last executing test programs: 36.066775642s ago: executing program 0: syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x0, &(0x7f0000009780), 0x1, 0x96d4, &(0x7f0000012ec0)="$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") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0205838, &(0x7f0000000100)=ANY=[]) 35.028922342s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 34.911137951s ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r3}, 0x10) write$cgroup_type(r0, &(0x7f0000000140), 0x9) 34.811939556s ago: executing program 1: syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES64], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="e7", 0x700}], 0x1, 0xa00, 0x0, 0x0) 34.750761225s ago: executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x541b, 0x0) 34.624533875s ago: executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x7, 0x0, &(0x7f0000001340)) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x82, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=default,noadinicb,gid=forget,gid=ignore,nostrict,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c616e63686f723d30303030000088be0900303030303030303030312c7569643d666f726765742c00215e8c2e42462f3ab5e1f7c0527abbb422be9178aa60681964adb069ae876c4a599d560075ac47c0de1a9bb9146af6433efdcdac853a8e8f16d6bad90ecce0a1fab46f48331e6b3c325c08df3c334e4da28067a30b3b1dc64bf692c712fc273bc1702008f563765c6f3e67d97e1369973c2a87f0ecca7320819863179fb85e394a8cf1d62c70d8306633b6958ebf998a0685bc5cdd1f97291328743add4c867115fae1082f8faf482e15eb939968"], 0x0, 0xc34, &(0x7f0000001080)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x8, 0x4, 0x90000) 34.535845038s ago: executing program 1: ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "b7648859dc"}, @mixer_unit={0xb, 0x24, 0x4, 0x0, 0x0, "cb5b6e3ee874"}, @mixer_unit={0x8, 0x24, 0x4, 0x0, 0x0, "1253cb"}, @mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "ce"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 33.49412487s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) write$binfmt_script(r0, &(0x7f0000000780), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x0, 0x0, 0x1d0, 0x2e0, 0x2e0, 0x2e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 33.345991072s ago: executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001080)=@broute={'broute\x00', 0x9a03, 0x0, 0x90, [0x20000780, 0x200007b0], 0x0, 0x0, &(0x7f0000000780)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, {}, {}]}, 0x108) 33.173622939s ago: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000140)={0x2, 0x0, @ioapic}) 33.112455018s ago: executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast1}}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000140)=0x400, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @loopback}}, 0x14) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000400)) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x10, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x6}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) close(r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x3b, 0x0, "6606ca7ce41b346ac33e74fc00d9165a44e86835fec0b518269fd4c21a897da3d787c09dcb8216a272aea67961649d1590065253e07bd0b461b349eb64746d76c42fb2623034078188f0009f9f10d5f0"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x0, 0x0, "a0aad30a8b1350f2461250f9e5b2fc536fd0861c38349b6f6ad8c6f78a18d8576ba9bcd139acd078c1207e7b717cd1c8e723c17364efbae56931f838ecf65aba7e990fe8a4a01b3302b27fe7c991a9cb"}, 0xd8) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000005c0)={@ipv4={""/10, ""/2, @dev}, 0x0}, &(0x7f0000000600)=0x14) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=@mpls_newroute={0x28, 0x18, 0x8, 0x70bd28, 0x25dfdbfe, {0x1c, 0x14, 0x0, 0x9, 0xff, 0x0, 0xff, 0xb, 0x800}, [@RTA_MULTIPATH={0xc, 0x9, {0x1, 0x10, 0x6, r5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040054}, 0x20000000) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000640)={@in={{0x2, 0x4e23, @rand_addr=0x64010101}}, 0x0, 0x0, 0x2b, 0x0, "23343bec488cf1ff83c5cfdc97156ae83e245eb20e80e9617c9ade203eee486a2a4c8d5fea2d247081ca0f672f56582ecb04d7311737a7c344633e2924025545d368aff65f8f602fb5993f0ed6d55eb2"}, 0xd8) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x890b, &(0x7f00000002c0)={'ip_vti0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) r7 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x2e0, 0x178, 0xa, 0x1000000, 0x178, 0x0, 0x248, 0x230, 0x230, 0x248, 0x223, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth1_to_hsr\x00'}, 0x0, 0x158, 0x178, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "085636820d6a60ff49677edc0f9111e7ccf795de83ae8e43a61945080891864007e5e0629b793e905f513cc4de3c1daad988425cfd560125160c8169789570a8a1324f192aad0900020000bbb30400000000000081fc44155aebbdf1ab66e929f2925cc90955436f7f220c7251f48f56f3e8c906b0424a32fc956bdb1a52c0e8", 0x1d}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'ipvlan0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x340) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0004fffffffffddb080001020000080002000000000008000700", @ANYRES32=r7, @ANYBLOB="08000400ac1e01010800080001000000"], 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000007c0)=@gcm_256={{0x303}, "26dc9400961cda14", "f6fbfaf51e7b7dec108c0879a69fd917adcf38b90aab2b9c690c78848d937afa", "62cadb24", "4ca30aec4c58bc83"}, 0x38) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000300)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r9}, 0x14) 32.996333426s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 32.97296723s ago: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) 32.97189479s ago: executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x0) 32.889004643s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000480)={@local, @random="1a0e2c5ffd4d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11}}}}}}, 0x0) 32.795976797s ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket(0xa, 0x6, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fsetxattr$security_capability(r2, &(0x7f00000000c0), 0x0, 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x10d, 0xd6, 0x0, &(0x7f0000000040)) 32.685482864s ago: executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x7, 0x0, &(0x7f0000001340)) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x82, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=default,noadinicb,gid=forget,gid=ignore,nostrict,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c616e63686f723d30303030000088be0900303030303030303030312c7569643d666f726765742c00215e8c2e42462f3ab5e1f7c0527abbb422be9178aa60681964adb069ae876c4a599d560075ac47c0de1a9bb9146af6433efdcdac853a8e8f16d6bad90ecce0a1fab46f48331e6b3c325c08df3c334e4da28067a30b3b1dc64bf692c712fc273bc1702008f563765c6f3e67d97e1369973c2a87f0ecca7320819863179fb85e394a8cf1d62c70d8306633b6958ebf998a0685bc5cdd1f97291328743add4c867115fae1082f8faf482e15eb939968"], 0x0, 0xc34, &(0x7f0000001080)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x8, 0x4, 0x90000) 31.991001181s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) write$binfmt_script(r0, &(0x7f0000000780), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x0, 0x0, 0x1d0, 0x2e0, 0x2e0, 0x2e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 31.404731542s ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) gettid() sendmsg$netlink(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000006b80)={0x28, 0x11, 0x1, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x7, 0x0, 0x0, 0x0, @str='%{\x00'}]}, @nested={0x4}, @typed={0x8, 0x31, 0x0, 0x0, @pid}]}, 0x28}], 0x1}, 0x0) 31.234982018s ago: executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast1}}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000140)=0x400, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @loopback}}, 0x14) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000400)) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x10, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x6}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) close(r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x3b, 0x0, "6606ca7ce41b346ac33e74fc00d9165a44e86835fec0b518269fd4c21a897da3d787c09dcb8216a272aea67961649d1590065253e07bd0b461b349eb64746d76c42fb2623034078188f0009f9f10d5f0"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x0, 0x0, "a0aad30a8b1350f2461250f9e5b2fc536fd0861c38349b6f6ad8c6f78a18d8576ba9bcd139acd078c1207e7b717cd1c8e723c17364efbae56931f838ecf65aba7e990fe8a4a01b3302b27fe7c991a9cb"}, 0xd8) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000005c0)={@ipv4={""/10, ""/2, @dev}, 0x0}, &(0x7f0000000600)=0x14) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=@mpls_newroute={0x28, 0x18, 0x8, 0x70bd28, 0x25dfdbfe, {0x1c, 0x14, 0x0, 0x9, 0xff, 0x0, 0xff, 0xb, 0x800}, [@RTA_MULTIPATH={0xc, 0x9, {0x1, 0x10, 0x6, r5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040054}, 0x20000000) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000640)={@in={{0x2, 0x4e23, @rand_addr=0x64010101}}, 0x0, 0x0, 0x2b, 0x0, "23343bec488cf1ff83c5cfdc97156ae83e245eb20e80e9617c9ade203eee486a2a4c8d5fea2d247081ca0f672f56582ecb04d7311737a7c344633e2924025545d368aff65f8f602fb5993f0ed6d55eb2"}, 0xd8) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x890b, &(0x7f00000002c0)={'ip_vti0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) r7 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x2e0, 0x178, 0xa, 0x1000000, 0x178, 0x0, 0x248, 0x230, 0x230, 0x248, 0x223, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth1_to_hsr\x00'}, 0x0, 0x158, 0x178, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "085636820d6a60ff49677edc0f9111e7ccf795de83ae8e43a61945080891864007e5e0629b793e905f513cc4de3c1daad988425cfd560125160c8169789570a8a1324f192aad0900020000bbb30400000000000081fc44155aebbdf1ab66e929f2925cc90955436f7f220c7251f48f56f3e8c906b0424a32fc956bdb1a52c0e8", 0x1d}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'ipvlan0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x340) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0004fffffffffddb080001020000080002000000000008000700", @ANYRES32=r7, @ANYBLOB="08000400ac1e01010800080001000000"], 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000007c0)=@gcm_256={{0x303}, "26dc9400961cda14", "f6fbfaf51e7b7dec108c0879a69fd917adcf38b90aab2b9c690c78848d937afa", "62cadb24", "4ca30aec4c58bc83"}, 0x38) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000300)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r9}, 0x14) 31.138359233s ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet6(0xa, 0x800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x0, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000029"], 0x18}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') preadv(r6, &(0x7f0000000200)=[{&(0x7f0000000040)=""/128, 0x80}], 0x1, 0xfffffff9, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001540)={&(0x7f0000001500)='kmem_cache_free\x00'}, 0x10) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f00000003c0)={0x1}, 0x8) 30.265635848s ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='tlb_flush\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021020000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 30.158429144s ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000480)={@local, @random="1a0e2c5ffd4d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11}}}}}}, 0x0) 30.095686844s ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket(0xa, 0x6, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fsetxattr$security_capability(r2, &(0x7f00000000c0), 0x0, 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x10d, 0xd6, 0x0, &(0x7f0000000040)) 30.028960694s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x44}}, 0x0) 2.968619202s ago: executing program 3: ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "b7648859dc"}, @mixer_unit={0xb, 0x24, 0x4, 0x0, 0x0, "cb5b6e3ee874"}, @mixer_unit={0x8, 0x24, 0x4, 0x0, 0x0, "1253cb"}, @mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "ce"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 2.922377609s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x264e33, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x1d, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) 1.358668221s ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000240)={[{@journal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@debug}, {@commit={'commit', 0x3d, 0x8000000000000000}}, {@mblk_io_submit}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x183442, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0xc4030a4) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000002c0)) write$ppp(r0, &(0x7f00000003c0)='\x00!', 0x100000) 1.206565284s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x0, 0x0, &(0x7f0000000100)) 0s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) write$binfmt_script(r0, &(0x7f0000000780), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x0, 0x0, 0x1d0, 0x2e0, 0x2e0, 0x2e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) kernel console output (not intermixed with test programs): 64529][ T4941] block nbd1: not configured, cannot reconfigure [ 137.379641][ T26] audit: type=1800 audit(1717797071.735:158): pid=4942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 137.529386][ T26] audit: type=1800 audit(1717797071.875:159): pid=4948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 137.849010][ T3619] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 138.034827][ T4973] loop0: detected capacity change from 0 to 1024 [ 138.159451][ T3856] hfsplus: b-tree write err: -5, ino 4 [ 138.229206][ T3619] usb 3-1: config 0 has too many interfaces: 238, using maximum allowed: 32 [ 138.246154][ T3619] usb 3-1: config 0 has an invalid interface descriptor of length 2, skipping [ 138.263949][ T26] audit: type=1800 audit(1717797072.615:160): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1959 res=0 errno=0 [ 138.300182][ T3619] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.321201][ T3619] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 238 [ 138.347028][ T3619] usb 3-1: New USB device found, idVendor=0b05, idProduct=1717, bcdDevice=f6.f7 [ 138.376984][ T3619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.393035][ T3619] usb 3-1: config 0 descriptor?? [ 138.418807][ T26] audit: type=1800 audit(1717797072.765:161): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1959 res=0 errno=0 [ 138.647884][ T3619] usb 3-1: USB disconnect, device number 3 [ 138.894011][ T5012] loop1: detected capacity change from 0 to 256 [ 138.948634][ T26] audit: type=1800 audit(1717797073.295:162): pid=5012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=D52323E747303D dev="loop1" ino=1048637 res=0 errno=0 [ 139.562387][ T5023] loop0: detected capacity change from 0 to 4096 [ 140.071533][ T5015] loop4: detected capacity change from 0 to 32768 [ 140.369024][ T3619] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 140.809251][ T3619] usb 3-1: config 0 has too many interfaces: 238, using maximum allowed: 32 [ 140.818001][ T3619] usb 3-1: config 0 has an invalid interface descriptor of length 2, skipping [ 140.935510][ T3619] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.009156][ T3619] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 238 [ 141.076128][ T3619] usb 3-1: New USB device found, idVendor=0b05, idProduct=1717, bcdDevice=f6.f7 [ 141.159790][ T3619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.169631][ T3619] usb 3-1: config 0 descriptor?? [ 141.453749][ T3619] usb 3-1: USB disconnect, device number 4 [ 141.858795][ T5083] loop0: detected capacity change from 0 to 32768 [ 142.157538][ T26] audit: type=1326 audit(1717797076.505:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5124 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f272cc7cf69 code=0x0 [ 142.743569][ T5143] loop0: detected capacity change from 0 to 40427 [ 142.751991][ T5143] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 142.759739][ T5143] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 142.770430][ T5143] F2FS-fs (loop0): invalid crc value [ 142.836372][ T5143] F2FS-fs (loop0): Found nat_bits in checkpoint [ 142.882810][ T5143] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 142.890077][ T5143] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 142.940716][ T26] audit: type=1800 audit(1717797077.295:164): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 143.135824][ T5163] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.912262][ T4592] syz-executor.0: attempt to access beyond end of device [ 143.912262][ T4592] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 144.895177][ T5157] loop3: detected capacity change from 0 to 32768 [ 145.096294][ T5209] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 145.138014][ T5208] loop1: detected capacity change from 0 to 2048 [ 145.169994][ T5208] EXT4-fs: Ignoring removed oldalloc option [ 145.245792][ T5208] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 145.283974][ T5208] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor.1: bg 0: block 96: padding at end of block bitmap is not set [ 145.304255][ T5208] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 117 [ 145.320487][ T5208] EXT4-fs (loop1): This should not happen!! Data will be lost [ 145.320487][ T5208] [ 145.332815][ T5221] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 145.347694][ T5221] EXT4-fs (loop1): This should not happen!! Data will be lost [ 145.347694][ T5221] [ 145.357715][ T5221] EXT4-fs (loop1): Total free blocks count 0 [ 145.363918][ T5221] EXT4-fs (loop1): Free/Dirty block details [ 145.381285][ T5221] EXT4-fs (loop1): free_blocks=0 [ 145.396639][ T5224] loop2: detected capacity change from 0 to 16 [ 145.412962][ T5221] EXT4-fs (loop1): dirty_blocks=32 [ 145.444358][ T5221] EXT4-fs (loop1): Block reservation details [ 145.462467][ T5224] erofs: (device loop2): mounted with root inode @ nid 36. [ 145.945670][ T5249] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 146.390824][ T3580] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.400311][ T3580] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.408588][ T3580] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.421918][ T3580] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.433405][ T3580] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 146.441379][ T3580] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.522601][ T3854] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.634986][ T3854] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.645721][ T5276] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 146.742686][ T3854] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.824165][ T5242] loop2: detected capacity change from 0 to 32768 [ 146.960873][ T3854] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.161599][ T5268] chnl_net:caif_netlink_parms(): no params data found [ 147.172530][ T26] audit: type=1804 audit(1717797081.525:165): pid=5291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1801098365/syzkaller.Zb5A37/78/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 147.295345][ T5268] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.329446][ T5268] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.346174][ T5268] device bridge_slave_0 entered promiscuous mode [ 147.365309][ T5268] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.388485][ T5268] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.423829][ T5268] device bridge_slave_1 entered promiscuous mode [ 147.558933][ T5268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.618552][ T5268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.706001][ T26] audit: type=1326 audit(1717797082.055:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dadc7cf69 code=0x7ffc0000 [ 147.762469][ T5268] team0: Port device team_slave_0 added [ 147.790222][ T26] audit: type=1326 audit(1717797082.085:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dadc7cf69 code=0x7ffc0000 [ 147.830326][ T5268] team0: Port device team_slave_1 added [ 147.855077][ T26] audit: type=1326 audit(1717797082.085:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dadc7cf69 code=0x7ffc0000 [ 147.902120][ T26] audit: type=1326 audit(1717797082.085:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dadc7cf69 code=0x7ffc0000 [ 147.986373][ T26] audit: type=1326 audit(1717797082.095:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dadc7cf69 code=0x7ffc0000 [ 148.065756][ T26] audit: type=1326 audit(1717797082.095:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0dadc7a6e7 code=0x7ffc0000 [ 148.126027][ T26] audit: type=1326 audit(1717797082.095:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0dadc403b9 code=0x7ffc0000 [ 148.161065][ T5268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.178470][ T26] audit: type=1326 audit(1717797082.095:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dadc7cf69 code=0x7ffc0000 [ 148.193606][ T5268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.258065][ T26] audit: type=1326 audit(1717797082.095:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0dadc7a6e7 code=0x7ffc0000 [ 148.272663][ T5268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.312124][ T5323] 9pnet_rdma: rdma_create_trans (5323): problem binding to privport: 13 [ 148.336874][ T26] audit: type=1326 audit(1717797082.095:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0dadc403b9 code=0x7ffc0000 [ 148.392015][ T5268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.401470][ T5268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.406196][ T26] audit: type=1326 audit(1717797082.095:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dadc7cf69 code=0x7ffc0000 [ 148.480904][ T26] audit: type=1326 audit(1717797082.105:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0dadc7a6e7 code=0x7ffc0000 [ 148.498177][ T5268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.514642][ T48] Bluetooth: hci0: command tx timeout [ 148.538434][ T26] audit: type=1326 audit(1717797082.105:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0dadc403b9 code=0x7ffc0000 [ 148.624417][ T5268] device hsr_slave_0 entered promiscuous mode [ 148.642932][ T5268] device hsr_slave_1 entered promiscuous mode [ 148.656301][ T26] audit: type=1326 audit(1717797082.105:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0dadc7cf69 code=0x7ffc0000 [ 148.681888][ T5268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.700315][ T5268] Cannot create hsr debugfs directory [ 148.798437][ T5307] loop1: detected capacity change from 0 to 32768 [ 148.848797][ T5319] loop2: detected capacity change from 0 to 32768 [ 149.216987][ T3854] device hsr_slave_0 left promiscuous mode [ 149.228266][ T3854] device hsr_slave_1 left promiscuous mode [ 149.254225][ T3854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.272285][ T3854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.306433][ T5339] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 149.326523][ T3854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.339048][ T3854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.354948][ T3854] device bridge_slave_1 left promiscuous mode [ 149.365228][ T5337] loop3: detected capacity change from 0 to 4096 [ 149.372473][ T3854] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.396348][ T5337] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 149.407980][ T3854] device bridge_slave_0 left promiscuous mode [ 149.422438][ T3854] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.459739][ T3854] device veth1_macvtap left promiscuous mode [ 149.478170][ T3854] device veth0_macvtap left promiscuous mode [ 149.495645][ T3854] device veth1_vlan left promiscuous mode [ 149.521861][ T3854] device veth0_vlan left promiscuous mode [ 149.679663][ T5350] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 149.893760][ T3854] team0 (unregistering): Port device team_slave_1 removed [ 149.918821][ T3854] team0 (unregistering): Port device team_slave_0 removed [ 149.941861][ T3854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.957760][ T3854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.040192][ T3854] bond0 (unregistering): Released all slaves [ 150.416481][ T5368] syz-executor.0 uses old SIOCAX25GETINFO [ 150.530195][ T5369] loop3: detected capacity change from 0 to 4096 [ 150.533818][ T5373] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 150.563580][ T5369] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 150.579901][ T48] Bluetooth: hci0: command tx timeout [ 150.735851][ T5378] loop1: detected capacity change from 0 to 2048 [ 150.759077][ T5268] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 150.797116][ T5378] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 150.805677][ T5268] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 150.816289][ T5268] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 150.829734][ T5268] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 150.854977][ T5386] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 151.174267][ T5268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.233046][ T5268] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.245906][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.257730][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.297034][ T4531] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #2: block 16: comm syz-executor.1: lblock 0 mapped to illegal pblock 16 (length 1) [ 151.353336][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.362054][ T4531] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5868: Out of memory [ 151.363620][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.395046][ T3620] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.402268][ T3620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.411536][ T4531] EXT4-fs error (device loop1): ext4_dirty_inode:6072: inode #18: comm syz-executor.1: mark_inode_dirty error [ 151.429139][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.464619][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.474042][ T4531] EXT4-fs (loop1): unmounting filesystem. [ 151.504938][ T3620] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.512148][ T3620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.532732][ T5400] loop3: detected capacity change from 0 to 256 [ 151.563166][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.580509][ T5400] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010530, chksum : 0x90502ed2, utbl_chksum : 0xe619d30d) [ 151.609902][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.626857][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.786281][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.802584][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.826760][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.862226][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.897560][ T5388] loop0: detected capacity change from 0 to 32768 [ 151.924980][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.949861][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 151.962336][ T5388] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5388) [ 151.968755][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.998771][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 152.026921][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.055699][ T5268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 152.071662][ T5388] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 152.116857][ T5388] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 152.161260][ T5388] BTRFS info (device loop0): using free space tree [ 152.406222][ T5388] BTRFS info (device loop0): enabling ssd optimizations [ 152.659104][ T48] Bluetooth: hci0: command tx timeout [ 152.688105][ T5394] loop2: detected capacity change from 0 to 32768 [ 152.984304][ T4592] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 153.208876][ C1] sched: RT throttling activated [ 153.432587][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 153.445937][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.492911][ T5268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.950580][ T3583] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.965962][ T3583] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.974920][ T3583] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.984551][ T3583] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.992413][ T3583] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.000696][ T3583] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.547385][ T5411] loop3: detected capacity change from 0 to 262144 [ 154.560957][ T5411] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (5411) [ 154.580772][ T5411] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 154.591191][ T5411] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 154.600526][ T5411] BTRFS info (device loop3): using free space tree [ 154.749162][ T3580] Bluetooth: hci0: command tx timeout [ 154.829070][ T5411] BTRFS info (device loop3): enabling ssd optimizations [ 154.956966][ T5431] chnl_net:caif_netlink_parms(): no params data found [ 154.959690][ T5460] loop2: detected capacity change from 0 to 2048 [ 155.028067][ T4375] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 155.055511][ T5460] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 155.150561][ T5431] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.166202][ T5431] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.175264][ T5431] device bridge_slave_0 entered promiscuous mode [ 155.196075][ T5431] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.212769][ T5431] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.231577][ T5431] device bridge_slave_1 entered promiscuous mode [ 155.490284][ T5431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.520868][ T4474] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #2: block 16: comm syz-executor.2: lblock 0 mapped to illegal pblock 16 (length 1) [ 155.617640][ T4474] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5868: Out of memory [ 155.636993][ T4474] EXT4-fs error (device loop2): ext4_dirty_inode:6072: inode #18: comm syz-executor.2: mark_inode_dirty error [ 155.664152][ T5431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.677158][ T4474] EXT4-fs (loop2): unmounting filesystem. [ 155.721369][ T5481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.732471][ T5481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.851833][ T3854] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.986977][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.999845][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 156.001564][ T5489] loop0: detected capacity change from 0 to 512 [ 156.011879][ T5268] device veth0_vlan entered promiscuous mode [ 156.020119][ T48] Bluetooth: hci1: command tx timeout [ 156.025867][ T5489] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 156.036722][ T5489] UDF-fs: Scanning with blocksize 512 failed [ 156.053178][ T5431] team0: Port device team_slave_0 added [ 156.068372][ T5489] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 156.081555][ T3854] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.094541][ T5489] UDF-fs: Scanning with blocksize 1024 failed [ 156.100155][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 156.108627][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 156.108768][ T5489] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 156.120717][ T5431] team0: Port device team_slave_1 added [ 156.131412][ T5268] device veth1_vlan entered promiscuous mode [ 156.181410][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 156.190926][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 156.205565][ T5489] UDF-fs: Scanning with blocksize 2048 failed [ 156.215106][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 156.224184][ T5489] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 156.234728][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.244797][ T5431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.253244][ T5431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.286282][ T5431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.301529][ T5489] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.355958][ T3854] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.404181][ T5268] device veth0_macvtap entered promiscuous mode [ 156.439360][ T5431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.446957][ T5431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.510564][ T5431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.527616][ T5491] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 156.554786][ T3854] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.605609][ T5268] device veth1_macvtap entered promiscuous mode [ 156.716164][ T5431] device hsr_slave_0 entered promiscuous mode [ 156.736864][ T5431] device hsr_slave_1 entered promiscuous mode [ 156.762030][ T5496] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 156.777874][ T5268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.802105][ T5496] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 156.811635][ T5268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.839576][ T5268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.850174][ T5268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.873458][ T5268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.895231][ T5268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.916513][ T5268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.929584][ T5268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.956473][ T5268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.971477][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 156.980041][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 156.988315][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 156.997461][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.013338][ T3580] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 157.024284][ T3580] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 157.033464][ T3580] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.043545][ T3580] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.052598][ T3580] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 157.062357][ T3580] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.116730][ T5268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.140264][ T5268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.150323][ T5268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.160938][ T5268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.167590][ T5504] loop0: detected capacity change from 0 to 2048 [ 157.171549][ T5268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.188197][ T5268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.198216][ T5268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.209567][ T5268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.221427][ T5268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.242136][ T5504] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 157.269091][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 157.278471][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 157.290067][ T5268] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.298789][ T5268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.316384][ T5268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.325411][ T5268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.530936][ T4592] EXT4-fs error (device loop0): ext4_map_blocks:607: inode #2: block 16: comm syz-executor.0: lblock 0 mapped to illegal pblock 16 (length 1) [ 157.681597][ T4592] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5868: Out of memory [ 157.691308][ T4592] EXT4-fs error (device loop0): ext4_dirty_inode:6072: inode #18: comm syz-executor.0: mark_inode_dirty error [ 157.733363][ T4180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.749712][ T4180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.777225][ T4592] EXT4-fs (loop0): unmounting filesystem. [ 157.860185][ T3905] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 157.945208][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.957091][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.999472][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 158.099032][ T48] Bluetooth: hci1: command tx timeout [ 158.181220][ T5497] chnl_net:caif_netlink_parms(): no params data found [ 158.230191][ T5519] loop3: detected capacity change from 0 to 16 [ 158.258318][ T5519] erofs: (device loop3): mounted with root inode @ nid 36. [ 158.366338][ T5519] process 'syz-executor.3' launched './file2' with NULL argv: empty string added [ 158.404313][ T48] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 158.437099][ T5519] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 158.478470][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 158.478487][ T26] audit: type=1800 audit(1717797092.825:242): pid=5519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 158.591159][ T5497] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.622521][ T5497] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.640273][ T5497] device bridge_slave_0 entered promiscuous mode [ 158.722440][ T5497] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.734367][ T5497] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.761103][ T5497] device bridge_slave_1 entered promiscuous mode [ 158.865343][ T3580] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 158.894532][ T3580] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 158.917917][ T3580] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 158.931119][ T5497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.950314][ T3580] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 158.959288][ T3580] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 158.962409][ T5431] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 158.974966][ T3580] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 159.021049][ T5431] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 159.039654][ T5497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.093691][ T5431] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 159.107356][ T5431] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 159.139229][ T3580] Bluetooth: hci3: command tx timeout [ 159.161913][ T5497] team0: Port device team_slave_0 added [ 159.191370][ T5497] team0: Port device team_slave_1 added [ 159.279374][ T3854] device hsr_slave_0 left promiscuous mode [ 159.292930][ T3854] device hsr_slave_1 left promiscuous mode [ 159.305729][ T3854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.314200][ T3854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.338667][ T3854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.346359][ T3854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.361752][ T3854] device bridge_slave_1 left promiscuous mode [ 159.369247][ T3854] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.378472][ T3854] device bridge_slave_0 left promiscuous mode [ 159.385973][ T3854] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.398002][ T3854] device veth1_macvtap left promiscuous mode [ 159.404223][ T3854] device veth0_macvtap left promiscuous mode [ 159.410513][ T3854] device veth1_vlan left promiscuous mode [ 159.416430][ T3854] device veth0_vlan left promiscuous mode [ 159.634907][ T3854] team0 (unregistering): Port device team_slave_1 removed [ 159.655644][ T3854] team0 (unregistering): Port device team_slave_0 removed [ 159.668787][ T3854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.683424][ T3854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.771272][ T3854] bond0 (unregistering): Released all slaves [ 159.837117][ T5497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.844347][ T5497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.872324][ T5497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.901782][ T5497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.914601][ T5497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.944604][ T5497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.972892][ T5545] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 159.982649][ T5545] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.099929][ T5497] device hsr_slave_0 entered promiscuous mode [ 160.116029][ T5497] device hsr_slave_1 entered promiscuous mode [ 160.125722][ T5497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.143229][ T5497] Cannot create hsr debugfs directory [ 160.183689][ T3580] Bluetooth: hci1: command tx timeout [ 160.308053][ T5552] loop3: detected capacity change from 0 to 4096 [ 160.311495][ T5431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.326731][ T5552] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 160.393998][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.410720][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.422842][ T5431] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.445992][ T5527] chnl_net:caif_netlink_parms(): no params data found [ 160.488774][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.504645][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.523841][ T3899] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.531050][ T3899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.596219][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.681432][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.696229][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.707356][ T5478] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.714517][ T5478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.722871][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.809836][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.831542][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.874593][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.974605][ T5560] overlayfs: failed to resolve './file0': -2 [ 160.983474][ T5497] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.050643][ T5527] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.062443][ T5527] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.069698][ T3580] Bluetooth: hci2: command tx timeout [ 161.094413][ T5527] device bridge_slave_0 entered promiscuous mode [ 161.121556][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.130350][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.141533][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.150457][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.159224][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.185438][ T5497] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.219318][ T3580] Bluetooth: hci3: command tx timeout [ 161.227983][ T5527] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.244778][ T5527] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.285411][ T5527] device bridge_slave_1 entered promiscuous mode [ 161.322884][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.339746][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.375605][ T5497] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.414148][ T5431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 161.503667][ T5497] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.528061][ T5555] loop3: detected capacity change from 0 to 40427 [ 161.545913][ T5555] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 161.560730][ T5555] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 161.584356][ T5555] F2FS-fs (loop3): Found nat_bits in checkpoint [ 161.726291][ T5527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.739631][ T5555] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 161.746720][ T5555] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 161.761344][ T5527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.259173][ T3580] Bluetooth: hci1: command tx timeout [ 162.717936][ T5577] loop4: detected capacity change from 0 to 64 [ 162.743071][ T5527] team0: Port device team_slave_0 added [ 162.768345][ T5527] team0: Port device team_slave_1 added [ 162.900358][ T5527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.919677][ T5527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.952913][ T5527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.993545][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.020744][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.031177][ T5527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.038216][ T5527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.068341][ T5527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.105055][ T5431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.139250][ T3580] Bluetooth: hci2: command tx timeout [ 163.183299][ T5527] device hsr_slave_0 entered promiscuous mode [ 163.191545][ T5527] device hsr_slave_1 entered promiscuous mode [ 163.198233][ T5527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.206049][ T5527] Cannot create hsr debugfs directory [ 163.249206][ T3905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.258130][ T3905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.308126][ T3580] Bluetooth: hci3: command tx timeout [ 163.346880][ T5497] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 163.462046][ T5497] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 163.479979][ T5497] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 163.538681][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.555291][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.588384][ T5497] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 163.615586][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.649076][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.661881][ T5431] device veth0_vlan entered promiscuous mode [ 163.704434][ T5431] device veth1_vlan entered promiscuous mode [ 163.879212][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 163.916780][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.939509][ T5431] device veth0_macvtap entered promiscuous mode [ 163.963579][ T5431] device veth1_macvtap entered promiscuous mode [ 164.033789][ T5527] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.048734][ T5583] loop4: detected capacity change from 0 to 32768 [ 164.160551][ T5497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.198476][ T5527] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.260763][ T5431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.301733][ T5591] loop3: detected capacity change from 0 to 128 [ 164.309047][ T5431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.328318][ T5431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.342123][ T5431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.352211][ T5431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.363713][ T5431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.374094][ T5431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.391616][ T5431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.410749][ T5431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.439846][ T5497] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.476547][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 164.505386][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 164.526100][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.534057][ T5597] loop4: detected capacity change from 0 to 128 [ 164.556931][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.574875][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.586198][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.612992][ T5527] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.670322][ T5431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.696564][ T5431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.706968][ T5431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.717842][ T5431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.728010][ T5431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.729240][ T5599] loop3: detected capacity change from 0 to 4096 [ 164.738537][ T5431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.757762][ T5431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.768414][ T5431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.780407][ T5431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.799410][ T5599] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 164.811016][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.823502][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.844665][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.854276][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.863062][ T3900] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.870245][ T3900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.878987][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.887893][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.896543][ T3900] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.903689][ T3900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.911815][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.976269][ T5527] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.996641][ T5431] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.009482][ T5431] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.027809][ T5431] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.036689][ T5431] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.066742][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.076964][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.086579][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.096486][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.105964][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 165.150476][ T3905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 165.168283][ T3905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.188449][ T5497] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 165.207556][ T5497] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.219387][ T3580] Bluetooth: hci2: command tx timeout [ 165.259545][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 165.268188][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.307841][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.336249][ T3899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.357405][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.379388][ T3580] Bluetooth: hci3: command tx timeout [ 165.989080][ T5527] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 166.141066][ T5527] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 166.423347][ T5527] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 166.492595][ T3856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.517766][ T3856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.518629][ T5527] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 166.590334][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 166.749796][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.758160][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.825389][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 167.029638][ T5611] loop4: detected capacity change from 0 to 32768 [ 167.039478][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.049444][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.072607][ T5497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.113746][ T5527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.122829][ T5629] loop1: detected capacity change from 0 to 4096 [ 167.133727][ T5629] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 167.212603][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.224085][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.246082][ T5527] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.267665][ T5632] loop3: detected capacity change from 0 to 128 [ 167.301790][ T3580] Bluetooth: hci2: command tx timeout [ 167.339023][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.348007][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.403806][ T5497] device veth0_vlan entered promiscuous mode [ 167.415081][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.427848][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.450038][ T3900] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.457295][ T3900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.475226][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.491066][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.505662][ T3900] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.512874][ T3900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.524147][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.534272][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.553852][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.630808][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.641188][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.650824][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.659141][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.668609][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.686902][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.696994][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 167.744271][ T5643] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 167.746343][ T5497] device veth1_vlan entered promiscuous mode [ 167.796688][ T3905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.820453][ T3905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.836504][ T5645] loop4: detected capacity change from 0 to 1024 [ 167.849811][ T3905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.858396][ T3905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.872077][ T5647] loop3: detected capacity change from 0 to 512 [ 167.879829][ T3905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.888365][ T3905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.897103][ T5645] EXT4-fs: Ignoring removed i_version option [ 167.909087][ T5645] EXT4-fs: Ignoring removed orlov option [ 167.912382][ T5527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 167.947176][ T5645] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 167.949279][ T5647] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 167.990491][ T5647] ext4 filesystem being mounted at /root/syzkaller-testdir1801098365/syzkaller.Zb5A37/128/file0 supports timestamps until 2038 (0x7fffffff) [ 168.001583][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.015152][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.028295][ T5497] device veth0_macvtap entered promiscuous mode [ 168.051125][ T5497] device veth1_macvtap entered promiscuous mode [ 168.075680][ T5268] EXT4-fs (loop4): unmounting filesystem. [ 168.104676][ T5497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.116117][ T5497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.128490][ T5497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.185153][ T5497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.214350][ T5497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.236817][ T5497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.259391][ T5497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.270225][ T5497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.280338][ T5497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.291005][ T5497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.302831][ T5497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.316022][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 168.327804][ T4375] EXT4-fs (loop3): unmounting filesystem. [ 168.352593][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.379791][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.388740][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.461875][ T5497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.481704][ T5497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.507474][ T5497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.528638][ T5497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.568929][ T5497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.587822][ T5497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.605007][ T5670] loop1: detected capacity change from 0 to 128 [ 168.609130][ T5497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.633578][ T5671] loop3: detected capacity change from 0 to 1764 [ 168.640912][ T5497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.668959][ T5497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.684164][ T5497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.703697][ T5497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.739697][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.748695][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.861251][ T5497] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.876907][ T5497] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.895467][ T5497] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.917312][ T5497] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.951716][ T5679] loop1: detected capacity change from 0 to 1024 [ 168.960780][ T5527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.970234][ T5679] EXT4-fs: Ignoring removed i_version option [ 168.981277][ T5481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.992286][ T5679] EXT4-fs: Ignoring removed orlov option [ 169.003268][ T5481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 169.050652][ T5679] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 169.065102][ T5683] loop4: detected capacity change from 0 to 512 [ 169.120989][ T5683] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 169.144046][ T5683] ext4 filesystem being mounted at /root/syzkaller-testdir3686577016/syzkaller.82z9HS/22/file0 supports timestamps until 2038 (0x7fffffff) [ 169.144245][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.195570][ T5431] EXT4-fs (loop1): unmounting filesystem. [ 169.231022][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.277804][ T5268] EXT4-fs (loop4): unmounting filesystem. [ 169.337073][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.359602][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.407470][ T5527] device veth0_vlan entered promiscuous mode [ 169.416209][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.441915][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.493591][ T3854] device hsr_slave_0 left promiscuous mode [ 169.501104][ T3854] device hsr_slave_1 left promiscuous mode [ 169.507566][ T5695] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 169.514638][ T5695] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 169.524151][ T3854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.538707][ T3854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.549340][ T3854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.555164][ T5695] vhci_hcd vhci_hcd.0: Device attached [ 169.556997][ T3854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.578306][ T5698] vhci_hcd: connection closed [ 169.584020][ T3856] vhci_hcd: stop threads [ 169.599802][ T3854] device bridge_slave_1 left promiscuous mode [ 169.607667][ T3856] vhci_hcd: release socket [ 169.613469][ T3854] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.623277][ T3856] vhci_hcd: disconnect device [ 169.632702][ T3854] device bridge_slave_0 left promiscuous mode [ 169.646650][ T3854] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.664990][ T3854] device hsr_slave_0 left promiscuous mode [ 169.684600][ T3854] device hsr_slave_1 left promiscuous mode [ 169.697378][ T3854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.723293][ T3854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.742288][ T3854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.755261][ T3854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.767218][ T3854] device bridge_slave_1 left promiscuous mode [ 169.773901][ T3854] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.782663][ T3854] device bridge_slave_0 left promiscuous mode [ 169.789269][ T3854] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.804743][ T3854] device veth1_macvtap left promiscuous mode [ 169.810959][ T3854] device veth0_macvtap left promiscuous mode [ 169.817046][ T3854] device veth1_vlan left promiscuous mode [ 169.827778][ T3854] device veth0_vlan left promiscuous mode [ 169.835689][ T3854] device veth1_macvtap left promiscuous mode [ 169.842052][ T3854] device veth0_macvtap left promiscuous mode [ 169.848138][ T3854] device veth1_vlan left promiscuous mode [ 169.854152][ T3854] device veth0_vlan left promiscuous mode [ 170.230103][ T3854] team0 (unregistering): Port device team_slave_1 removed [ 170.309204][ T3854] team0 (unregistering): Port device team_slave_0 removed [ 170.329772][ T3854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.358190][ T3854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.452800][ T3854] bond0 (unregistering): Released all slaves [ 170.654231][ T3854] team0 (unregistering): Port device team_slave_1 removed [ 170.679281][ T3854] team0 (unregistering): Port device team_slave_0 