMR1i0ptD/5mj1ch5EJoij6Onx4/znGRHJ3fw5PmknuTvd5MPbMRmOv7gRqZg50oOeaqzsPAEC9kue/lzznZ5OxnedJK8lj/696/h/UncAJmRoyLvP896V9Rcae33n30dF8zw3v7djPS2eJw+xrWvGV1TXANGWzSpeL13y01Wlf3XzcaXl6rZuJzGZLWpbUii/dVDbbV/1dL1eatzTyehtkum/N/66GKVvDekH+Z/J6Os7RLmM+mc/mngn1Tq3D8Z8fGZu+qyDsOVNx/qvFPboqQ7tVUwVVLridnO8+RiVVBvkzEqVHekHdXxCEZXm6qMWeqLi6teKoaD5e5kStl+xrqTfq6Goujhw189bcNcv6rg/ayIz/PXu0V1TlzrTbuC2TK2NgPb7bMpT0K4pp70Lult4xikKRj+lR7/FGD3Vdc09fvNx+0Om0IyPt2caTdI2R0XbXmvyG8j66WBZ1Mg2/UoYT2vA1sl2kF8HP6FRUWr0xI2m48Kak01LFMI1mcspKbsZg2OPT1xjrbynU5OikV424M9qEMG523GXi+V9mvrLqpkj2v3DAOL1vWNEr0+Nawdxg0fXzX/EMLiM47LZwBld1znXpinS5fI+p0OWpZlnBE8Js6Ivu8/0/AAAAAAAAAAAAAAAAAADApBnHny7UXSMAAAAAAAAAAAAAAAAAAAAAAJPuR/J6kIHv/7XLiu//DY77/l9Vef9v/5uWAPy53wEAAP//sfyG6A==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 12.970382219s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r1, &(0x7f0000000000), 0x100000008) ioctl$EVIOCGVERSION(r1, 0x80044501, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) 8.652317685s ago: executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffe09}], 0x1}, 0x0) write(r2, 0x0, 0x0) 7.57509459s ago: executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "6790f848"}]}}, 0x0}, 0x0) 7.19203957s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x28, 0x4, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 7.075098868s ago: executing program 1: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={0x0, r1, r1}, &(0x7f0000000200)=""/211, 0xd3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000100)={[{@nodelalloc}]}, 0x6, 0x756, &(0x7f00000002c0)="$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") chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x1243, @fixed}, 0xe) r4 = socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180), 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) r5 = dup(r4) r6 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) sendfile(r5, r6, 0x0, 0x80001d00c0d1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x20081e, &(0x7f0000000680), 0x3, 0x51d, &(0x7f00000006c0)="$eJzs3c9vI1cdAPDvOL+cNG3S0gMgoKEUFrRaJ3HaqOoBygkhVAnRI0jbkHijKHYcxU5pwh7S/wGJSpzgyB+A4NYTdy4IblzKAYkfEaipQKrRjMf5tfHGbIKdxp+PNJp5743n+56dec9+SfwCGFpzEXEQEeMR8VZEzOT5Sb7F6+0tPe/Dw4erR4cPV5Notd78e5KVp3lx6jGpp/JrFiPie9+K+GHyaNzG3v7mSrVa2WknJ+ebte35xt7+vY3aynplvbJVLi8vLi+8uvRK+XoaOhLxQm08T3z+g98dfO3HabWm85xOOy6o6pW0rzd2HCc1GhHfueY4gzKSt2d80BXhiRQi4rmIeDG7/2diJHs1AYDbrNWaidbM6TQAcNsVsjmwpFDK5wKmo1AoldpzeM/HVKFabzTvPqjvbq2158pmY6zwYKNaWcjnCmdjLEnTi9nxSbp8Lr0UEc9GxE8mJrN0abVeXRvkGx8AGGJPnRv//zXRHv8BgFuueCbVGlg9AID+KQ66AgBA3xn/AWD4GP8BYPgY/wFg+Bj/AWD4GP8BYKh894030q11lH//9drbe7ub9bfvrVUam6Xa7mpptb6zXVqv19ez7+ypXXa9ar2+vfhy7L4z+/XtRnO+sbd/v1bf3Wrez77X+35lrC+tAgAe59kX3v9jEhEHr01mW5xay8FYDbdbYdAVAAZmZNAVAAbGal8wvK7wGd/0ANwS2Tq1H+eLglxQXoyIyfOZXc7twlsNuGHufMb8PwyrU/P//goYhoz5fxhePpTD8Gq1kl7X/I9eTwQAbjZz/EBycfZz+f6X+S8HfrB2/oz3/p+1AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJuts/5vKV8LfDoKhVIp4umImI2x5MFGtbIQEc9ExB8mxibS9OKA6wwAXFXhL0m+/tedmZemz5eOJx9NZPuI+NHP3vzpOyvN5s7v0/x/HOc338vzy4OoPwBwmc44ne1PfZD/8PDhamfrZ33++s2IKLbjHx2Ox9Fx/NEYzfbFGIuIqX8mebotOTV3cRUH70bE0q/biTPt/3e+QnJ75dPz8dPYT19X/E9f9PwnMZ3NwXTiF87EL2Rl7X36XHzqGuoCw+b9tP95/aL7rxBz2b5z/8XHp++/YtZDXV3e/6WXWj3K+sCT+J3+b6RL/zfXa4yXf/vt9tHko2XvRnx2NKITO906a0F34idd4r/US/C5iD997gsvditu/TziTpyNfxLh5Gi+Wdueb+zt39uoraxX1itb5fLy4vLCq0uvlOezOer57qPB3167+0y3srT9U13iFy9p/5d7aX9E/OI/b33/i4+J/9UvXRS/EM8/Jn46Jn6lx/grU78qditL4691af9lr//dHuN/8Of9R5YNBwAGp7G3v7lSrVZ2+nnQeSPR16AOPpEHnZ+Vdk561OPDfxN9ruo3+hVrPP6nR7VaTxSrW49xHbNuwE1wfNNHxEeDrgwAAAAAAAAAAAAAAHChfvzH0qDbCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwO313wAAAP//UuHaMw==") 5.967553539s ago: executing program 1: bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff85000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x4000008b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a029b30095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = io_uring_setup(0x1694, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x35) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150005000000280016"], 0x4c}}, 0x0) 5.963840969s ago: executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000180)={[{@nonumtail}, {@fat=@debug}, {@fat=@nfs}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@utf8no}, {@uni_xlateno}, {@fat=@nocase}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@uni_xlateno}, {@shortname_lower}, {@shortname_win95}, {@rodir}, {@fat=@discard}, {@shortname_lower}, {@uni_xlateno}]}, 0x3, 0x362, &(0x7f0000000480)="$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") r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x0, "f3c492eb0165203d36bec7080089b42c000004002231a110000000005900", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000140)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"fe0d1acce4a37ef94acd000200", r2, 0xffffffffffffffff}) r4 = dup(r3) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 4.753438826s ago: executing program 3: r0 = socket(0xa, 0x0, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1}, 0xc) 4.735676689s ago: executing program 4: syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2000082, &(0x7f0000000300)={[{@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@utf8}, {@gid_forget}, {@longad}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@gid}, {@partition={'partition', 0x3d, 0x21}}, {@uid_forget}]}, 0x0, 0xc34, &(0x7f0000001080)="$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") chdir(&(0x7f00000001c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x80046c40, 0x0) 4.519056282s ago: executing program 0: r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r1, 0x3}, 0x18) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x13c}}, 0x0) 4.485481687s ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="000886dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b8002944291189"], 0xfdef) 4.476222118s ago: executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffe09}], 0x1}, 0x0) write(r2, 0x0, 0x0) 4.0099447s ago: executing program 3: ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$dsp(r0, &(0x7f00000004c0)="e2", 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 2.385433062s ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x408, &(0x7f0000000200)={[{@barrier}, {@nodatacow}, {@ref_verify}, {@flushoncommit}, {@max_inline={'max_inline', 0x3d, [0x31, 0x33, 0x39, 0x38, 0x78, 0x38, 0x39]}}, {@discard}, {@noenospc_debug}, {@nobarrier}, {@nossd}]}, 0x1, 0x55a3, &(0x7f0000005680)="$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") creat(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000000203010300000000000000000108000008000340000000000800010001"], 0x30}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000002c0)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/xfrm_stat\x00') r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) fallocate(r2, 0x3, 0x0, 0x2) 2.292582576s ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="18010000000c9d6349ab0000000001c61b7b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1\x00'}) socket$netlink(0x10, 0x3, 0x0) pread64(r0, &(0x7f0000000440)=""/126, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'sit0\x00', {0x2, 0x0, @private}}) 2.166532956s ago: executing program 0: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={0x0, r1, r1}, &(0x7f0000000200)=""/211, 0xd3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000100)={[{@nodelalloc}]}, 0x6, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4") chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x1243, @fixed}, 0xe) r4 = socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180), 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000140)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"fe0d1acce4a37ef94acd000200", r2, 0xffffffffffffffff}) r4 = dup(r3) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 1.434493559s ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$user(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x2, &(0x7f0000000140)={r3, 0x0, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 471.105487ms ago: executing program 2: syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2000082, &(0x7f0000000300)={[{@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@utf8}, {@gid_forget}, {@longad}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@gid}, {@partition={'partition', 0x3d, 0x21}}, {@uid_forget}]}, 0x0, 0xc34, &(0x7f0000001080)="$eJzs3U9sHNd9B/DfGy5F0m4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmFoSJNXIbtowvfTQQ4Ci6CEnAq1RIEUDoymKHtnWBZKLD4VPPREtbARFD2wRIKeAxcy+FVf/LMkkJcr+fGzqOzv73sx7M+MZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxO+8cvb48+lhtwIAeJDOT3/1+AnPfwD4RLng//8BAAAAAAAAAAAAAOCgS1HEE5Fi6fxWmq0+dw2fa3euXpuZmLx9tZFU1Ryoypc/w8+fOHnqSy+Mn+7lh9ffa0/Fa9MXztZfXryytNxaWWnN12c67bnF+dY9b2G39W82Vh2A+pXXr85furRSP/HcyRu+vjb6wdDjR0bPjD9z7Ole2ZmJycnpvjK1wY+891vcaYTHoSjiWKR49vs/Ts2IKGL3x+Iu185+G6k6MVZ1YmZisurIQrvZWS2/nOodiCKi3lep0TtGD+Bc7EojYq1sftngsbJ700vN5ebFhVZ9qrm82l5tL3amUre1ZX/qUcTpFLEeEZtDt25uMIqoRYrvHt5KFyNioHccvlgNDL5zO4p97OM9KNtZH4xYLx6Bc3aADUURr0aKn7xTxFx5zPJPfCHi1TL/MeKtMl+KSOWFcSri/eo6GnnILWcv1KKIPyvP/5mtNF/dD3r3lXNfq3+lc2mxr2zvvvLIPx8epAN+bxqOIprVHX8rffTf7AAAAAAAAAAAAAAAAACw10aiiKcixSv//gfVuOKoxqUfPjP+u6M/3z9m/Mm7bKcs+1xErBX3Nib3UB5CPJWmUnrIY4k/yYajiD/K4/++/bAbAwAAAAAAAAAAAAAAAAAA8IlWxHuR4sV3j6b16J9TvN25XL/QvLjQnRW2N/dvb8707e3t7XrqZiPnbM61nOs5N3Ju5owi18/ZyDmbcy3nes6NnJs5YyDXz9nIOZtzLed6zo2cmzmjluvnbOSczbmWcz3nRs7NnHFA5u4FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPg4KaKIn0WK73xjK0WKiEbEbHRzY6hXBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4mIZSET+IFPXfa1xfV4uIVP3bdbT85VQ0DpX56WiMl/lSNM7mbFZZa3z7IbSf3RlMRfwoUgwNv339hOfzP9j9dP0yiLe+ufPpl2rdHOh9OfrB0ONHDp8Zn/yVJ++0nG7XgLFz7c7Va/WZicnJ6b7Vtbz3T/etG837Lfam60TEyhtvvt5cWGgtW/hkLNS6C7XY0y2PROztBvduodZdyPereOjtucNC42A0Y2chqnv/be/ZfGyUz//3I8VvvvsfvQd+7/n/c91P15/w8dM/3nn+v3jzhvbp+f9E37oX8+9GBmsRw6tXlgaPRAyvvPHmsfaV5uXW5Vbn1PHjXx4f//LJ44OHIoYvtRdafUu7PlQAAAAAAAAAAAAAAAAAD1Yq4rcjRfNHW6keEdeq8VqjZ8afOfb0QAxU461uGLf12vSFs/WXF68sLbdWVlrz9ZlOe25xvnWvuxuuhnvNTEzuS2fuamSf2z8y/PLi0hvL7cu/v3rb7x8bPntxZXW5OXf7r2MkiohG/5qxqsEzE5NVoxfazU5VdWqPBmYOpiL+M1LMnaqnz+d1efxfGe8N9pXtH/+/1re+Wt6n8X+fumk/KRXx00jxG3/+ZHy+audjccsxy+X+OlKMnf5cLheHynK9NnTfK9AdGViW/d9I8fc/u7Fsr+9P7JR9/v6O7sFXnv/DkeIHf/q9+NW87sb3P+yM/+w//4/dvKF9Ov+f6Vv32A3vK9h118nn/1ikeOmJt+PX8roPe/9HEdvb29+KOJoLX38/xz6d/8/2rRuN7n5/fe+6DwAAAAAAAAAA8MgaTEX8TaR4erKWXsjr7uXv/83fvKF9+vtfv9i3bv4BzVe064MKAAAAAAfEYCrivUhxefXt62Oo+8Z/3zj+87d25l6fSDd9W/053y9U7w3Yyz//6zea9zu7+24DAAAAAAAAAAAAAAAAAADAgZJSES/k+dRn7zKf+kakeOW/n83l0pGyXG8e+NHq1+Hzi51jZxcWFueaq82LC6369FJzrlXW/Uyk2Pqrz+W6RTW/em+++e4c78PbvbnYlyPF5N/2ynbnYu/NTd6dD7w7F3tZ9lOR4r/+7sayvXmsP7tT9kRZ9i8jxdf/6fZlj+yUPVmW/V6k+OHX672yj5Vle+9H7b6TdLgWC63n5hYXbnkVKgAAAAAAAAAAAAAAAAAAANyvwVTEn0SK/7myHmt52H+e/783A3+tV/atb/bN93+Ta9U8/6PV/P93Wv4o8/+P7llPAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg0ZGiiDcjxdL5rbQxVH7uGj7X7ly9NjMxeftqI6mqOVCVL3+Gnz9x8tSXXhg/3csPr7/XnorXpi+crb+8eGVpubWy0pqvz3Tac4vzrXvewm7r7xy6rrHqANSvvH51/tKllfqJ507e8PW10Q+GHj8yemb8mWNP98rOTExOTveVqQ3ex97vq3E7DkURfxEpnv3+j9M/D0UUsftjcZdrZ7+NVJ0YqzoxMzFZdWSh3eysll9O9Q5EEVHvq9ToHaMHcC52pRGxVja/bPBY2b3ppeZy8+JCqz7VXF5tr7YXO1Op29qyP/Uo4nSKWI+IzaFbNzcYRbweKb57eCv9y1DEQO84fPH89FePn7hzO4p97OM9KNtZH4xYLx6Bc3aADUUR/xApfvLO0fjXoYhadH/iCxGv9hd8KSKVF8apiPdvcx3xaKpFEf9Xnv8zW+mdofJ+0LuvnPta/SudS4t9ZXv3lYP0fNi+/2txZA92e+8O+L1pOIr4YXXH30r/5r9rAAAAAAAAAAAAAAAAgAOkiF+OFC++ezRV44Ovjyludy7XLzQvLnSH9fXG/tUj/rDM7e3t7XrqZiPnbM61nOs5N3Ju5owi18/ZyDmbcy3nes6NnJs5YyDXz9nIOZtzLed6zo2cmzmjVsX29va3uvVruX7OtZzrtYiirJ8/b+aMAzJ2DwAAAAAAAAAAAAAAAAAA+Hgpqn9SfOcbW6maS7URMRvd3DAf6Mfe/wcAAP//3sf+xA==") chdir(&(0x7f00000001c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x80046c40, 0x0) 381.032861ms ago: executing program 3: bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff85000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x4000008b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a029b30095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = io_uring_setup(0x1694, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x35) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150005000000280016"], 0x4c}}, 0x0) 298.711763ms ago: executing program 0: r0 = socket(0xa, 0x0, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1}, 0xc) 247.272192ms ago: executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) read(r0, &(0x7f00000017c0)=""/4106, 0x100a) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000000c0)=0x1, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) 26.557526ms ago: executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="180000000300000000000000a012544f95002b000000000093adffa82255f674412d020000000000005ab527ee3697f1ed4436dd1164b1b3f427f6ba6b34f98125f30e631d273683626e00dc254d570d4a6b78a5833488cfe410090000004aa900003d3cd62f00158e6eee8501000000520a0000151d016e6cafbe9309aba218812868a51d129e78f6ae170bf5a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b000024b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e8b701d2d17ebc406e89dcbb7677e6528b0856e31eb9474c0106fc48e1f8c1a5f6945ac24cf609068f6ff21e88b3cfc22df01d51e242443618c02e0a428da651366e4bac9d97328fa2a82b5e8741e02056d933bedf59ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e148bf56497e5d56d06c7551b870b2851c3f0a1aab7158edeeccd92e3a88dc0f432187ce92d7b17a21c8f1b3369ebfcb4cb2946601b0f04edb256c604f068773f6db9d661bd7f0e2536f00000000000000005521458b7d1e341c6f864f983d745f5865aad41d29158ae7602a2d6cd415e8351ebc283df54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121a96eb373845255012e028cb2654d493afb4b35faae176f99b745eda2967199cc93685bb444f9bc50713061385537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d0007ae4e1e347c0cff28235a6bb7aa3804b907a8f2880c5cb1cb385e6add14652003c7cdd3324f07d1ff07000000000000000009dd872ec64fa6c718bbd1aa591140cff0be4c6f8df084c5e9734ae30aa9afdc7125f01ab03a9b1074407136b4506000f0916aada035df2e0452a9b39e73aeeb6eaf14652dda689e2051d9b7eb85f3f2d5ab2c51944da8d7391d5b6b97419a3b76600cd1aa0afe5f8f46df4c5124ca425d374b371867a79b31f3f514573f1e30d1fd2d763f3ee9210b15c1d60be2168fffcd599a2cb77f124e22f87673675805494db821f39b50d5fd8c6b2a3a324c257bc97def5f07f2b77f05a4f81a9cf8110971b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c4407eca22debc99335583b00013c3130978fa069af8223b38ced735c2d90c6d84c30a0d87d42647489b39601be5c27696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f240080000534187738655d7a6240412c8f283cc0c1eba2866dc9580000000000000007fffffffff554b82d9c162f3556076b80552d961ca74d1ffdaccf0ea5f02e0163a9ccb9087e6c3b3917bb74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb01f7ada800e50000000000fdaf2f7b3b79a433e08074ea2462974ab2cbd2190780fa39c43ea647eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433d866665b98ca2002c836e89feef904c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc8d0834fb8d124638fec58faeb4c16abb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a68d2bb2dd163e863314e8449801b52bb93f6c9084659ce777dda8563c859656a357770289a61faa95a82bf1cfb7f2f97252e9322abe282c3344fc6738b4467893b9bf0000000000000001062a35376413c29f7c6f7bde29b9f4bddd5e328661f4615e627a6f608ad53a4168fe8e5d7d934aa289b4bd2b870000000000000000000000000000fc4b4ff50000009b777883a02ffd92dfc4cb4114b9f9cf4ad155110cd3ace2b322ae31bfa27847c799c8869a1ea5018e525e6383ad7fd9795170e7b11e247603000000001459c7f606d721d3979676bffb3049166ab84ac1061991bd57c2566c10c296352a5105b6164e3f2491e4793e2b70590dcc71f110da96366c40dd44a2c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaabf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5002adef9546abb7a2d9c085b189b5ff30e4e0c13f60870fde1f88d830b11002135e8e7262f29b6d7923bfbe0bd2a8be179e56b41ff3792cee2fc37eee739c3008ce740d8804f8e705f0dc59d000021363e8df94ff175b48dc8c12def681a11647946595445bf1cb7d2778cd27a6b3b2966b08be600000020a8a711d193bae0ab2db9ed9c6cb3c3de42ab89524414cae922141f7baf17ebb790ad60bd0387837e63f9880fd70259e35590afb4843cd4e9989398eaa89cefb3aa13cab8d015cbaf1561d95362decd73b8f8cbf8269cac091cfaaa3c7e46d6e79145fc0f1d1b383752ccb40515a772356d746914540216adf4c0f44f1cff3760afa252720ec6dad3a98671ecdaff46cddffb1f05a0c0976070d603a442d014822369fa3eacbb69bd1b0a074357acd5d02161fed146ad3aa15d2b8101b7bd1e091ada78ecd50181f4b35cae1b29aff91494c916323b61f815c4e0701657087ad11eef97952921365bc898ba2c76a9b6e0052f43b1ad2dfdf3f958fc1d32e692bc8846c78a956ada453c67c1c2cdc4f8b1c94e9adc106e85b31e030d955c5578e107a6e8ca0d4dd05344c3e2af25d9a3b0f7805624016aeab271a75f0bacb101a156ef8948064569154a7de08f80e4df4c339b69431b0a5671097d89212b465b0b32275deae10a77e334c9fc074d181bdeb5be80a6249d472e78e6be57a5ccd354cf181e099605a644ecade221a2be926210b2690d09e4b7a3dea25403397439979c27d5613262de10bacecfff2d58437f012df4252c018795310c25e8fce18ed366ac2caade564ca869727a7d63c26271e17d7aba48971835530311545273d3caadeb5d2017dc816126b6f2068f68a4111ddd587b5df4b5d8f1ce00231a2092eb2e797c491a1e66f73606fd95bb01b53a2d862b6262f0259da51ff7517ace7361460a4669a97f7d0bf095c2787f00bdbfee19670d1e0ec5e6c3cb09972fa4d94986157b96d6695177c99d83716651129320924352cda7b8ead91c3301af620c1e8d7004d29ad77f54836779600bb0b247139d429df96362db3ecfbd36fa8164fabdcf2e58b720e8e1c03a74daf593f92a8ecc03f8c8e3af9ae07dc03780cc0d69da9e3528c1693fb51998731992ceb27dcc0be5be4decefe41b78bc1847bf54b087e095172f06cfa6d4bf958b1d4544947ff1230655199db4f475006047fe83caca97758dffa53cee764f85932eb20d54241b2d515c0826dfe1f0f40ae920455a4548fb35e2a345c05b1c252b7877bb3d834b0b3579a36249146f832ef258df5127318c7017ac1a996c4f902f82deb60fd113ccf812d55ffd625057bd4ff3960992b85bc8d32edfca386be16b1c549aec52e31e1405f86c7760282901750b732ec06b0db735222a56f3ebb16fad3e9269495230cd88b0ea2e3affa196a2f0adf733bc6afd37a659ecc933d636c1b27d3a16c5ea25301f9b5789e4aa8e7228e3002f146aa5e575bb74b1ebb82147edf8161d362704377058e887c608be8719ea1b6c490f79e0832e2ddd7e217c7adddd4731e032d7eb35bdc38160c676d840e2e8be9033a686cf7061f5f55e2851736aa8c2f3bad8ac05c048e20d8c03b68008a70b8f80c93ebd2ababb5c65fe9abc4642d7b58d8c93efd7b6b39c68a16d75a7852dfc37a6a50cb28a9b6f685a465d08fc603d81d8ddd5296fae97be1401a8be7748a71fcdc85ba2049e96c4e6dce59b88cd5472726bc237fbcf3ffcbf32e2aac9b2f9d6013b59780ded723b08c767fa091e2fa4d51863500fcd5041bcc98a685504835743194113ea0b97b4f9ddc395b9ac4defefadd37a8871fd91f31a56eb96ecf90000000000000000000000000000000000000000000c447ea475c236c3b7f24079fe375f3f861fc54d9d8a04a6cb8c0dbf9e9cc53a84a5795ae5ebcbd825e3572df16fbdcd395e995fa4fcbbf31583d9e1d3ff537f401a3139200a8bd2122157887199cd54075a4d5b29935dda5c6aa0f3ac6895eb73c7abbd4603abdaa8629dedb2cab0fa80f9514ad310491a9a300015c18cdfd9342cff50d849d7516134d45d1a8cf157abe0c79de543993cf689f8a7113508fbf8a610417045e6c38a5d4ff4656dbd9656ad6ce625e1674ab57944ebb834743a248a2be304ba1e037cb63a169d340be8befc1b238a"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffe09}], 0x1}, 0x0) write(r2, 0x0, 0x0) 0s ago: executing program 4: r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r1, 0x3}, 0x18) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x13c}}, 0x0) kernel console output (not intermixed with test programs): [ 547.510287][ T3627] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 547.528073][ T3627] cdc_ncm 3-1:1.1: bind() failure [ 547.547936][ T3627] usb 3-1: USB disconnect, device number 14 [ 547.754118][T12956] loop0: detected capacity change from 0 to 32768 [ 547.774356][T12956] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (12956) [ 547.919896][T12956] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 547.943050][T12956] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 547.954187][T12956] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 547.964219][T12956] BTRFS info (device loop0): use zstd compression, level 3 [ 547.985704][T12956] BTRFS info (device loop0): using free space tree [ 548.115444][T12956] BTRFS info (device loop0): enabling ssd optimizations [ 548.132701][T12956] BTRFS info (device loop0): checking UUID tree [ 548.221733][T12188] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 548.965641][ T3627] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 549.495842][ T3627] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.665821][ T3627] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 549.680117][ T3627] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.691283][T13055] loop0: detected capacity change from 0 to 32768 [ 549.700534][ T3627] usb 3-1: Product: syz [ 549.707974][T13055] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (13055) [ 549.710638][ T3627] usb 3-1: Manufacturer: syz [ 549.737158][ T3627] usb 3-1: SerialNumber: syz [ 549.744653][T13055] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 549.761148][T13055] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 549.771850][T13055] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 549.805623][T13055] BTRFS info (device loop0): use zstd compression, level 3 [ 549.812912][T13055] BTRFS info (device loop0): using free space tree [ 549.932955][T13055] BTRFS info (device loop0): enabling ssd optimizations [ 549.949819][T13055] BTRFS info (device loop0): checking UUID tree [ 550.161242][T12188] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 550.515857][ T3627] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 550.521979][ T3627] cdc_ncm 3-1:1.0: bind() failure [ 550.544083][ T3627] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 550.564922][ T3627] cdc_ncm 3-1:1.1: bind() failure [ 550.589166][ T3627] usb 3-1: USB disconnect, device number 15 [ 551.439618][T13149] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 551.951721][ T5350] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 552.081681][T13177] sctp: [Deprecated]: syz-executor.3 (pid 13177) Use of int in maxseg socket option. [ 552.081681][T13177] Use struct sctp_assoc_value instead [ 552.355878][ T5350] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.541608][ T5350] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 552.582310][ T5350] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.618261][ T5350] usb 1-1: Product: syz [ 552.668193][ T5350] usb 1-1: Manufacturer: syz [ 552.685589][ T5350] usb 1-1: SerialNumber: syz [ 552.849791][T13194] loop3: detected capacity change from 0 to 2048 [ 552.926074][T13194] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 552.934822][T13194] ext4 filesystem being mounted at /root/syzkaller-testdir2880433004/syzkaller.pwXi7s/148/file0 supports timestamps until 2038 (0x7fffffff) [ 553.015848][T13194] EXT4-fs error (device loop3): ext4_find_dest_de:2112: inode #2: block 16: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 553.036210][ C0] vkms_vblank_simulate: vblank timer overrun [ 553.114411][T11435] EXT4-fs (loop3): unmounting filesystem. [ 553.395809][ T5350] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 553.401892][ T5350] cdc_ncm 1-1:1.0: bind() failure [ 553.421481][ T5350] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 553.437530][ T5350] cdc_ncm 1-1:1.1: bind() failure [ 553.462625][ T5350] usb 1-1: USB disconnect, device number 19 [ 554.517235][T13232] loop3: detected capacity change from 0 to 2048 [ 554.564955][T13232] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 554.577870][T13232] ext4 filesystem being mounted at /root/syzkaller-testdir2880433004/syzkaller.pwXi7s/150/file0 supports timestamps until 2038 (0x7fffffff) [ 554.673913][T13232] EXT4-fs error (device loop3): ext4_find_dest_de:2112: inode #2: block 16: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 554.777769][T13248] "syz-executor.1" (13248) uses obsolete ecb(arc4) skcipher [ 554.811629][T11435] EXT4-fs (loop3): unmounting filesystem. [ 556.211406][T12677] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 556.781983][T12677] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 556.806115][T12677] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 556.842621][T12677] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 556.985894][T12677] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 557.002184][T12677] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 557.044052][T12677] usb 1-1: SerialNumber: syz [ 557.126746][T12677] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 557.532576][T12677] usb 1-1: USB disconnect, device number 20 [ 559.233668][T13366] loop1: detected capacity change from 0 to 2048 [ 559.324372][T13366] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 559.335843][T13366] ext4 filesystem being mounted at /root/syzkaller-testdir874786854/syzkaller.oumRP4/445/file0 supports timestamps until 2038 (0x7fffffff) [ 559.434249][T13362] EXT4-fs error (device loop1): ext4_find_dest_de:2112: inode #2: block 16: comm syz-executor.1: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 559.563634][ T7621] EXT4-fs (loop1): unmounting filesystem. [ 560.035261][T13408] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.0'. [ 560.380745][T13407] loop3: detected capacity change from 0 to 2048 [ 560.539145][T13407] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 560.571436][T13407] ext4 filesystem being mounted at /root/syzkaller-testdir2880433004/syzkaller.pwXi7s/171/file0 supports timestamps until 2038 (0x7fffffff) [ 560.753138][T13407] EXT4-fs error (device loop3): ext4_find_dest_de:2112: inode #2: block 16: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 560.879828][T11435] EXT4-fs (loop3): unmounting filesystem. [ 561.180377][T13444] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.0'. [ 562.358690][T13477] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 562.867000][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.381007][T13499] "syz-executor.4" (13499) uses obsolete ecb(arc4) skcipher [ 564.789083][T13531] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 565.513431][T13529] loop2: detected capacity change from 0 to 2048 [ 565.544971][T13529] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 565.584340][T13529] ext4 filesystem being mounted at /root/syzkaller-testdir2574579883/syzkaller.mjlF9p/274/file0 supports timestamps until 2038 (0x7fffffff) [ 565.630739][T13524] EXT4-fs error (device loop2): ext4_find_dest_de:2112: inode #2: block 16: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 565.872054][ T9955] EXT4-fs (loop2): unmounting filesystem. [ 565.885429][T13550] loop3: detected capacity change from 0 to 128 [ 565.922591][T13550] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 566.566556][T13577] "syz-executor.4" (13577) uses obsolete ecb(arc4) skcipher [ 571.225870][T13670] loop3: detected capacity change from 0 to 2048 [ 571.312250][T13670] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 571.356170][T13670] ext4 filesystem being mounted at /root/syzkaller-testdir2880433004/syzkaller.pwXi7s/197/file0 supports timestamps until 2038 (0x7fffffff) [ 571.412548][T13665] EXT4-fs error (device loop3): ext4_find_dest_de:2112: inode #2: block 16: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 571.606554][T11435] EXT4-fs (loop3): unmounting filesystem. [ 571.641319][T13693] "syz-executor.2" (13693) uses obsolete ecb(arc4) skcipher [ 573.420281][T13709] loop3: detected capacity change from 0 to 32768 [ 573.465674][T13709] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (13709) [ 573.514838][T13709] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 573.535738][T13709] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 573.545833][T13709] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 573.555355][T13709] BTRFS info (device loop3): use zstd compression, level 3 [ 573.562969][T13709] BTRFS info (device loop3): using free space tree [ 573.791819][T13709] BTRFS info (device loop3): enabling ssd optimizations [ 573.815056][T13709] BTRFS info (device loop3): checking UUID tree [ 574.053258][T11435] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 575.004407][T13798] loop1: detected capacity change from 0 to 2048 [ 575.131690][T13798] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 575.150677][T13798] ext4 filesystem being mounted at /root/syzkaller-testdir874786854/syzkaller.oumRP4/453/file0 supports timestamps until 2038 (0x7fffffff) [ 575.204139][T13796] EXT4-fs error (device loop1): ext4_find_dest_de:2112: inode #2: block 16: comm syz-executor.1: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 575.371075][ T7621] EXT4-fs (loop1): unmounting filesystem. [ 575.431280][T13814] "syz-executor.2" (13814) uses obsolete ecb(arc4) skcipher [ 578.961680][T13905] loop2: detected capacity change from 0 to 256 [ 578.984592][T13905] FAT-fs (loop2): Unrecognized mount option "ut" or missing value [ 579.243551][T13905] loop2: detected capacity change from 0 to 1024 [ 579.850536][T13905] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 580.828395][ T9955] EXT4-fs (loop2): unmounting filesystem. [ 581.441257][T13916] loop1: detected capacity change from 0 to 32768 [ 581.524584][T13916] XFS (loop1): Mounting V5 Filesystem [ 581.629039][T13915] loop4: detected capacity change from 0 to 32768 [ 581.637869][T13916] XFS (loop1): Ending clean mount [ 581.647417][T13916] XFS (loop1): Quotacheck needed: Please wait. [ 581.853596][T13916] XFS (loop1): Quotacheck: Done. [ 581.870528][T13915] XFS (loop4): Mounting V5 Filesystem [ 581.891066][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 581.891082][ T26] audit: type=1800 audit(1717580739.226:782): pid=13916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1067 res=0 errno=0 [ 582.594023][ T26] audit: type=1800 audit(1717580739.366:783): pid=13953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1067 res=0 errno=0 [ 582.642879][T13915] XFS (loop4): Ending clean mount [ 582.685887][T13915] XFS (loop4): Quotacheck needed: Please wait. [ 582.694877][ T7621] XFS (loop1): Unmounting Filesystem [ 582.713060][ T26] audit: type=1800 audit(1717580739.886:784): pid=13951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1067 res=0 errno=0 [ 582.734964][ T26] audit: type=1800 audit(1717580739.996:785): pid=13956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1967 res=0 errno=0 [ 582.834122][T13915] XFS (loop4): Quotacheck: Done. [ 582.873444][ T26] audit: type=1800 audit(1717580740.206:786): pid=13915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=1067 res=0 errno=0 [ 582.915777][T13963] loop2: detected capacity change from 0 to 1024 [ 582.927097][ T26] audit: type=1800 audit(1717580740.206:787): pid=13915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=1067 res=0 errno=0 [ 582.970536][ T26] audit: type=1800 audit(1717580740.286:788): pid=13965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=1067 res=0 errno=0 [ 582.979911][T13963] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 583.071859][ T26] audit: type=1800 audit(1717580740.306:789): pid=13965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=1067 res=0 errno=0 [ 583.092738][ C1] vkms_vblank_simulate: vblank timer overrun [ 583.162535][ T9955] EXT4-fs (loop2): unmounting filesystem. [ 583.192409][ T8124] XFS (loop4): Unmounting Filesystem [ 583.326474][T13971] loop2: detected capacity change from 0 to 512 [ 583.407967][T13971] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 583.429195][T13971] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 583.463699][T13971] EXT4-fs (loop2): 1 truncate cleaned up [ 583.482088][T13971] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 583.543821][T13971] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 583.701119][ T9955] EXT4-fs (loop2): unmounting filesystem. [ 585.552783][T13991] loop1: detected capacity change from 0 to 32768 [ 585.599841][T13991] XFS (loop1): Mounting V5 Filesystem [ 585.691778][T13991] XFS (loop1): Ending clean mount [ 585.714717][T13991] XFS (loop1): Quotacheck needed: Please wait. [ 585.798476][T13991] XFS (loop1): Quotacheck: Done. [ 585.832790][ T26] audit: type=1800 audit(1717580743.166:790): pid=13991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1067 res=0 errno=0 [ 585.868910][ T26] audit: type=1800 audit(1717580743.206:791): pid=13991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1067 res=0 errno=0 [ 585.889894][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.086932][ T7621] XFS (loop1): Unmounting