removed [ 170.696018][ T3854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.718608][ T3854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.824060][ T3854] bond0 (unregistering): Released all slaves [ 170.877611][ T5723] loop1: detected capacity change from 0 to 4096 [ 170.891142][ T5723] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 170.940834][ T5527] device veth1_vlan entered promiscuous mode [ 170.957412][ T5723] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 171.004696][ T3855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.056565][ T3855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.122158][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 171.139834][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 171.148747][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 171.173125][ T5527] device veth0_macvtap entered promiscuous mode [ 171.229164][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.237426][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.251350][ T5527] device veth1_macvtap entered promiscuous mode [ 171.273255][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 171.284089][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 171.315279][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 171.390335][ T5527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.432197][ T5527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.463002][ T5527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.489025][ T5527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.503488][ T5527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.521148][ T5743] loop1: detected capacity change from 0 to 1024 [ 171.522543][ T5527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.569090][ T5527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.600807][ T5527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.643996][ T3855] hfsplus: b-tree write err: -5, ino 4 [ 171.664368][ T5527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.702249][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 171.732959][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.754684][ T5527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.808233][ T5527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.832765][ T5527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.843501][ T5527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.853690][ T5527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.870103][ T5527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.890537][ T5527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.913378][ T5527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.945461][ T5527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.965102][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 171.987826][ T3906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.030222][ T5527] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.031972][ T5748] loop4: detected capacity change from 0 to 4096 [ 172.064734][ T5527] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.099661][ T5527] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.126791][ T5527] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.144239][ T5748] ntfs3: loop4: failed to convert "0000" to iso8859-3 [ 172.198701][ T5755] loop2: detected capacity change from 0 to 2048 [ 172.275889][ T5759] loop3: detected capacity change from 0 to 24 [ 172.292663][ T5755] loop2: p1 < > p4 [ 172.314623][ T5755] loop2: p4 size 8388608 extends beyond EOD, truncated [ 172.336917][ T5757] loop1: detected capacity change from 0 to 4096 [ 172.364839][ T3712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.384113][ T5757] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 172.393702][ T5755] Zero length message leads to an empty skb [ 172.400119][ T3712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.410533][ T26] audit: type=1800 audit(1717797106.765:243): pid=5755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1962 res=0 errno=0 [ 172.431451][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.467108][ T5757] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 172.495596][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 172.560957][ T4180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.611787][ T4180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.664728][ T3905] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 172.779906][ T5768] loop3: detected capacity change from 0 to 512 [ 172.845353][ T5774] loop0: detected capacity change from 0 to 512 [ 172.867697][ T5768] ext4: Unknown parameter 'nouser_xattr' [ 172.886022][ T5774] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 172.911005][ T5774] UDF-fs: Scanning with blocksize 512 failed [ 172.923814][ T5774] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 172.939828][ T5774] UDF-fs: Scanning with blocksize 1024 failed [ 172.978028][ T5774] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 173.020633][ T5774] UDF-fs: Scanning with blocksize 2048 failed [ 173.037431][ T5774] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 173.076517][ T5774] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.207150][ T5784] binder: 5783:5784 ioctl c0306201 0 returned -14 [ 173.360843][ T5791] IPv6: sit1: Disabled Multicast RS [ 173.368742][ T5790] loop0: detected capacity change from 0 to 512 [ 173.411344][ T5790] EXT4-fs error (device loop0): __ext4_fill_super:5399: inode #2: comm syz-executor.0: casefold flag without casefold feature [ 173.440282][ T5790] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 173.498249][ T5790] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 173.649909][ T5527] EXT4-fs (loop0): unmounting filesystem. [ 173.791226][ T5797] loop1: detected capacity change from 0 to 4096 [ 173.882277][ T5799] loop2: detected capacity change from 0 to 4096 [ 173.906934][ T5799] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 173.918003][ T5797] ntfs3: loop1: failed to convert "0000" to default [ 173.936946][ T5797] ntfs3: loop1: failed to convert name for inode 1e. [ 173.965728][ T5799] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 174.155237][ T5807] xt_cgroup: path and classid specified [ 174.175225][ T5807] x_tables: ip_tables: osf match: only valid for protocol 6 [ 174.206700][ T5768] loop3: detected capacity change from 0 to 32768 [ 174.236981][ T5768] XFS (loop3): Mounting V5 Filesystem [ 174.356379][ T5768] XFS (loop3): Ending clean mount [ 174.415461][ T5768] sch_fq: defrate 0 ignored. [ 174.467240][ T5826] loop0: detected capacity change from 0 to 1024 [ 174.514136][ T4375] XFS (loop3): Unmounting Filesystem [ 174.585280][ T3856] hfsplus: b-tree write err: -5, ino 4 [ 174.995179][ T5836] loop0: detected capacity change from 0 to 4096 [ 175.026871][ T5841] loop3: detected capacity change from 0 to 1024 [ 175.125992][ T5836] ntfs3: loop0: failed to convert "0000" to default [ 175.149170][ T5836] ntfs3: loop0: failed to convert name for inode 1e. [ 175.232923][ T5842] loop2: detected capacity change from 0 to 4096 [ 175.270204][ T5846] binder: 5845:5846 ioctl c0306201 0 returned -14 [ 175.281641][ T5842] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 175.317086][ T5842] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 175.474611][ T5852] loop1: detected capacity change from 0 to 512 [ 175.487646][ T5852] ext4: Unknown parameter 'nouser_xattr' [ 176.715133][ T5863] loop2: detected capacity change from 0 to 4096 [ 176.857284][ T5863] ntfs3: loop2: failed to convert "0000" to iso8859-3 [ 176.956112][ T5876] loop4: detected capacity change from 0 to 512 [ 177.036651][ T5876] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 177.040086][ T5878] loop0: detected capacity change from 0 to 2048 [ 177.106041][ T5878] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.168500][ T5876] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #16: comm syz-executor.4: corrupted inode contents [ 177.190277][ T5876] EXT4-fs error (device loop4): ext4_dirty_inode:6072: inode #16: comm syz-executor.4: mark_inode_dirty error [ 177.207139][ T5876] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #16: comm syz-executor.4: corrupted inode contents [ 177.221453][ T5876] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz-executor.4: mark_inode_dirty error [ 177.233676][ T5876] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #16: comm syz-executor.4: corrupted inode contents [ 177.256781][ T5876] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 177.265918][ T5876] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #16: comm syz-executor.4: corrupted inode contents [ 177.267904][ T5880] loop2: detected capacity change from 0 to 4096 [ 177.284532][ T5876] EXT4-fs error (device loop4): ext4_truncate:4300: inode #16: comm syz-executor.4: mark_inode_dirty error [ 177.296688][ T5876] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 177.320382][ T5876] EXT4-fs (loop4): 1 truncate cleaned up [ 177.326100][ T5876] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 177.341704][ T3711] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 177.357286][ T5880] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 177.358639][ T3711] EXT4-fs error (device loop4): ext4_release_dquot:6800: comm kworker/u4:7: Failed to release dquot type 1 [ 177.384036][ T5876] ext4 filesystem being mounted at /root/syzkaller-testdir3686577016/syzkaller.82z9HS/38/file1 supports timestamps until 2038 (0x7fffffff) [ 177.419839][ T5885] IPv6: sit1: Disabled Multicast RS [ 177.434707][ T5880] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 177.449415][ T5268] EXT4-fs (loop4): unmounting filesystem. [ 177.655833][ T5866] loop3: detected capacity change from 0 to 32768 [ 177.684899][ T5866] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (5866) [ 177.710527][ T5866] BTRFS info (device loop3): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 177.716600][ T5852] loop1: detected capacity change from 0 to 32768 [ 177.725281][ T5866] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 177.750579][ T5866] BTRFS info (device loop3): using free space tree [ 177.779980][ T26] audit: type=1326 audit(1717797112.125:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb967cf69 code=0x7ffc0000 [ 177.821442][ T5852] XFS (loop1): Mounting V5 Filesystem [ 177.869445][ T26] audit: type=1326 audit(1717797112.125:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb967cf69 code=0x7ffc0000 [ 177.897567][ T26] audit: type=1326 audit(1717797112.165:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cb967cf69 code=0x7ffc0000 [ 177.921386][ T26] audit: type=1326 audit(1717797112.165:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb967cf69 code=0x7ffc0000 [ 177.945144][ T26] audit: type=1326 audit(1717797112.165:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb967cf69 code=0x7ffc0000 [ 177.945187][ T5852] XFS (loop1): Ending clean mount [ 177.968875][ T26] audit: type=1326 audit(1717797112.165:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cb967cf69 code=0x7ffc0000 [ 177.996935][ T26] audit: type=1326 audit(1717797112.165:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb967cf69 code=0x7ffc0000 [ 178.023320][ T26] audit: type=1326 audit(1717797112.165:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9cb967a6e7 code=0x7ffc0000 [ 178.046265][ T26] audit: type=1326 audit(1717797112.175:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9cb96403b9 code=0x7ffc0000 [ 178.051713][ T5866] BTRFS info (device loop3): enabling ssd optimizations [ 178.069919][ T26] audit: type=1326 audit(1717797112.175:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9cb967a6e7 code=0x7ffc0000 [ 178.173243][ T5852] sch_fq: defrate 0 ignored. [ 178.281937][ T5895] loop2: detected capacity change from 0 to 8192 [ 178.312937][ T5431] XFS (loop1): Unmounting Filesystem [ 178.485490][ T4375] BTRFS info (device loop3): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 179.093812][ T5950] loop1: detected capacity change from 0 to 2048 [ 179.153987][ T5950] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.206832][ T5956] loop3: detected capacity change from 0 to 512 [ 179.243243][ T5956] ext4: Unknown parameter 'nouser_xattr' [ 179.260747][ T5926] loop4: detected