Filesystem [ 586.206004][T14017] loop2: detected capacity change from 0 to 512 [ 586.395441][T14017] EXT4-fs (loop2): 1 orphan inode deleted [ 586.404001][T14017] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 586.419526][T14017] ext4 filesystem being mounted at /root/syzkaller-testdir2574579883/syzkaller.mjlF9p/319/file0 supports timestamps until 2038 (0x7fffffff) [ 586.611118][T14025] loop0: detected capacity change from 0 to 256 [ 587.233160][T14026] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5868: Corrupt filesystem [ 587.295760][T14026] EXT4-fs error (device loop2): ext4_dirty_inode:6072: inode #16: comm syz-executor.2: mark_inode_dirty error [ 587.462930][ T9955] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz-executor.2: path /root/syzkaller-testdir2574579883/syzkaller.mjlF9p/319/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=4096 fake=0 [ 587.606141][ T9955] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5868: Corrupt filesystem [ 587.632383][ T9955] EXT4-fs error (device loop2): ext4_dirty_inode:6072: inode #2: comm syz-executor.2: mark_inode_dirty error [ 587.637732][T14028] "syz-executor.0" (14028) uses obsolete ecb(arc4) skcipher [ 587.695671][ T9955] EXT4-fs (loop2): unmounting filesystem. [ 587.706680][ T9955] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5868: Corrupt filesystem [ 587.759771][ T9955] EXT4-fs error (device loop2): ext4_quota_off:7066: inode #3: comm syz-executor.2: mark_inode_dirty error [ 587.830539][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 587.830556][ T26] audit: type=1326 audit(1717580745.166:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14029 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff553a7cee9 code=0x7ffc0000 [ 587.890064][ T26] audit: type=1326 audit(1717580745.166:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14029 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff553a7cee9 code=0x7ffc0000 [ 587.915830][ T26] audit: type=1326 audit(1717580745.166:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14029 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff553a7cee9 code=0x7ffc0000 [ 587.961798][ T26] audit: type=1326 audit(1717580745.166:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14029 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7ff553a7cee9 code=0x7ffc0000 [ 588.013165][T14032] caif0 speed is unknown, defaulting to 1000 [ 588.019200][ T26] audit: type=1326 audit(1717580745.166:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14029 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff553a7cee9 code=0x7ffc0000 [ 588.046052][T14032] caif0 speed is unknown, defaulting to 1000 [ 588.052901][T14032] caif0 speed is unknown, defaulting to 1000 [ 588.496405][T14032] infiniband syz0: set down [ 588.522091][T14032] infiniband syz0: added caif0 [ 588.573794][ T6903] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.683809][T14042] hub 9-0:1.0: USB hub found [ 588.688972][T14042] hub 9-0:1.0: 8 ports detected [ 589.331501][ T5351] caif0 speed is unknown, defaulting to 1000 [ 589.427671][T14032] infiniband syz0: Couldn't open port 1 [ 589.516863][T14032] RDS/IB: syz0: added [ 589.522127][T14032] smc: adding ib device syz0 with port count 1 [ 589.544410][T14032] smc: ib device syz0 port 1 has pnetid [ 589.619026][ T6903] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.698294][T12677] caif0 speed is unknown, defaulting to 1000 [ 589.708486][T14032] caif0 speed is unknown, defaulting to 1000 [ 589.771935][ T6903] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.874345][ T6903] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.145044][T14032] caif0 speed is unknown, defaulting to 1000 [ 590.227032][ T3578] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 590.248288][ T3578] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 590.258565][ T3578] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 590.268083][ T3578] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 590.286098][ T3578] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 590.298684][ T3578] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 590.331342][T14040] loop0: detected capacity change from 0 to 32768 [ 590.451210][T14040] XFS (loop0): Mounting V5 Filesystem [ 590.596674][T14052] caif0 speed is unknown, defaulting to 1000 [ 590.620788][T14040] XFS (loop0): Ending clean mount [ 590.660730][T14040] XFS (loop0): Quotacheck needed: Please wait. [ 590.741880][T14040] XFS (loop0): Quotacheck: Done. [ 590.852742][T14051] loop4: detected capacity change from 0 to 40427 [ 590.869233][T12188] XFS (loop0): Unmounting Filesystem [ 590.900375][T14051] F2FS-fs (loop4): invalid crc value [ 590.921770][T14051] F2FS-fs (loop4): Found nat_bits in checkpoint [ 591.044104][T14032] caif0 speed is unknown, defaulting to 1000 [ 591.073852][T14051] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 591.116864][ T26] audit: type=1804 audit(1717580748.436:798): pid=14051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2996149863/syzkaller.24R2Uk/420/file0/file0" dev="loop4" ino=10 res=1 errno=0 [ 591.139903][T14065] "syz-executor.3" (14065) uses obsolete ecb(arc4) skcipher [ 591.953751][T14032] caif0 speed is unknown, defaulting to 1000 [ 592.051228][ T8124] syz-executor.4: attempt to access beyond end of device [ 592.051228][ T8124] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 592.069113][T14052] chnl_net:caif_netlink_parms(): no params data found [ 592.310261][T14032] caif0 speed is unknown, defaulting to 1000 [ 592.335927][ T47] Bluetooth: hci0: command tx timeout [ 592.460872][T14052] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.499923][T14052] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.536796][T14052] device bridge_slave_0 entered promiscuous mode [ 592.564755][T14052] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.590907][T14052] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.618339][T14052] device bridge_slave_1 entered promiscuous mode [ 592.736723][ T6903] device hsr_slave_0 left promiscuous mode [ 592.751482][ T6903] device hsr_slave_1 left promiscuous mode [ 592.757717][ T3669] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 592.793505][ T6903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 592.803593][ T6903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.835037][ T6903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 592.847094][ T6903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.863943][ T6903] device bridge_slave_1 left promiscuous mode [ 592.874841][ T6903] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.891014][ T6903] device bridge_slave_0 left promiscuous mode [ 592.906612][ T6903] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.923338][ T6903] device veth1_macvtap left promiscuous mode [ 592.929890][ T6903] device veth0_macvtap left promiscuous mode [ 592.946331][ T6903] device veth1_vlan left promiscuous mode [ 592.952375][ T6903] device veth0_vlan left promiscuous mode [ 594.145657][ T3669] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.161666][ T3669] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.199697][ T3669] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 594.223761][ T6903] team0 (unregistering): Port device team_slave_1 removed [ 594.236610][ T3669] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 594.253030][ T3669] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.270563][ T6903] team0 (unregistering): Port device team_slave_0 removed [ 594.279128][ T3669] usb 4-1: config 0 descriptor?? [ 594.300848][ T6903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 594.333214][ T6903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 594.415723][ T47] Bluetooth: hci0: command tx timeout [ 594.533961][ T6903] bond0 (unregistering): Released all slaves [ 594.624788][T14052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.648933][T14052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.791472][T14052] team0: Port device team_slave_0 added [ 594.799648][ T3669] acrux 0003:1A34:0802.000E: item fetching failed at offset 2/5 [ 594.799730][T14103] "syz-executor.0" (14103) uses obsolete ecb(arc4) skcipher [ 594.810689][ T3669] acrux 0003:1A34:0802.000E: parse failed [ 594.841886][T14052] team0: Port device team_slave_1 added [ 594.850604][ T3669] acrux: probe of 0003:1A34:0802.000E failed with error -22 [ 594.896219][T14052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.903212][T14052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.965611][T14052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.021552][T14052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.104919][ T7] usb 4-1: USB disconnect, device number 13 [ 595.235197][T14109] hub 9-0:1.0: USB hub found [ 595.241975][T14109] hub 9-0:1.0: 8 ports detected [ 595.414396][T14052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.960280][T14052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.143430][T14117] loop0: detected capacity change from 0 to 256 [ 596.164881][T14052] device hsr_slave_0 entered promiscuous mode [ 596.173034][T14052] device hsr_slave_1 entered promiscuous mode [ 596.212068][T14052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 596.231460][T14052] Cannot create hsr debugfs directory [ 596.382303][T14121] loop0: detected capacity change from 0 to 1024 [ 596.495645][ T47] Bluetooth: hci0: command tx timeout [ 597.935650][ T5664] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 597.974866][T14052] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 597.998751][T14052] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 598.019485][T14052] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 598.039009][T14052] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 598.126363][ T7] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 598.185739][T14052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.219554][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 598.236646][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 598.248253][T14052] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.286882][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 598.305852][ T5664] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 598.306701][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 598.331976][ T5664] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.338972][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.350143][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.367911][ T5664] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.385227][ T5664] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 598.391769][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 598.407563][ T5664] usb 5-1: New USB device found, idVendor=04d8, idProduct=8b02, bcdDevice=80.91 [ 598.425306][ T5664] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.432131][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 598.451165][ T5664] usb 5-1: config 0 descriptor?? [ 598.457810][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.464977][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.488777][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 598.496714][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.528177][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.531928][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 598.555426][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 598.576056][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 598.597946][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 598.606066][ T47] Bluetooth: hci0: command tx timeout [ 598.634185][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 598.647987][ T7] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 598.658520][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.663823][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 598.668319][ T7] usb 2-1: config 0 descriptor?? [ 598.685289][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 598.702825][T14052] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 598.749455][T14052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 598.769351][T14136] loop0: detected capacity change from 0 to 32768 [ 598.779016][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 598.785261][T14136] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (14136) [ 598.790034][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 598.817415][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 598.829713][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 598.839498][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 598.857654][T14136] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 598.868230][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 598.895716][T14136] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 598.923220][T14136] BTRFS info (device loop0): using free space tree [ 598.949026][ T5664] hid-generic 0003:04D8:8B02.000F: unknown main item tag 0x0 [ 598.968803][ T5664] hid-generic 0003:04D8:8B02.000F: unknown main item tag 0x0 [ 598.986133][ T26] audit: type=1800 audit(1717580756.316:799): pid=14146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="overlay" ino=1965 res=0 errno=0 [ 598.989576][ T5664] hid-generic 0003:04D8:8B02.000F: unknown main item tag 0x0 [ 599.042342][ T5664] hid-generic 0003:04D8:8B02.000F: unknown main item tag 0x0 [ 599.057925][ T5664] hid-generic 0003:04D8:8B02.000F: unknown main item tag 0x0 [ 599.073257][ T5664] hid-generic 0003:04D8:8B02.000F: unknown main item tag 0x0 [ 599.105765][ T5664] hid-generic 0003:04D8:8B02.000F: unknown main item tag 0x0 [ 599.116758][ T5664] hid-generic 0003:04D8:8B02.000F: hidraw0: USB HID v0.01 Device [HID 04d8:8b02] on usb-dummy_hcd.4-1/input0 [ 599.130751][T14136] BTRFS info (device loop0): enabling ssd optimizations [ 599.147337][ T7] acrux 0003:1A34:0802.0010: item fetching failed at offset 2/5 [ 599.160164][ T7] acrux 0003:1A34:0802.0010: parse failed [ 599.178481][ T7] acrux: probe of 0003:1A34:0802.0010 failed with error -22 [ 599.199184][ T5664] usb 5-1: USB disconnect, device number 10 [ 599.265437][ T26] audit: type=1800 audit(1717580756.596:800): pid=14136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 599.304904][ T26] audit: type=1800 audit(1717580756.606:801): pid=14136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 599.364332][ T7] usb 2-1: USB disconnect, device number 8 [ 599.413141][ T26] audit: type=1800 audit(1717580756.716:802): pid=14168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 599.433943][ C0] vkms_vblank_simulate: vblank timer overrun [ 599.501163][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 599.509512][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 599.544092][T14052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.564913][ T26] audit: type=1800 audit(1717580756.726:803): pid=14168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 599.585785][ C0] vkms_vblank_simulate: vblank timer overrun [ 599.632662][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 599.666274][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 599.727984][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 599.748737][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 599.782773][T14052] device veth0_vlan entered promiscuous mode [ 599.796571][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 599.809079][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 599.849428][T14052] device veth1_vlan entered promiscuous mode [ 599.875781][T14173] loop4: detected capacity change from 0 to 512 [ 599.913090][T14173] ext4: Unknown parameter 'pcr' [ 599.968311][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 599.984451][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 599.987787][T12188] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 600.032340][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 600.074536][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 600.150531][T14052] device veth0_macvtap entered promiscuous mode [ 600.208857][T14173] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 600.219860][T14173] device gretap0 entered promiscuous mode [ 600.242868][T14052] device veth1_macvtap entered promiscuous mode [ 600.391918][T14052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.446691][T14052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.471166][T14052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.505419][T14052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.564948][ T47] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 600.579541][ T47] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 600.592617][T14052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.603512][ T47] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 600.610695][T14052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.620665][T14052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.631693][T14052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.641824][ T47] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 600.650709][T14052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 600.661544][ T47] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 600.669229][ T47] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 600.683367][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 600.694834][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 600.716325][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 600.725220][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 600.736969][T14052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.750429][T14052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.760580][T14052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.771123][T14052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.781278][T14052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.792104][T14052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.802393][T14052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.813199][T14052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.832723][T14052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.867285][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 600.883797][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 601.812767][T14052] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.839781][T14052] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.875569][T14052] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.884531][T14052] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.898794][T14170] loop3: detected capacity change from 0 to 32768 [ 601.973242][T14179] caif0 speed is unknown, defaulting to 1000 [ 602.119785][T14170] XFS (loop3): Mounting V5 Filesystem [ 602.375118][T14170] XFS (loop3): Ending clean mount [ 602.402973][T14170] XFS (loop3): Quotacheck needed: Please wait. [ 602.405375][ T6897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.465712][ T6897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.484604][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 602.552134][T14201] vivid-008: disconnect [ 602.581313][T14170] XFS (loop3): Quotacheck: Done. [ 602.598071][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.634605][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.661966][T11435] XFS (loop3): Unmounting Filesystem [ 602.682980][T14181] vivid-008: reconnect [ 602.735776][ T47] Bluetooth: hci5: command tx timeout [ 602.875984][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 603.243008][ T6897] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.324552][ T6897] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.360347][T14211] loop2: detected capacity change from 0 to 16 [ 603.419704][T14211] erofs: (device loop2): mounted with root inode @ nid 36. [ 603.461744][ T6897] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.500883][T14179] chnl_net:caif_netlink_parms(): no params data found [ 603.566516][T14211] syz-executor.2: attempt to access beyond end of device [ 603.566516][T14211] loop2: rw=0, sector=1049272, nr_sectors = 32 limit=16 [ 603.612738][ T6897] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.616557][T14211] syz-executor.2: attempt to access beyond end of device [ 603.616557][T14211] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 603.729235][T14211] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 603.751349][T14211] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 16 of nid 36 [ 604.085305][T14179] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.098457][T14179] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.120906][T14179] device bridge_slave_0 entered promiscuous mode [ 604.147769][T14179] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.165781][T14179] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.174604][T14179] device bridge_slave_1 entered promiscuous mode [ 604.201274][T14237] loop4: detected capacity change from 0 to 512 [ 604.308018][T14179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.341348][T14237] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 604.359101][T14179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.371181][T14237] ext4 filesystem being mounted at /root/syzkaller-testdir2996149863/syzkaller.24R2Uk/432/bus supports timestamps until 2038 (0x7fffffff) [ 604.500946][T14179] team0: Port device team_slave_0 added [ 604.552653][T14179] team0: Port device team_slave_1 added [ 604.632060][T14179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.670608][T14179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.707013][ T8124] EXT4-fs (loop4): unmounting filesystem. [ 604.754582][T14179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.794310][T14179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.815579][ T47] Bluetooth: hci5: command tx timeout [ 604.824967][T14179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.851251][T14179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.899106][T14179] device hsr_slave_0 entered promiscuous mode [ 604.913527][T14179] device hsr_slave_1 entered promiscuous mode [ 604.935892][T14179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 604.956071][T14179] Cannot create hsr debugfs directory [ 605.049928][T14230] loop3: detected capacity change from 0 to 32768 [ 605.200729][T14230] XFS (loop3): Mounting V5 Filesystem [ 605.334761][T14230] XFS (loop3): Ending clean mount [ 605.353516][T14230] XFS (loop3): Quotacheck needed: Please wait. [ 605.491091][T14230] XFS (loop3): Quotacheck: Done. [ 605.519697][ T26] audit: type=1800 audit(1717580762.855:804): pid=14230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1067 res=0 errno=0 [ 605.543743][ T26] audit: type=1800 audit(1717580762.875:805): pid=14230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1067 res=0 errno=0 [ 605.564710][ C0] vkms_vblank_simulate: vblank timer overrun [ 605.636639][ T26] audit: type=1800 audit(1717580762.975:806): pid=14268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1067 res=0 errno=0 [ 605.697744][ T26] audit: type=1326 audit(1717580763.015:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14269 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b00e7cee9 code=0x0 [ 605.739038][T11435] XFS (loop3): Unmounting Filesystem [ 605.871065][ T26] audit: type=1800 audit(1717580763.195:808): pid=14276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1956 res=0 errno=0 [ 605.939241][T14276] loop1: detected capacity change from 0 to 512 [ 605.997604][T14276] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 606.060091][T14276] EXT4-fs (loop1): orphan cleanup on readonly fs [ 606.074444][ T6897] device hsr_slave_0 left promiscuous mode [ 606.085237][ T6897] device hsr_slave_1 left promiscuous mode [ 606.114514][ T6897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.150421][ T6897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.174886][T14276] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor.1: bg 0: block 248: padding at end of block bitmap is not set [ 606.203352][ T6897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.231286][ T6897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.256350][ T6897] device bridge_slave_1 left promiscuous mode [ 606.262689][ T6897] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.266408][T14276] Quota error (device loop1): write_blk: dquota write failed [ 606.280523][ T6897] device bridge_slave_0 left promiscuous mode [ 606.288694][T14276] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 606.357564][T14276] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz-executor.1: Failed to acquire dquot type 1 [ 606.390145][T14276] EXT4-fs (loop1): 1 truncate cleaned up [ 606.415016][T14276] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 606.446062][ T6897] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.472928][T14276] EXT4-fs (loop1): unmounting filesystem. [ 606.515425][ T6897] device veth1_macvtap left promiscuous mode [ 606.537175][ T6897] device veth0_macvtap left promiscuous mode [ 606.591630][ T6897] device veth1_vlan left promiscuous mode [ 606.633592][ T6897] device veth0_vlan left promiscuous mode [ 606.897985][ T47] Bluetooth: hci5: command tx timeout [ 606.966062][ T5351] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 607.376071][ T5351] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.400282][ T5351] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.418494][ T5351] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 607.428061][ T5351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.471333][ T5351] usb 3-1: config 0 descriptor?? [ 607.584478][ T6897] team0 (unregistering): Port device team_slave_1 removed [ 607.614376][ T6897] team0 (unregistering): Port device team_slave_0 removed [ 607.643646][ T6897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 607.674607][ T6897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 607.729651][T14296] loop1: detected capacity change from 0 to 32768 [ 607.739317][T14296] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (14296) [ 607.765713][T14296] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 607.776123][T14296] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 607.784860][T14296] BTRFS info (device loop1): setting nodatacow, compression disabled [ 607.793191][T14296] BTRFS info (device loop1): doing ref verification [ 607.799916][T14296] BTRFS info (device loop1): turning on flush-on-commit [ 607.806995][T14296] BTRFS info (device loop1): max_inline at 1398 [ 607.813270][T14296] BTRFS info (device loop1): turning on sync discard [ 607.820073][T14296] BTRFS info (device loop1): turning off barriers [ 607.826594][T14296] BTRFS info (device loop1): using free space tree [ 607.842946][ T6897] bond0 (unregistering): Released all slaves [ 607.916907][ T26] audit: type=1800 audit(1717580765.255:809): pid=14296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 607.974862][T14291] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 608.282467][T14179] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 608.321299][T14179] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 608.365613][T14179] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 608.385004][T14179] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 608.402235][ T7621] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 608.486759][ T5351] usb 3-1: string descriptor 0 read error: -71 [ 608.526030][ T5351] uclogic 0003:256C:006D.0011: failed retrieving string descriptor #200: -71 [ 608.575644][ T5351] uclogic 0003:256C:006D.0011: failed retrieving pen parameters: -71 [ 608.586042][ T5351] uclogic 0003:256C:006D.0011: failed probing pen v2 parameters: -71 [ 608.594322][ T5351] uclogic 0003:256C:006D.0011: failed probing parameters: -71 [ 608.604548][ T5351] uclogic: probe of 0003:256C:006D.0011 failed with error -71 [ 608.619270][ T5351] usb 3-1: USB disconnect, device number 16 [ 608.657601][ C0] vkms_vblank_simulate: vblank timer overrun [ 609.633844][ T3578] Bluetooth: hci5: command tx timeout [ 609.907633][T14179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.982764][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 610.004298][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 610.031495][T14179] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.064031][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 610.081119][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 610.107112][ T5350] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.114303][ T5350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.166583][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 610.190829][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 610.223471][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 610.243094][ T5350] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.250393][ T5350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.409644][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 610.438963][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 610.484482][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 611.258628][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 611.269171][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 611.278102][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 611.291536][T14350] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 611.333260][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 611.341589][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 611.412314][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 611.421440][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 611.430305][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 611.441341][T14179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 611.731172][ T3578] Bluetooth: hci1: sending frame failed (-49) [ 611.740420][ T47] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 611.971929][T14369] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 612.010383][T14369] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 612.221093][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 612.234458][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 612.266811][T14179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.339151][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 612.359287][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 612.422575][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 612.442315][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 612.471131][T14179] device veth0_vlan entered promiscuous mode [ 612.488948][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 612.505131][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 612.549004][T14179] device veth1_vlan entered promiscuous mode [ 612.633246][T14352] loop1: detected capacity change from 0 to 32768 [ 612.640629][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 612.654780][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 612.682061][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 612.705287][T14352] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 612.711848][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 612.733563][T14352] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 612.756346][T14179] device veth0_macvtap entered promiscuous mode [ 612.806072][T14179] device veth1_macvtap entered promiscuous mode [ 612.812744][T14358] loop3: detected capacity change from 0 to 40427 [ 612.848214][T14358] F2FS-fs (loop3): invalid crc value [ 612.865246][T14358] F2FS-fs (loop3): Found nat_bits in checkpoint [ 612.876852][T14179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.913092][T14179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.968569][T14352] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 612.985924][T14179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.025130][T14179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.041979][ T41] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 613.060653][ T41] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 613.110080][T14179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.148120][T14179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.158071][T14179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.170641][T14179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.170691][T14358] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 613.182368][T14179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.198025][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 613.207338][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 613.227239][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 613.239812][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 613.261459][T14179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.283782][ T26] audit: type=1804 audit(1717580770.615:810): pid=14358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2880433004/syzkaller.pwXi7s/233/file0/file0" dev="loop3" ino=10 res=1 errno=0 [ 613.319068][T14179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.333579][T14179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.361605][T14179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.404804][T14179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.442456][T14179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.454513][T14376] loop4: detected capacity change from 0 to 32768 [ 613.473684][T14179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.493600][T14376] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (14376) [ 613.538137][ T41] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 477ms [ 613.547219][ T41] gfs2: fsid=syz:syz.0: jid=0: Done [ 613.551317][T14179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.555417][T14352] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 613.600444][T14376] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 613.671035][T14383] syz-executor.3: attempt to access beyond end of device [ 613.671035][T14383] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 613.722190][T14383] syz-executor.3: attempt to access beyond end of device [ 613.722190][T14383] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 614.222829][T14376] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 614.250160][T14179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.278138][T14376] BTRFS info (device loop4): turning off barriers [ 614.313797][T14352] gfs2: fsid=syz:syz.0: can't start quotad thread: -4 [ 614.322772][T14179] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.338471][T14376] BTRFS info (device loop4): max_inline at 1 [ 614.366651][T14376] BTRFS info (device loop4): use zlib compression, level 3 [ 614.399314][T14179] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.408235][T14179] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.418948][T14376] BTRFS info (device loop4): force clearing of disk cache [ 614.459306][T14376] BTRFS info (device loop4): setting nodatacow, compression disabled [ 614.474479][T14179] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.485668][T14376] BTRFS info (device loop4): allowing degraded mounts [ 614.492533][T14376] BTRFS info (device loop4): enabling disk space caching [ 614.502692][T11435] syz-executor.3: attempt to access beyond end of device [ 614.502692][T11435] loop3: rw=2049, sector=45112, nr_sectors = 16 limit=40427 [ 614.503977][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 614.529317][T14376] BTRFS info (device loop4): enabling auto defrag [ 614.543322][T14376] BTRFS info (device loop4): disk space caching is enabled [ 614.556449][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 614.767681][ T6920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.805571][ T6920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.817512][T14376] BTRFS info (device loop4): enabling ssd optimizations [ 614.841876][T14376] BTRFS info (device loop4): rebuilding free space tree [ 614.887185][T14376] BTRFS info (device loop4): disabling free space tree [ 614.889164][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 614.901297][T14376] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 614.901470][T14376] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 615.024746][ T6903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.074165][ T6903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.155675][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 615.321611][ T8124] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 615.323985][T14409] loop1: detected capacity change from 0 to 32768 [ 615.340137][T14409] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor.1 (14409) [ 615.530952][T14409] loop1: detected capacity change from 0 to 1024 [ 615.594556][T14409] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 615.609716][ T26] audit: type=1800 audit(1717580772.945:811): pid=14409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 615.666459][T14409] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2740: inode #15: comm syz-executor.1: corrupted in-inode xattr [ 615.775356][ T26] audit: type=1326 audit(1717580773.095:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14415 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d93c7cee9 code=0x7ffc0000 [ 615.835094][ T26] audit: type=1326 audit(1717580773.095:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14415 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d93c7cee9 code=0x7ffc0000 [ 615.951383][ T26] audit: type=1326 audit(1717580773.095:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14415 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d93c7cee9 code=0x7ffc0000 [ 616.027716][ T26] audit: type=1326 audit(1717580773.105:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14415 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d93c7cee9 code=0x7ffc0000 [ 616.113329][ T26] audit: type=1326 audit(1717580773.105:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14415 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d93c7cee9 code=0x7ffc0000 [ 616.158682][ T7621] EXT4-fs (loop1): unmounting filesystem. [ 616.260766][T14428] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 616.428039][ T3578] Bluetooth: hci3: command 0x0406 tx timeout [ 616.954231][T14430] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 616.969138][ T26] audit: type=1326 audit(1717580773.105:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14415 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f2d93c7cee9 code=0x7ffc0000 [ 616.971463][T14430] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 617.023438][T14432] input: syz1 as /devices/virtual/input/input14 [ 617.075018][ T26] audit: type=1800 audit(1717580773.335:818): pid=14421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 618.796325][T14436] loop4: detected capacity change from 0 to 262144 [ 618.805107][T14436] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (14436) [ 618.836079][T14436] BTRFS info (device loop4): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 618.846423][T14436] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 618.855743][T14436] BTRFS info (device loop4): using free space tree [ 618.962075][T14454] loop0: detected capacity change from 0 to 256 [ 618.970628][T14454] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 619.002847][T14459] Bluetooth: MGMT ver 1.22 [ 619.042426][T14463] loop3: detected capacity change from 0 to 16 [ 619.068609][T14463] erofs: Unknown parameter '01777777777777777777777tª†ãÒp·Yeés5VÆž¢ˆA8€ß²ù/ÛšLš‡•óyf¾_ì]³´N¯Q¡eœï¤¤ì:%Ó[Õºö' [ 619.089105][ T22] kernel write not supported for file /video8 (pid: 22 comm: kworker/1:0) [ 619.128118][ T47] Bluetooth: hci3: unexpected event for opcode 0x0c14 [ 619.141451][T14436] BTRFS info (device loop4): enabling ssd optimizations [ 619.407938][ T8124] BTRFS info (device loop4): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 619.492016][T14473] loop3: detected capacity change from 0 to 32768 [ 619.499991][T14473] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (14473) [ 619.531666][T14473] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 619.542126][T14473] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 619.550871][T14473] BTRFS info (device loop3): setting nodatacow, compression disabled [ 619.559050][T14473] BTRFS info (device loop3): doing ref verification [ 619.565760][T14473] BTRFS info (device loop3): turning on flush-on-commit [ 619.572752][T14473] BTRFS info (device loop3): max_inline at 1398 [ 619.579035][T14473] BTRFS info (device loop3): turning on sync discard [ 619.585764][T14473] BTRFS info (device loop3): turning off barriers [ 619.592199][T14473] BTRFS info (device loop3): using free space tree [ 620.077517][T14473] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 620.419047][T11435] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 620.595097][T14445] loop1: detected capacity change from 0 to 40427 [ 620.641699][T14445] F2FS-fs (loop1): invalid crc value [ 620.662853][T14445] F2FS-fs (loop1): Found nat_bits in checkpoint [ 620.844386][T14518] loop0: detected capacity change from 0 to 256 [ 620.962897][T14445] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 621.002161][T14518] FAT-fs (loop0): Directory bread(block 64) failed [ 621.008909][T14518] FAT-fs (loop0): Directory bread(block 65) failed [ 621.057955][ T47] Bluetooth: hci0: command 0x0c1a tx timeout [ 621.064849][ T3578] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 621.091614][T14518] FAT-fs (loop0): Directory bread(block 66) failed [ 621.100101][T14518] FAT-fs (loop0): Directory bread(block 67) failed [ 621.108275][T14518] FAT-fs (loop0): Directory bread(block 68) failed [ 621.115008][T14518] FAT-fs (loop0): Directory bread(block 69) failed [ 621.122151][T14518] FAT-fs (loop0): Directory bread(block 70) failed [ 621.125636][ T26] audit: type=1804 audit(1717580778.455:819): pid=14445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir874786854/syzkaller.oumRP4/498/file0/file0" dev="loop1" ino=10 res=1 errno=0 [ 621.154943][T14518] FAT-fs (loop0): Directory bread(block 71) failed [ 621.317090][T14518] FAT-fs (loop0): Directory bread(block 72) failed [ 621.330644][T14518] FAT-fs (loop0): Directory bread(block 73) failed [ 622.290158][ T7621] syz-executor.1: attempt to access beyond end of device [ 622.290158][ T7621] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 622.533326][T14527] loop3: detected capacity change from 0 to 2048 [ 622.651207][T14527] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 622.718970][T14527] ext4 filesystem being mounted at /root/syzkaller-testdir2880433004/syzkaller.pwXi7s/239/file0 supports timestamps until 2038 (0x7fffffff) [ 622.988051][T11435] EXT4-fs (loop3): unmounting filesystem. [ 623.164795][T14542] loop1: detected capacity change from 0 to 256 [ 623.247052][T14542] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value [ 623.309052][T14541] loop3: detected capacity change from 0 to 2048 [ 623.381655][T14541] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 624.334865][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.418377][ T6886] kworker/u4:15: attempt to access beyond end of device [ 624.418377][ T6886] loop0: rw=1, sector=1800, nr_sectors = 5184 limit=256 [ 624.524767][ T6886] kworker/u4:15: attempt to access beyond end of device [ 624.524767][ T6886] loop0: rw=1, sector=6984, nr_sectors = 4000 limit=256 [ 624.534597][T14529] loop2: detected capacity change from 0 to 32768 [ 624.581775][ T6886] kworker/u4:15: attempt to access beyond end of device [ 624.581775][ T6886] loop0: rw=1, sector=10984, nr_sectors = 2248 limit=256 [ 624.640797][ T26] audit: type=1804 audit(1717580781.975:820): pid=14529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4142157208/syzkaller.7Z7Edi/28/file0/file0" dev="loop2" ino=7 res=1 errno=0 [ 625.087345][T14560] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 625.135736][T14560] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 625.182328][T14558] loop0: detected capacity change from 0 to 32768 [ 625.190657][T14558] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (14558) [ 625.208411][T14558] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 625.218772][T14558] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 625.227568][T14558] BTRFS info (device loop0): setting nodatacow, compression disabled [ 625.235741][T14558] BTRFS info (device loop0): doing ref verification [ 625.242463][T14558] BTRFS info (device loop0): turning on flush-on-commit [ 625.244391][T14544] loop4: detected capacity change from 0 to 32768 [ 625.249480][T14558] BTRFS info (device loop0): max_inline at 1398 [ 625.249506][T14558] BTRFS info (device loop0): turning on sync discard [ 625.249532][T14558] BTRFS info (device loop0): turning off barriers [ 625.249554][T14558] BTRFS info (device loop0): using free space tree [ 625.305767][T14544] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor.4 (14544) [ 625.442840][T14573] loop2: detected capacity change from 0 to 4096 [ 625.470645][T14558] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 625.526054][T14179] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 625.555672][T14544] loop4: detected capacity change from 0 to 16 [ 625.562802][T14584] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 625.570537][T14544] erofs: (device loop4): mounted with root inode @ nid 36. [ 625.632117][T14547] loop1: detected capacity change from 0 to 32768 [ 625.669339][T14547] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (14547) [ 625.898070][T14547] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 625.925916][T14547] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 625.934893][T14547] BTRFS info (device loop1): turning off barriers [ 625.943194][T14547] BTRFS info (device loop1): setting nodatasum [ 626.033525][T14547] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 626.199079][T14547] BTRFS info (device loop1): force lzo compression, level 0 [ 626.239857][T14547] BTRFS info (device loop1): using free space tree [ 626.455753][T14547] BTRFS info (device loop1): enabling ssd optimizations [ 626.471560][T14547] BTRFS info (device loop1): checking UUID tree [ 626.481854][T14593] loop3: detected capacity change from 0 to 2048 [ 628.325667][T14619] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 628.749653][T14593] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 628.777375][T14593] ext4 filesystem being mounted at /root/syzkaller-testdir2880433004/syzkaller.pwXi7s/245/file0 supports timestamps until 2038 (0x7fffffff) [ 629.064688][T11435] EXT4-fs (loop3): unmounting filesystem. [ 629.135436][T14630] loop0: detected capacity change from 0 to 2048 [ 629.225020][T14630] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 629.226253][ T7621] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 630.794407][T14642] loop4: detected capacity change from 0 to 32768 [ 630.821596][T14642] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (14642) [ 630.879853][T14642] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 630.890539][T14642] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 630.899369][T14642] BTRFS info (device loop4): setting nodatacow, compression disabled [ 630.907640][T14642] BTRFS info (device loop4): doing ref verification [ 630.914259][T14642] BTRFS info (device loop4): turning on flush-on-commit [ 630.921254][T14642] BTRFS info (device loop4): max_inline at 1398 [ 630.927650][T14642] BTRFS info (device loop4): turning on sync discard [ 630.934340][T14642] BTRFS info (device loop4): turning off barriers [ 630.940847][T14642] BTRFS info (device loop4): using free space tree [ 630.967657][ T3589] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 630.980582][ T3589] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 630.994769][ T3589] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 631.004126][ T3589] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 631.011970][ T3589] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 631.021875][ T3589] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 631.198350][ T6897] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.262153][T14646] caif0 speed is unknown, defaulting to 1000 [ 631.358051][T14642] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 631.454479][ T8124] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 631.461954][ T6897] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.043585][ T6897] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.538657][ T6897] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.804340][T14683] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 633.057482][ T3578] Bluetooth: hci0: command tx timeout [ 633.564139][T14691] loop3: detected capacity change from 0 to 512 [ 633.639760][T14691] EXT4-fs (loop3): Test dummy encryption mode enabled [ 633.729495][T14691] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz-executor.3: inline data xattr refers to an external xattr inode [ 633.753580][T14685] loop1: detected capacity change from 0 to 32768 [ 633.762201][T14691] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 12 (err -117) [ 633.765565][T14685] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (14685) [ 633.786820][T14691] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 633.838431][T14685] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 633.854679][T14685] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 633.874971][T14685] BTRFS info (device loop1): turning off barriers [ 633.890638][T14685] BTRFS info (device loop1): setting nodatasum [ 633.929622][T14685] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 633.933166][T14646] chnl_net:caif_netlink_parms(): no params data found [ 633.939399][T14685] BTRFS info (device loop1): force lzo compression, level 0 [ 633.955021][T14685] BTRFS info (device loop1): using free space tree [ 634.104755][T14706] loop4: detected capacity change from 0 to 2048 [ 634.115839][T14706] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 634.153577][T14685] BTRFS info (device loop1): enabling ssd optimizations [ 634.176234][T14722] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 634.176541][T14706] syz-executor.4: attempt to access beyond end of device [ 634.176541][T14706] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 634.200251][T14685] BTRFS info (device loop1): checking UUID tree [ 634.270248][T14646] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.277709][T14646] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.292838][T14646] device bridge_slave_0 entered promiscuous mode [ 634.293084][T11435] EXT4-fs (loop3): unmounting filesystem. [ 634.303611][T14646] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.312614][T14646] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.321267][T14646] device bridge_slave_1 entered promiscuous mode [ 634.345969][T14677] loop0: detected capacity change from 0 to 40427 [ 634.383885][T14677] F2FS-fs (loop0): Unrecognized mount option "errors=continue" or missing value [ 634.658426][T14646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.218388][ T3589] Bluetooth: hci0: command tx timeout [ 635.426900][T14646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.651695][T14646] team0: Port device team_slave_0 added [ 635.702814][T14646] team0: Port device team_slave_1 added [ 637.076058][T14646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.099892][T14646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.196234][T14646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.231844][T14646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.251252][T14646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.295890][ T3589] Bluetooth: hci0: command tx timeout [ 637.316179][T14646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.580193][T14646] device hsr_slave_0 entered promiscuous mode [ 637.704089][T14646] device hsr_slave_1 entered promiscuous mode [ 637.984117][T14646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 638.052755][T14646] Cannot create hsr debugfs directory [ 638.092132][T14754] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 638.417197][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 638.540131][T14770] loop4: detected capacity change from 0 to 128 [ 638.566295][T14770] befs: (loop4): No write support. Marking filesystem read-only [ 638.623746][T14770] befs: (loop4): invalid magic header [ 638.654090][ T6897] device hsr_slave_0 left promiscuous mode [ 638.685709][ T3669] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 638.709009][ T6897] device hsr_slave_1 left promiscuous mode [ 638.717391][ T6897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 638.726608][ T7621] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 638.729437][ T6897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.771511][ T6897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 638.810754][ T6897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.955557][ T3669] usb 4-1: Using ep0 maxpacket: 8 [ 638.978009][ T6897] device bridge_slave_1 left promiscuous mode [ 638.984249][ T6897] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.993541][ T6897] device bridge_slave_0 left promiscuous mode [ 639.002282][ T6897] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.076465][ T3669] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 639.083939][ T3669] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 639.115716][ T3669] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 639.135693][ T3669] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 639.157519][ T6897] device veth1_macvtap left promiscuous mode [ 639.163636][ T6897] device veth0_macvtap left promiscuous mode [ 639.175638][ T6897] device veth1_vlan left promiscuous mode [ 639.195649][ T6897] device veth0_vlan left promiscuous mode [ 639.265927][ T3669] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 639.273386][ T3669] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 639.345625][ T3669] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 639.362023][T14759] loop0: detected capacity change from 0 to 32768 [ 639.376193][ T3589] Bluetooth: hci0: command tx timeout [ 639.382863][ T3669] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 639.502537][ T3669] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 639.512599][ T3669] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 639.561517][ T3669] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 639.591828][ T3669] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 639.613722][T14759] XFS (loop0): Mounting V5 Filesystem [ 640.474869][T14759] XFS (loop0): Ending clean mount [ 640.512791][T14759] XFS (loop0): Quotacheck needed: Please wait. [ 640.614768][T14759] XFS (loop0): Quotacheck: Done. [ 640.640533][ T6897] team0 (unregistering): Port device team_slave_1 removed [ 640.657049][ T6897] team0 (unregistering): Port device team_slave_0 removed [ 640.682886][ T6897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.697238][T14179] XFS (loop0): Unmounting Filesystem [ 640.705887][ T6897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.735631][ T3669] usb 4-1: string descriptor 0 read error: -22 [ 640.741919][ T3669] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 640.751190][ T3669] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.858358][ T3669] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 640.921518][ T6897] bond0 (unregistering): Released all slaves [ 641.454804][ T3627] usb 4-1: USB disconnect, device number 14 [ 641.505837][T14812] loop0: detected capacity change from 0 to 2048 [ 641.571919][T14812] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 641.636853][T14812] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 641.687348][T14815] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 641.860588][T14817] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 641.921135][T14646] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 641.952743][T14646] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 641.988054][T14646] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 642.022656][T14646] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 643.140208][T14646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.204604][ T5662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 643.223100][ T5662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 643.238441][T14646] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.284868][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 643.299888][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 643.312389][ T4647] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.319591][ T4647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.351926][ T5662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 643.360294][ T5662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 643.377630][ T5662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 643.393898][ T5662] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.401107][ T5662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.415951][ T5662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 643.425225][ T5662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 643.454037][ T5662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 643.471663][ T5662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 643.484464][ T5662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 643.500321][ T5662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 643.511701][ T5662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 643.524157][ T5662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 643.544702][T14646] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 643.610145][T14646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 643.639219][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 643.660976][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 643.691488][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 643.940367][ T26] audit: type=1800 audit(1717580801.275:821): pid=14847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1959 res=0 errno=0 [ 644.304478][T14854] loop4: detected capacity change from 0 to 512 [ 644.348324][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 644.361868][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 644.400164][T14646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.424962][T14854] EXT4-fs warning (device loop4): ext4_enable_quotas:7012: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 644.568060][T14854] EXT4-fs (loop4): mount failed [ 644.574561][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 644.598723][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 644.694440][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 644.713495][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 644.744828][T14646] device veth0_vlan entered promiscuous mode [ 644.764110][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 644.781135][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 644.810406][T14646] device veth1_vlan entered promiscuous mode [ 645.077819][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 645.096792][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 645.986967][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 645.995873][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 646.008157][T14646] device veth0_macvtap entered promiscuous mode [ 646.043084][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 646.054273][T14646] device veth1_macvtap entered promiscuous mode [ 646.116061][T14646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.148320][T14646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.170825][T14646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.221648][T14646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.253594][T14646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.282469][T14646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.311262][T14646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.342617][T14646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.373073][T14646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 646.396252][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 646.410011][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 646.438774][T14646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.467087][T14646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.502090][T14646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.531049][T14646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.566204][T14646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.597890][T14646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.617011][T14856] loop0: detected capacity change from 0 to 32768 [ 646.624956][T14646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.642754][T14856] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (14856) [ 646.663428][T14646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.678792][T14856] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 646.697455][T14646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 646.704998][T14856] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 646.733288][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 646.745596][T14856] BTRFS info (device loop0): turning off barriers [ 646.745905][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 646.752095][T14856] BTRFS info (device loop0): setting nodatasum [ 646.790289][T14646] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.802326][T14646] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.811571][T14646] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.824592][T14646] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.831257][T14856] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 646.864037][T14856] BTRFS info (device loop0): force lzo compression, level 0 [ 646.908829][T14856] BTRFS info (device loop0): using free space tree [ 647.078277][ T6886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.093138][ T6903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.150789][ T6886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.192499][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 647.208893][ T6903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.258718][T14856] BTRFS info (device loop0): enabling ssd optimizations [ 647.281213][ T5354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 647.292517][T14856] BTRFS info (device loop0): checking UUID tree [ 647.334571][T14856] BTRFS warning (device loop0): failed to start uuid_rescan task [ 647.369286][T14856] BTRFS warning (device loop0): failed to check the UUID tree: -4 [ 647.479830][T14856] BTRFS error (device loop0): open_ctree failed [ 651.448610][T14979] loop2: detected capacity change from 0 to 2048 [ 651.503726][T14979] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 651.738824][T14979] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 652.188424][T14992] loop4: detected capacity change from 0 to 1024 [ 652.198531][T14992] EXT4-fs: Ignoring removed orlov option [ 652.207926][T14992] EXT4-fs (loop4): Test dummy encryption mode enabled [ 652.228507][T14992] EXT4-fs warning (device loop4): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 652.267515][T14992] EXT4-fs (loop4): mount failed [ 652.463363][T15004] loop0: detected capacity change from 0 to 512 [ 652.496343][T15004] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 652.527737][T15004] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 652.550438][T15004] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 652.588203][T15004] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 652.615564][T15004] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 652.623503][T15004] EXT4-fs (loop0): failed to initialize system zone (-117) [ 652.645824][T15004] EXT4-fs (loop0): mount failed [ 652.741423][T15016] loop2: detected capacity change from 0 to 1024 [ 652.777273][T15004] loop0: detected capacity change from 0 to 512 [ 652.792979][T15016] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 652.814582][T15004] EXT4-fs: Ignoring removed i_version option [ 652.818523][T15016] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 652.833255][T15004] ext2: Unknown parameter 'obj_type' [ 652.848207][T15018] loop3: detected capacity change from 0 to 2048 [ 652.875627][T15018] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 652.903187][T15018] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 652.929255][T14646] EXT4-fs (loop2): unmounting filesystem. [ 653.502040][T15033] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 654.289059][T15049] loop3: detected capacity change from 0 to 16 [ 654.316180][T15049] erofs: (device loop3): mounted with root inode @ nid 36. [ 654.413208][T15055] loop0: detected capacity change from 0 to 2048 [ 654.461217][T15055] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 654.508536][T15055] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 654.791267][ T5357] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 655.775575][ T5357] usb 5-1: Using ep0 maxpacket: 32 [ 655.895818][ T5357] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 655.910597][ T5357] usb 5-1: config 0 has no interfaces? [ 655.920730][ T5357] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 655.940397][ T5357] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.957294][ T5357] usb 5-1: config 0 descriptor?? [ 656.115705][ T3669] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 656.148979][ T3624] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 656.220219][ T5357] usb 5-1: USB disconnect, device number 11 [ 656.365572][ T3669] usb 4-1: Using ep0 maxpacket: 32 [ 656.399484][ T3624] usb 1-1: Using ep0 maxpacket: 16 [ 656.455263][T15093] loop1: detected capacity change from 0 to 2048 [ 656.476446][T15093] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 656.506168][ T3669] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 656.515783][ T3624] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.518538][T15093] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 656.534959][ T3624] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.545523][ T3669] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 656.547837][ T3624] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 656.571578][ T3624] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 656.575522][ T3669] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 656.581059][ T3624] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.609836][ T3624] usb 1-1: config 0 descriptor?? [ 656.635524][ T3669] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.646755][ T3669] usb 4-1: config 0 descriptor?? [ 656.665876][T15083] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 656.686713][ T3669] hub 4-1:0.0: USB hub found [ 656.949989][ T3669] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 657.075678][ T3669] usbhid 4-1:0.0: can't add hid device: -71 [ 657.083181][ T3669] usbhid: probe of 4-1:0.0 failed with error -71 [ 657.107832][ T3624] koneplus 0003:1E7D:2E22.0012: item fetching failed at offset 0/2 [ 657.123554][ T3624] koneplus 0003:1E7D:2E22.0012: parse failed [ 657.130419][ T3624] koneplus: probe of 0003:1E7D:2E22.0012 failed with error -22 [ 657.151551][T15107] loop4: detected capacity change from 0 to 1024 [ 657.159318][ T3669] usb 4-1: USB disconnect, device number 15 [ 657.179195][T15107] EXT4-fs: Ignoring removed orlov option [ 657.196226][T15107] EXT4-fs (loop4): Test dummy encryption mode enabled [ 657.229651][T15107] EXT4-fs warning (device loop4): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 657.267328][T15107] EXT4-fs (loop4): mount failed [ 657.322378][ T3624] usb 1-1: USB disconnect, device number 21 [ 657.634620][T15122] loop1: detected capacity change from 0 to 1024 [ 657.643445][T15122] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 657.668162][T15122] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 657.715148][T15126] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 657.741244][ T7621] EXT4-fs (loop1): unmounting filesystem. [ 657.747615][T15126] tipc: Started in network mode [ 657.807553][T15126] tipc: Node identity 6, cluster identity 4711 [ 657.820973][T15126] tipc: Node number set to 6 [ 658.007222][ T26] audit: type=1326 audit(1717580815.345:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37d27cee9 code=0x7ffc0000 [ 658.089857][ T26] audit: type=1326 audit(1717580815.345:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fe37d27cee9 code=0x7ffc0000 [ 658.215719][ T26] audit: type=1326 audit(1717580815.345:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37d27cee9 code=0x7ffc0000 [ 658.297058][ T26] audit: type=1326 audit(1717580815.345:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37d27cee9 code=0x7ffc0000 [ 658.547261][ T3578] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 658.561537][ T3578] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 658.570883][ T3578] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 658.589056][ T3578] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 658.600019][ T3578] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 658.607552][ T3578] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 658.688039][ T6920] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.731690][T15149] caif0 speed is unknown, defaulting to 1000 [ 658.885903][ T6920] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.088625][ T6920] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.179531][T15158] loop0: detected capacity change from 0 to 1024 [ 659.220295][T15158] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 659.252393][ T6920] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.327512][T15158] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 659.526999][T14179] EXT4-fs (loop0): unmounting filesystem. [ 659.813115][T15149] chnl_net:caif_netlink_parms(): no params data found [ 659.831263][ T3624] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 660.005854][T15149] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.018959][T15149] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.045389][T15149] device bridge_slave_0 entered promiscuous mode [ 660.105345][T15173] loop3: detected capacity change from 0 to 64 [ 660.105797][ T3624] usb 5-1: Using ep0 maxpacket: 8 [ 660.117038][T15149] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.124175][T15149] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.157058][T15149] device bridge_slave_1 entered promiscuous mode [ 660.225768][T15149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 660.236003][ T3624] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 660.247748][ T3624] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 660.258310][ T3624] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 660.271618][ T3624] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 660.281422][ T3624] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.314543][T15149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.334071][ T3624] hub 5-1:1.0: bad descriptor, ignoring hub [ 660.344422][ T3624] hub: probe of 5-1:1.0 failed with error -5 [ 660.363683][ T3624] cdc_wdm 5-1:1.0: invalid descriptor buffer length [ 660.377126][ T3624] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 660.420699][T15149] team0: Port device team_slave_0 added [ 660.446726][T15149] team0: Port device team_slave_1 added [ 660.568983][T15149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.595799][T15149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.655861][ T3589] Bluetooth: hci1: command tx timeout [ 660.656173][T15149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.683346][ T3624] usb 5-1: USB disconnect, device number 12 [ 660.691808][T15149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.700476][T15149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.727532][T15149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.949506][T15149] device hsr_slave_0 entered promiscuous mode [ 661.012764][T15149] device hsr_slave_1 entered promiscuous mode [ 661.024941][T15149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 661.047215][T15149] Cannot create hsr debugfs directory [ 661.115837][T15190] fuse: Invalid rootmode [ 661.500634][ T6920] device hsr_slave_0 left promiscuous mode [ 661.540982][ T6920] device hsr_slave_1 left promiscuous mode [ 661.550807][ T6920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.583195][ T6920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.616973][ T6920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.627451][ T6920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.745663][T15204] "syz-executor.2" (15204) uses obsolete ecb(arc4) skcipher [ 661.919598][ T6920] device bridge_slave_1 left promiscuous mode [ 661.929527][ T6920] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.949495][ T6920] device bridge_slave_0 left promiscuous mode [ 661.960736][ T6920] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.044256][ T6920] device veth1_macvtap left promiscuous mode [ 662.080322][ T6920] device veth0_macvtap left promiscuous mode [ 662.104110][ T6920] device veth1_vlan left promiscuous mode [ 662.141731][ T6920] device veth0_vlan left promiscuous mode [ 662.394634][T15212] loop2: detected capacity change from 0 to 2048 [ 662.445264][T15212] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 662.464479][T15212] ext4 filesystem being mounted at /root/syzkaller-testdir2052686401/syzkaller.qDSH8C/17/bus supports timestamps until 2038 (0x7fffffff) [ 662.670508][T15208] loop4: detected capacity change from 0 to 2048 [ 663.368591][ T3589] Bluetooth: hci1: command tx timeout [ 663.383701][T15208] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 663.397287][T14646] EXT4-fs (loop2): unmounting filesystem. [ 663.458024][T15208] ext4 filesystem being mounted at /root/syzkaller-testdir2996149863/syzkaller.24R2Uk/494/file0 supports timestamps until 2038 (0x7fffffff) [ 663.687913][T15207] EXT4-fs error (device loop4): ext4_find_dest_de:2112: inode #2: block 16: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 664.101008][ T8124] EXT4-fs (loop4): unmounting filesystem. [ 665.375573][ T3589] Bluetooth: hci1: command tx timeout [ 665.509413][ T6920] team0 (unregistering): Port device team_slave_1 removed [ 665.576928][ T6920] team0 (unregistering): Port device team_slave_0 removed [ 665.619341][ T6920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 665.692079][ T6920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.820319][T15251] loop4: detected capacity change from 0 to 512 [ 665.855093][T15251] EXT4-fs (loop4): invalid journal inode [ 665.881450][ T34] smc: removing ib device syz0 [ 666.027339][ T6920] bond0 (unregistering): Released all slaves [ 666.214162][T15253] loop4: detected capacity change from 0 to 2048 [ 666.367163][T15253] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 666.399133][T15253] ext4 filesystem being mounted at /root/syzkaller-testdir2996149863/syzkaller.24R2Uk/499/file0 supports timestamps until 2038 (0x7fffffff) [ 666.492584][T15257] loop3: detected capacity change from 0 to 2048 [ 666.630389][T15264] "syz-executor.2" (15264) uses obsolete ecb(arc4) skcipher [ 666.962504][ T8124] EXT4-fs (loop4): unmounting filesystem. [ 667.455587][ T3589] Bluetooth: hci1: command tx timeout [ 667.476858][T15257] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 667.500287][T15257] ext4 filesystem being mounted at /root/syzkaller-testdir2880433004/syzkaller.pwXi7s/291/file0 supports timestamps until 2038 (0x7fffffff) [ 667.527444][T15256] EXT4-fs error (device loop3): ext4_find_dest_de:2112: inode #2: block 16: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 667.779713][T15273] device pim6reg1 entered promiscuous mode [ 667.907437][T11435] EXT4-fs (loop3): unmounting filesystem. [ 669.107593][T15149] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 669.204898][T15149] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 669.319257][T15149] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 669.380321][T15149] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 669.672670][T15149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.692490][T15298] loop4: detected capacity change from 0 to 2048 [ 669.732072][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 669.744223][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 669.768837][T15149] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.784559][T15300] loop2: detected capacity change from 0 to 2048 [ 669.810050][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 669.825217][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 669.842581][ T3672] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.849730][ T3672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.891871][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 669.910181][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 669.920838][T15298] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 669.939900][T15298] ext4 filesystem being mounted at /root/syzkaller-testdir2996149863/syzkaller.24R2Uk/503/file0 supports timestamps until 2038 (0x7fffffff) [ 669.941049][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 669.981193][T15300] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 669.990429][ T5357] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.997596][ T5357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.010179][T15300] ext4 filesystem being mounted at /root/syzkaller-testdir2052686401/syzkaller.qDSH8C/25/file0 supports timestamps until 2038 (0x7fffffff) [ 670.037768][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 670.049366][T15297] EXT4-fs error (device loop2): ext4_find_dest_de:2112: inode #2: block 16: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 670.056258][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 670.116973][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 670.136668][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 670.170888][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 670.216153][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 670.263778][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 670.286414][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 670.295016][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 670.315892][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 670.333380][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 670.354178][T15149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 670.372385][T14646] EXT4-fs (loop2): unmounting filesystem. [ 670.380031][ T8124] EXT4-fs (loop4): unmounting filesystem. [ 670.566958][T15309] "syz-executor.3" (15309) uses obsolete ecb(arc4) skcipher [ 672.525907][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 672.533720][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 672.568561][T15149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.702841][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 672.712576][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 672.778073][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 672.814718][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 672.852108][T15149] device veth0_vlan entered promiscuous mode [ 672.872823][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 672.892756][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 672.923400][T15149] device veth1_vlan entered promiscuous mode [ 673.030514][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 673.048859][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 673.081994][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 673.092204][T15340] loop4: detected capacity change from 0 to 2048 [ 673.108609][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 673.137207][T15149] device veth0_macvtap entered promiscuous mode [ 673.172496][T15149] device veth1_macvtap entered promiscuous mode [ 673.218944][T15340] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 673.236865][T15149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.251996][T15340] ext4 filesystem being mounted at /root/syzkaller-testdir2996149863/syzkaller.24R2Uk/506/file0 supports timestamps until 2038 (0x7fffffff) [ 673.286658][T15149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.287866][T15336] EXT4-fs error (device loop4): ext4_find_dest_de:2112: inode #2: block 16: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 673.298521][T15149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.327581][T15149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.337580][T15149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.348244][T15149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.358304][T15149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.369003][T15149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.382567][T15149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.393188][T15149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.403790][T15149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.415310][T15149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.468266][T15149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.508550][T15149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.550880][T15149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.574459][T15149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.603507][T15149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.647969][T15149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.672015][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 673.692537][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 673.726118][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 673.756571][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 673.786511][T15347] loop2: detected capacity change from 0 to 2048 [ 673.796445][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 673.805240][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 673.840085][T15149] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.859662][T15149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.878182][T15347] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 673.911142][T15149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.935701][T15347] ext4 filesystem being mounted at /root/syzkaller-testdir2052686401/syzkaller.qDSH8C/30/bus supports timestamps until 2038 (0x7fffffff) [ 673.975490][T15149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.028149][ T8124] EXT4-fs (loop4): unmounting filesystem. [ 674.196238][T15355] device batadv0 entered promiscuous mode [ 674.992288][T14646] EXT4-fs (loop2): unmounting filesystem. [ 675.138043][ T6917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.165529][ T6917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.207526][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 675.244732][ T4882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.265830][ T4882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.324318][ T5354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 675.396631][T15377] netlink: 173 bytes leftover after parsing attributes in process `syz-executor.3'. [ 676.063942][T15397] loop0: detected capacity change from 0 to 2048 [ 676.152058][T15401] loop2: detected capacity change from 0 to 64 [ 676.161949][T15401] hfs: unable to locate alternate MDB [ 676.170544][T15397] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 676.174604][T15401] hfs: continuing without an alternate MDB [ 676.195852][T15397] ext4 filesystem being mounted at /root/syzkaller-testdir1589594400/syzkaller.kvWcOY/53/file0 supports timestamps until 2038 (0x7fffffff) [ 676.251932][T15393] EXT4-fs error (device loop0): ext4_find_dest_de:2112: inode #2: block 16: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 676.488400][T15419] netlink: 173 bytes leftover after parsing attributes in process `syz-executor.1'. [ 676.559326][T14179] EXT4-fs (loop0): unmounting filesystem. [ 677.614358][T15435] loop0: detected capacity change from 0 to 64 [ 677.634847][T15435] hfs: unable to locate alternate MDB [ 677.644791][T15435] hfs: continuing without an alternate MDB [ 677.804810][T15448] netlink: 173 bytes leftover after parsing attributes in process `syz-executor.4'. [ 678.037067][T15453] loop4: detected capacity change from 0 to 2048 [ 678.087181][T15453] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 678.101598][T15453] ext4 filesystem being mounted at /root/syzkaller-testdir2996149863/syzkaller.24R2Uk/514/file0 supports timestamps until 2038 (0x7fffffff) [ 678.122598][T15452] EXT4-fs error (device loop4): ext4_find_dest_de:2112: inode #2: block 16: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 678.217766][ T8124] EXT4-fs (loop4): unmounting filesystem. [ 679.442365][T15474] loop3: detected capacity change from 0 to 64 [ 679.468358][T15474] hfs: unable to locate alternate MDB [ 679.473865][T15474] hfs: continuing without an alternate MDB [ 679.582371][T15479] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 679.611493][T15483] netlink: 173 bytes leftover after parsing attributes in process `syz-executor.1'. [ 679.834667][T15486] loop3: detected capacity change from 0 to 2048 [ 679.906892][T15486] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 679.921727][T15486] ext4 filesystem being mounted at /root/syzkaller-testdir2880433004/syzkaller.pwXi7s/309/file0 supports timestamps until 2038 (0x7fffffff) [ 680.177066][T15498] loop0: detected capacity change from 0 to 32768 [ 680.186632][T15498] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (15498) [ 680.203124][T15498] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 680.213541][T15498] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 680.222277][T15498] BTRFS info (device loop0): setting nodatacow, compression disabled [ 680.230445][T15498] BTRFS info (device loop0): doing ref verification [ 680.237172][T15498] BTRFS info (device loop0): turning on flush-on-commit [ 680.245068][T15498] BTRFS info (device loop0): max_inline at 1398 [ 680.251445][T15498] BTRFS info (device loop0): turning on sync discard [ 680.258244][T15498] BTRFS info (device loop0): turning off barriers [ 680.264695][T15498] BTRFS info (device loop0): using free space tree [ 680.274132][T15482] EXT4-fs error (device loop3): ext4_find_dest_de:2112: inode #2: block 16: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 680.409329][T11435] EXT4-fs (loop3): unmounting filesystem. [ 680.478376][T15498] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 680.696890][T14179] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 681.536832][T15537] netlink: 173 bytes leftover after parsing attributes in process `syz-executor.3'. [ 681.985535][ T2538] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 682.334995][T15558] loop1: detected capacity change from 0 to 2048 [ 682.415868][ T2538] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.556638][T15560] loop0: detected capacity change from 0 to 32768 [ 682.564508][T15560] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (15560) [ 682.587301][T15560] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 682.598199][T15560] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 682.606962][T15560] BTRFS info (device loop0): setting nodatacow, compression disabled [ 682.615048][T15560] BTRFS info (device loop0): doing ref verification [ 682.621698][T15560] BTRFS info (device loop0): turning on flush-on-commit [ 682.628969][T15560] BTRFS info (device loop0): max_inline at 1398 [ 682.635233][T15560] BTRFS info (device loop0): turning on sync discard [ 682.642100][T15560] BTRFS info (device loop0): turning off barriers [ 682.648582][T15560] BTRFS info (device loop0): using free space tree [ 682.661131][ T2538] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.708288][ T2538] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 682.728220][T15560] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 682.740342][T15558] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 682.754226][ T2538] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.792112][T15558] ext4 filesystem being mounted at /root/syzkaller-testdir809158210/syzkaller.ATuw7j/16/file0 supports timestamps until 2038 (0x7fffffff) [ 682.854391][ T2538] usb 4-1: config 0 descriptor?? [ 682.866626][T14179] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 682.891905][T15557] EXT4-fs error (device loop1): ext4_find_dest_de:2112: inode #2: block 16: comm syz-executor.1: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 683.249376][T15149] EXT4-fs (loop1): unmounting filesystem. [ 683.329761][T15588] loop4: detected capacity change from 0 to 256 [ 683.352073][T15588] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 683.438793][ T2538] hid-rmi 0003:06CB:81A7.0013: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.3-1/input0 [ 683.656062][T15591] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 683.681631][ T26] audit: type=1800 audit(1717580841.005:826): pid=15594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1967 res=0 errno=0 [ 683.738691][T15595] loop0: detected capacity change from 0 to 512 [ 683.915136][T15595] EXT4-fs warning (device loop0): ext4_enable_quotas:7012: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 683.934610][T15595] EXT4-fs (loop0): mount failed [ 684.426427][ T2538] usb 4-1: USB disconnect, device number 16 [ 684.597100][T15599] loop4: detected capacity change from 0 to 2048 [ 684.632927][T15599] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 684.676171][T15599] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 685.708045][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.229898][T15617] loop4: detected capacity change from 0 to 32768 [ 687.237835][T15617] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (15617) [ 687.264025][T15617] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 687.274345][T15617] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 687.283132][T15617] BTRFS info (device loop4): setting nodatacow, compression disabled [ 687.291282][T15617] BTRFS info (device loop4): doing ref verification [ 687.298005][T15617] BTRFS info (device loop4): turning on flush-on-commit [ 687.305559][T15617] BTRFS info (device loop4): max_inline at 1398 [ 687.311861][T15617] BTRFS info (device loop4): turning on sync discard [ 687.318614][T15617] BTRFS info (device loop4): turning off barriers [ 687.325072][T15617] BTRFS info (device loop4): using free space tree [ 687.491469][T15625] loop0: detected capacity change from 0 to 2048 [ 687.545989][T15617] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 687.635367][T15625] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 687.675006][T15625] ext4 filesystem being mounted at /root/syzkaller-testdir1589594400/syzkaller.kvWcOY/65/file0 supports timestamps until 2038 (0x7fffffff) [ 687.708576][ T8124] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 687.793784][T15622] EXT4-fs error (device loop0): ext4_find_dest_de:2112: inode #2: block 16: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 687.817877][T15650] loop3: detected capacity change from 0 to 64 [ 688.843181][T15656] loop2: detected capacity change from 0 to 2048 [ 688.924852][T14179] EXT4-fs (loop0): unmounting filesystem. [ 688.942161][T15656] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 689.008843][T15656] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 689.077819][T15664] loop4: detected capacity change from 0 to 256 [ 689.085993][T15664] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 689.812597][T15658] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 794.245394][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 794.252398][ C1] (detected by 1, t=10502 jiffies, g=86665, q=136 ncpus=2) [ 794.259720][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4295016552-4295006049), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 794.273123][ C1] rcu: rcu_preempt kthread starved for 10504 jiffies! g86665 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 794.284348][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 794.294340][ C1] rcu: RCU grace-period kthread stack dump: [ 794.300249][ C1] task:rcu_preempt state:R running task stack:27032 pid:16 ppid:2 flags:0x00004000 [ 794.311068][ C1] Call Trace: [ 794.314378][ C1] [ 794.317340][ C1] __schedule+0x142d/0x4550 [ 794.321906][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 794.327139][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 794.332300][ C1] ? __sched_text_start+0x8/0x8 [ 794.337191][ C1] ? print_irqtrace_events+0x210/0x210 [ 794.342699][ C1] ? preempt_schedule_irq+0xec/0x1c0 [ 794.348028][ C1] preempt_schedule_irq+0xf7/0x1c0 [ 794.353180][ C1] ? preempt_schedule_notrace+0x140/0x140 [ 794.358940][ C1] ? trace_hardirqs_off_finish+0x7b/0x1a0 [ 794.364700][ C1] ? rcu_is_watching+0x76/0xb0 [ 794.369508][ C1] irqentry_exit+0x53/0x80 [ 794.373964][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 794.379984][ C1] RIP: 0010:schedule+0xae/0x180 [ 794.384870][ C1] Code: e8 f7 83 4e f7 49 8b 3e 48 85 ff 74 0a be 01 00 00 00 e8 65 a5 87 f9 4c 89 e3 48 c1 eb 03 eb 0a 49 f7 04 24 08 00 00 00 74 39 01 00 00 00 e8 48 c9 ca f6 31 ff e8 f1 b9 ff ff bf 01 00 00 00 [ 794.404519][ C1] RSP: 0018:ffffc90000157b98 EFLAGS: 00000202 [ 794.410629][ C1] RAX: 0000000000000001 RBX: 1ffff11027fddb28 RCX: ffffffff8a938926 [ 794.418629][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88813feed940 [ 794.426632][ C1] RBP: ffffc90000157cb0 R08: dffffc0000000000 R09: ffffed1027fddb29 [ 794.434632][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88813feed940 [ 794.442640][ C1] R13: 1ffff9200002af78 R14: ffff88813feeebb8 R15: dffffc0000000000 [ 794.450678][ C1] ? schedule+0xd6/0x180 [ 794.454978][ C1] ? schedule+0xd6/0x180 [ 794.459263][ C1] schedule_timeout+0x1b9/0x300 [ 794.464241][ C1] ? console_conditional_schedule+0x40/0x40 [ 794.470169][ C1] ? update_process_times+0x1b0/0x1b0 [ 794.475597][ C1] ? prepare_to_swait_event+0x329/0x350 [ 794.481211][ C1] rcu_gp_fqs_loop+0x2d2/0x1150 [ 794.486141][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 794.491394][ C1] ? rcu_gp_init+0x15f0/0x15f0 [ 794.496213][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 794.502165][ C1] ? finish_swait+0xcf/0x1e0 [ 794.506808][ C1] rcu_gp_kthread+0xa3/0x3b0 [ 794.511533][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 794.516703][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 794.522730][ C1] ? __kthread_parkme+0x168/0x1c0 [ 794.527807][ C1] kthread+0x28d/0x320 [ 794.531906][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 794.537046][ C1] ? kthread_blkcg+0xd0/0xd0 [ 794.541667][ C1] ret_from_fork+0x1f/0x30 [ 794.546136][ C1] [ 794.549178][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 794.555531][ C1] CPU: 1 PID: 15666 Comm: syz-executor.3 Not tainted 6.1.92-syzkaller #0 [ 794.563967][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 794.574050][ C1] RIP: 0033:0x7fb88b8a4670 [ 794.578512][ C1] Code: 83 c0 16 83 e0 f7 74 12 50 48 8d 3d 1a 9b 04 00 e8 45 78 fa ff 0f 1f 44 00 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <83> ff 21 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 55 53 48 89 f3 48 [ 794.598241][ C1] RSP: 002b:00007fb88c5a4bb8 EFLAGS: 00000246 [ 794.604344][ C1] RAX: 0000000000000000 RBX: 00007fb88b9b4058 RCX: 00007fb88b87cee9 [ 794.612347][ C1] RDX: 00007fb88c5a4bc0 RSI: 00007fb88c5a4cf0 RDI: 0000000000000021 [ 794.620349][ C1] RBP: 00007fb88b9b4050 R08: 00007fb88c5a56c0 R09: 00007fb88c5a56c0 [ 794.628346][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb88b9b405c [ 794.636355][ C1] R13: 000000000000006e R14: 00007fff794caac0 R15: 00007fff794caba8 [ 794.644362][ C1] FS: 00007fb88c5a56c0 GS: 0000000000000000