capacity change from 0 to 32768 [ 179.295541][ T5958] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.2'. [ 179.323574][ T5926] XFS (loop4): Mounting V5 Filesystem [ 179.336924][ T5958] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 179.416679][ T5926] XFS (loop4): Ending clean mount [ 179.451509][ T5926] XFS (loop4): Quotacheck needed: Please wait. [ 179.572904][ T5926] XFS (loop4): Quotacheck: Done. [ 179.675239][ T5268] XFS (loop4): Unmounting Filesystem [ 180.045700][ T5954] loop0: detected capacity change from 0 to 32768 [ 180.088557][ T5954] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5954) [ 180.873920][ T5954] BTRFS info (device loop0): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 180.904466][ T5954] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 180.914016][ T5954] BTRFS info (device loop0): using free space tree [ 180.976328][ T5954] BTRFS info (device loop0): enabling ssd optimizations [ 180.988177][ T5990] loop4: detected capacity change from 0 to 4096 [ 180.990838][ T5968] loop3: detected capacity change from 0 to 32768 [ 181.058446][ T5968] XFS (loop3): Mounting V5 Filesystem [ 181.142379][ T5527] BTRFS info (device loop0): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 181.170096][ T6021] loop2: detected capacity change from 0 to 128 [ 181.185573][ T5990] ntfs3: loop4: failed to convert "0000" to default [ 181.197610][ T5990] ntfs3: loop4: failed to convert name for inode 1e. [ 181.238653][ T6021] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 181.447759][ T5968] XFS (loop3): Ending clean mount [ 181.530007][ T5956] sch_fq: defrate 0 ignored. [ 181.635174][ T4375] XFS (loop3): Unmounting Filesystem [ 182.260122][ T6023] loop1: detected capacity change from 0 to 32768 [ 182.372795][ T6023] XFS (loop1): Mounting V5 Filesystem [ 182.502821][ T6023] XFS (loop1): Ending clean mount [ 182.515383][ T6023] XFS (loop1): Quotacheck needed: Please wait. [ 182.637873][ T6023] XFS (loop1): Quotacheck: Done. [ 182.693162][ T6039] loop4: detected capacity change from 0 to 32768 [ 182.743126][ T5431] XFS (loop1): Unmounting Filesystem [ 182.754860][ T6039] XFS (loop4): Mounting V5 Filesystem [ 182.911643][ T6039] XFS (loop4): Ending clean mount [ 183.126028][ T6039] syz-executor.4 (6039) used greatest stack depth: 19472 bytes left [ 183.204204][ T5268] XFS (loop4): Unmounting Filesystem [ 183.303521][ T6102] overlayfs: statfs failed on './file0' [ 185.557812][ T6092] loop0: detected capacity change from 0 to 32768 [ 185.607928][ T6132] overlayfs: statfs failed on './file0' [ 185.662580][ T6092] XFS (loop0): Mounting V5 Filesystem [ 185.748759][ T6092] XFS (loop0): Ending clean mount [ 187.992928][ T5527] XFS (loop0): Unmounting Filesystem [ 188.501831][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 188.528522][ T6130] loop3: detected capacity change from 0 to 32768 [ 188.544391][ T6130] XFS: noikeep mount option is deprecated. [ 188.678199][ T6176] overlayfs: statfs failed on './file0' [ 189.065285][ T26] kauditd_printk_skb: 34 callbacks suppressed [ 189.065302][ T26] audit: type=1800 audit(1717797123.415:288): pid=6193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1960 res=0 errno=0 [ 190.146552][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 190.643370][ T6179] loop1: detected capacity change from 0 to 32768 [ 190.703990][ T6179] XFS (loop1): Mounting V5 Filesystem [ 190.779398][ T6179] XFS (loop1): Ending clean mount [ 190.839497][ T6194] loop0: detected capacity change from 0 to 32768 [ 190.880319][ T6194] XFS (loop0): Mounting V5 Filesystem [ 190.903901][ T6179] syz-executor.1 (6179) used greatest stack depth: 19256 bytes left [ 190.944847][ T26] audit: type=1800 audit(1717797125.295:289): pid=6240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1967 res=0 errno=0 [ 191.013385][ T5431] XFS (loop1): Unmounting Filesystem [ 191.050669][ T6194] XFS (loop0): Ending clean mount [ 191.066000][ T6194] XFS (loop0): Quotacheck needed: Please wait. [ 191.178407][ T6194] XFS (loop0): Quotacheck: Done. [ 191.336118][ T6246] overlayfs: metacopy with no lower data found - abort lookup (/file0) [ 191.344912][ T6248] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 192.682670][ T5527] XFS (loop0): Unmounting Filesystem [ 192.825109][ T6270] loop1: detected capacity change from 0 to 512 [ 192.924670][ T6270] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 192.955791][ T6270] ext4 filesystem being mounted at /root/syzkaller-testdir1879403625/syzkaller.r3D1ZL/50/bus supports timestamps until 2038 (0x7fffffff) [ 193.094478][ T6270] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 193.145899][ T6270] EXT4-fs: Cannot change journaled quota options when quota turned on [ 193.243768][ T5431] EXT4-fs (loop1): unmounting filesystem. [ 193.389958][ T6291] loop1: detected capacity change from 0 to 1024 [ 193.443509][ T6291] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000e01c, mo2=0002] [ 193.458819][ T6291] System zones: 0-1, 3-12 [ 193.470454][ T6291] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 193.596708][ T6268] loop4: detected capacity change from 0 to 32768 [ 193.695110][ T6296] loop0: detected capacity change from 0 to 4096 [ 193.697035][ T6268] XFS (loop4): Mounting V5 Filesystem [ 193.704013][ T6296] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 194.202180][ T6296] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 194.226564][ T6268] XFS (loop4): Ending clean mount [ 194.239290][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.245672][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.434188][ T5431] EXT4-fs (loop1): unmounting filesystem. [ 194.472345][ T6273] loop2: detected capacity change from 0 to 32768 [ 194.523538][ T6273] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (6273) [ 194.546561][ T5268] XFS (loop4): Unmounting Filesystem [ 194.574543][ T6273] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 194.604901][ T6273] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 194.623313][ T6273] BTRFS info (device loop2): using free space tree [ 194.686763][ T6317] loop3: detected capacity change from 0 to 1024 [ 194.715666][ T6317] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 194.785098][ T4375] EXT4-fs (loop3): unmounting filesystem. [ 194.839017][ T6273] BTRFS info (device loop2): enabling ssd optimizations [ 194.887640][ T5497] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 195.313304][ T6357] loop3: detected capacity change from 0 to 512 [ 195.403154][ T6357] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 195.449706][ T6357] ext4 filesystem being mounted at /root/syzkaller-testdir1801098365/syzkaller.Zb5A37/174/bus supports timestamps until 2038 (0x7fffffff) [ 195.581682][ T6361] loop2: detected capacity change from 0 to 4096 [ 195.593958][ T6357] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 195.604399][ T6361] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 195.645299][ T6357] EXT4-fs: Cannot change journaled quota options when quota turned on [ 195.665103][ T6361] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 195.715934][ T6365] loop1: detected capacity change from 0 to 512 [ 195.739108][ T4375] EXT4-fs (loop3): unmounting filesystem. [ 195.754316][ T6365] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 195.802443][ T6349] loop0: detected capacity change from 0 to 32768 [ 195.831322][ T6365] Quota error (device loop1): v2_read_file_info: Free block number too big (58381 >= 6). [ 195.892655][ T6365] EXT4-fs warning (device loop1): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 195.925968][ T6368] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 195.947872][ T6349] XFS (loop0): Mounting V5 Filesystem [ 196.011448][ T6368] Quota error (device loop1): v2_read_file_info: Free block number too big (58381 >= 6). [ 196.041944][ T6368] EXT4-fs warning (device loop1): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 196.092491][ T6349] XFS (loop0): Ending clean mount [ 196.174236][ T5431] EXT4-fs (loop1): unmounting filesystem. [ 196.250626][ T6353] loop4: detected capacity change from 0 to 32768 [ 196.294805][ T5527] XFS (loop0): Unmounting Filesystem [ 196.367846][ T6353] XFS (loop4): Mounting V5 Filesystem [ 196.457844][ T6403] loop2: detected capacity change from 0 to 2048 [ 196.466082][ T6353] XFS (loop4): Ending clean mount [ 196.487933][ T6403] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.587585][ T6403] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 196.615022][ T5268] XFS (loop4): Unmounting Filesystem [ 196.626601][ T6403] ext4 filesystem being mounted at /root/syzkaller-testdir2700735243/syzkaller.4GMyV8/63/file0 supports timestamps until 2038 (0x7fffffff) [ 196.641844][ T6374] loop3: detected capacity change from 0 to 32768 [ 196.650868][ T6374] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (6374) [ 196.667271][ T6403] EXT4-fs error (device loop2): ext4_find_dest_de:2112: inode #2: block 16: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 196.699245][ T6374] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 196.709642][ T6374] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 196.721313][ T6374] BTRFS info (device loop3): using free space tree [ 196.725804][ T5497] EXT4-fs (loop2): unmounting filesystem. [ 196.830988][ T6426] loop2: detected capacity change from 0 to 512 [ 196.841408][ T6374] BTRFS info (device loop3): enabling ssd optimizations [ 196.864701][ T6426] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 196.873871][ T6426] ext4 filesystem being mounted at /root/syzkaller-testdir2700735243/syzkaller.4GMyV8/65/bus supports timestamps until 2038 (0x7fffffff) [ 196.897992][ T4375] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 196.935456][ T6426] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 196.947237][ T6426] EXT4-fs: Cannot change journaled quota options when quota turned on [ 197.062884][ T5497] EXT4-fs (loop2): unmounting filesystem. [ 197.116176][ T6432] loop2: detected capacity change from 0 to 256 [ 197.137159][ T6432] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 197.231673][ T6437] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 197.334618][ T6443] loop2: detected capacity change from 0 to 1024 [ 197.375123][ T6443] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000e01c, mo2=0002] [ 197.384912][ T6443] System zones: 0-1, 3-12 [ 197.400292][ T6443] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 197.662521][ T6439] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 198.504505][ T5497] EXT4-fs (loop2): unmounting filesystem. [ 198.643315][ T26] audit: type=1800 audit(1717797132.995:290): pid=6460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1960 res=0 errno=0 [ 198.833562][ T6467] loop2: detected capacity change from 0 to 256 [ 198.848334][ T6465] loop3: detected capacity change from 0 to 1024 [ 198.908555][ T6465] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 198.986129][ T6484] loop4: detected capacity change from 0 to 1024 [ 199.025179][ T4375] EXT4-fs (loop3): unmounting filesystem. [ 199.056784][ T6484] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000e01c, mo2=0002] [ 199.082704][ T6484] System zones: 0-1, 3-12 [ 199.103936][ T6484] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 199.120161][ T6490] loop3: detected capacity change from 0 to 64 [ 199.379186][ T6496] loop3: detected capacity change from 0 to 512 [ 199.410646][ T6496] EXT4-fs (loop3): orphan cleanup on readonly fs [ 199.584596][ T6496] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor.3: bg 0: block 248: padding at end of block bitmap is not set [ 199.610104][ T6496] Quota error (device loop3): write_blk: dquota write failed [ 199.618656][ T6496] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 199.671399][ T6496] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz-executor.3: Failed to acquire dquot type 1 [ 200.091236][ T6496] EXT4-fs (loop3): 1 truncate cleaned up [ 200.172519][ T6496] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 200.211336][ T6496] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 200.242648][ T5268] EXT4-fs (loop4): unmounting filesystem. [ 200.380026][ T6496] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 200.409991][ T6505] Quota error (device loop3): do_check_range: Getting block 1536 out of range 0-5 [ 200.785711][ T6518] loop0: detected capacity change from 0 to 1024 [ 200.846832][ T6518] hfsplus: extend alloc file! (8192,65536,366) [ 200.864398][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 200.875049][ T4375] EXT4-fs (loop3): unmounting filesystem. [ 201.034507][ T6518] kvm: vcpu 0: requested 394 ns lapic timer period limited to 200000 ns [ 201.087741][ T6518] kvm: pic: non byte write [ 201.254133][ T6532] overlayfs: failed to clone upperpath [ 201.337070][ T6502] loop2: detected capacity change from 0 to 32768 [ 201.364068][ T6502] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (6502) [ 201.412744][ T6502] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 201.431198][ T6502] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 201.444259][ T6502] BTRFS info (device loop2): using free space tree [ 201.556972][ T6507] loop1: detected capacity change from 0 to 32768 [ 201.672407][ T6502] BTRFS info (device loop2): enabling ssd optimizations [ 201.689950][ T6507] XFS (loop1): Mounting V5 Filesystem [ 201.764849][ T5497] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 202.694939][ T6507] XFS (loop1): Ending clean mount [ 202.737983][ T6507] XFS (loop1): Quotacheck needed: Please wait. [ 202.855062][ T6507] XFS (loop1): Quotacheck: Done. [ 203.307992][ T6592] device veth0_vlan left promiscuous mode [ 203.314862][ T6592] device veth0_vlan entered promiscuous mode [ 203.355729][ T5481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 203.392777][ T5481] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 203.414277][ T5481] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 203.511897][ T5431] XFS (loop1): Unmounting Filesystem [ 203.688307][ T6573] loop3: detected capacity change from 0 to 40427 [ 203.727702][ T6573] F2FS-fs (loop3): Found nat_bits in checkpoint [ 203.790780][ T6603] loop2: detected capacity change from 0 to 4096 [ 203.842275][ T6603] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 203.896043][ T6573] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 203.910368][ T6603] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 203.940509][ T6603] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 203.940577][ T6620] syz-executor.4 (pid 6620) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 203.960923][ T6603] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 203.984008][ T6619] loop0: detected capacity change from 0 to 1024 [ 204.001670][ T6603] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 204.021009][ T6619] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 204.029474][ T4375] syz-executor.3: attempt to access beyond end of device [ 204.029474][ T4375] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 204.036847][ T6620] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 204.098270][ T6603] ntfs: volume version 3.1. [ 204.100644][ T6619] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 204.127125][ T6603] syz-executor.2[6603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.129371][ T6603] syz-executor.2[6603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.289095][ T5527] EXT4-fs (loop0): unmounting filesystem. [ 204.529490][ T6637] device veth0_vlan left promiscuous mode [ 204.535977][ T6637] device veth0_vlan entered promiscuous mode [ 204.623822][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.644120][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.680838][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.837026][ T6654] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 204.882929][ T6656] loop3: detected capacity change from 0 to 256 [ 205.001411][ T6656] FAT-fs (loop3): Directory bread(block 64) failed [ 205.017209][ T6652] loop2: detected capacity change from 0 to 4096 [ 205.031286][ T6656] FAT-fs (loop3): Directory bread(block 65) failed [ 205.042957][ T6652] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 205.057010][ T6656] FAT-fs (loop3): Directory bread(block 66) failed [ 205.082240][ T6660] loop1: detected capacity change from 0 to 1024 [ 205.105846][ T6656] FAT-fs (loop3): Directory bread(block 67) failed [ 205.120760][ T6660] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 205.133158][ T6656] FAT-fs (loop3): Directory bread(block 68) failed [ 205.145864][ T6652] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 205.160310][ T6656] FAT-fs (loop3): Directory bread(block 69) failed [ 205.175854][ T6652] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 205.182783][ T6660] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 205.199002][ T6652] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 205.220534][ T6656] FAT-fs (loop3): Directory bread(block 70) failed [ 205.240918][ T6652] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 205.264713][ T6656] FAT-fs (loop3): Directory bread(block 71) failed [ 205.299162][ T6656] FAT-fs (loop3): Directory bread(block 72) failed [ 205.306966][ T6656] FAT-fs (loop3): Directory bread(block 73) failed [ 205.350874][ T6652] ntfs: volume version 3.1. [ 205.458033][ T5431] EXT4-fs (loop1): unmounting filesystem. [ 205.515766][ T6652] syz-executor.2[6652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.515883][ T6652] syz-executor.2[6652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.720231][ T6681] device veth0_vlan left promiscuous mode [ 206.798801][ T6681] device veth0_vlan entered promiscuous mode [ 206.799583][ T6648] loop0: detected capacity change from 0 to 40427 [ 206.848250][ T6689] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 206.878114][ T6689] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 206.913231][ T6648] F2FS-fs (loop0): Found nat_bits in checkpoint [ 207.073715][ T6648] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 207.398331][ T5527] syz-executor.0: attempt to access beyond end of device [ 207.398331][ T5527] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 207.699195][ T3905] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 208.229209][ T3905] usb 3-1: Using ep0 maxpacket: 32 [ 208.370388][ T3905] usb 3-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 208.393432][ T3905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.434293][ T6720] loop1: detected capacity change from 0 to 256 [ 208.446604][ T3905] usb 3-1: config 0 descriptor?? [ 208.484640][ T6718] device veth0_vlan left promiscuous mode [ 208.492956][ T6718] device veth0_vlan entered promiscuous mode [ 208.515027][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 208.515978][ T3905] rndis_host: probe of 3-1:0.0 failed with error -22 [ 208.533063][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 208.542904][ T6720] FAT-fs (loop1): Directory bread(block 64) failed [ 208.550521][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 208.557896][ T6720] FAT-fs (loop1): Directory bread(block 65) failed [ 208.617639][ T6720] FAT-fs (loop1): Directory bread(block 66) failed [ 208.626470][ T6720] FAT-fs (loop1): Directory bread(block 67) failed [ 208.652380][ T6690] loop3: detected capacity change from 0 to 40427 [ 208.658025][ T6720] FAT-fs (loop1): Directory bread(block 68) failed [ 208.671347][ T6720] FAT-fs (loop1): Directory bread(block 69) failed [ 208.682146][ T6720] FAT-fs (loop1): Directory bread(block 70) failed [ 208.691345][ T6690] F2FS-fs (loop3): invalid crc value [ 208.693640][ T6720] FAT-fs (loop1): Directory bread(block 71) failed [ 208.715888][ T3905] usb 3-1: USB disconnect, device number 5 [ 208.724041][ T6720] FAT-fs (loop1): Directory bread(block 72) failed [ 208.734748][ T6690] F2FS-fs (loop3): Found nat_bits in checkpoint [ 208.744827][ T6720] FAT-fs (loop1): Directory bread(block 73) failed [ 208.790204][ T6727] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 208.815459][ T6727] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 208.861889][ T6690] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 208.887517][ T6690] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 208.970603][ T4375] syz-executor.3: attempt to access beyond end of device [ 208.970603][ T4375] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 209.495119][ T6749] loop2: detected capacity change from 0 to 2048 [ 209.743588][ T6749] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.472504][ T6756] loop1: detected capacity change from 0 to 256 [ 210.540146][ T6756] FAT-fs (loop1): Directory bread(block 64) failed [ 210.546826][ T6756] FAT-fs (loop1): Directory bread(block 65) failed [ 210.567856][ T6756] FAT-fs (loop1): Directory bread(block 66) failed [ 210.604495][ T6756] FAT-fs (loop1): Directory bread(block 67) failed [ 210.626586][ T6756] FAT-fs (loop1): Directory bread(block 68) failed [ 210.667262][ T6756] FAT-fs (loop1): Directory bread(block 69) failed [ 210.688347][ T6756] FAT-fs (loop1): Directory bread(block 70) failed [ 210.712143][ T6739] loop0: detected capacity change from 0 to 40427 [ 210.718986][ T6756] FAT-fs (loop1): Directory bread(block 71) failed [ 210.728721][ T6756] FAT-fs (loop1): Directory bread(block 72) failed [ 210.741119][ T6756] FAT-fs (loop1): Directory bread(block 73) failed [ 210.803588][ T6739] F2FS-fs (loop0): Found nat_bits in checkpoint [ 210.847447][ T6768] loop3: detected capacity change from 0 to 512 [ 210.942171][ T6739] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 211.079304][ T5527] syz-executor.0: attempt to access beyond end of device [ 211.079304][ T5527] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 211.185365][ T6768] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 211.484213][ T6790] loop3: detected capacity change from 0 to 1024 [ 211.735646][ T6790] hfsplus: xattr searching failed [ 211.936575][ T6790] hfsplus: xattr searching failed [ 212.337634][ T6790] hfsplus: xattr searching failed [ 212.489545][ T6801] loop1: detected capacity change from 0 to 256 [ 212.546248][ T3855] hfsplus: b-tree write err: -5, ino 3 [ 212.557626][ T6801] FAT-fs (loop1): Directory bread(block 64) failed [ 212.581668][ T6801] FAT-fs (loop1): Directory bread(block 65) failed [ 212.598461][ T6801] FAT-fs (loop1): Directory bread(block 66) failed [ 212.609579][ T6806] device vlan2 entered promiscuous mode [ 212.615539][ T6806] device veth1_to_batadv entered promiscuous mode [ 212.628988][ T6801] FAT-fs (loop1): Directory bread(block 67) failed [ 212.635754][ T6801] FAT-fs (loop1): Directory bread(block 68) failed [ 212.662160][ T6801] FAT-fs (loop1): Directory bread(block 69) failed [ 212.671332][ T6806] team0: Port device vlan2 added [ 212.676531][ T6801] FAT-fs (loop1): Directory bread(block 70) failed [ 212.690221][ T6801] FAT-fs (loop1): Directory bread(block 71) failed [ 212.716048][ T6801] FAT-fs (loop1): Directory bread(block 72) failed [ 212.716088][ T6762] loop2: detected capacity change from 0 to 40427 [ 212.728964][ T6801] FAT-fs (loop1): Directory bread(block 73) failed [ 212.784858][ T6762] F2FS-fs (loop2): invalid crc value [ 212.811525][ T6813] loop0: detected capacity change from 0 to 64 [ 212.830433][ T6762] F2FS-fs (loop2): Found nat_bits in checkpoint [ 212.846935][ T6813] hfs: unable to parse mount options [ 212.967856][ T6762] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 212.990196][ T6762] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 213.103896][ T5497] syz-executor.2: attempt to access beyond end of device [ 213.103896][ T5497] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 213.233193][ T6834] loop3: detected capacity change from 0 to 1024 [ 213.356042][ T6834] hfsplus: xattr searching failed [ 213.697446][ T6837] hfsplus: xattr searching failed [ 214.210811][ T46] hfsplus: b-tree write err: -5, ino 3 [ 214.321155][ T6839] device vlan2 entered promiscuous mode [ 214.326946][ T6839] device veth1_to_batadv entered promiscuous mode [ 214.434887][ T6839] team0: Port device vlan2 added [ 214.497026][ T6842] loop3: detected capacity change from 0 to 4096 [ 214.519695][ T6842] ntfs: (device loop3): parse_ntfs_boot_sector(): Mft record size (65536) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 214.554973][ T6842] ntfs: (device loop3): ntfs_fill_super(): Unsupported NTFS filesystem. [ 214.667667][ T6813] loop0: detected capacity change from 0 to 32768 [ 214.764551][ T6813] XFS (loop0): Mounting V5 Filesystem [ 214.868475][ T6813] XFS (loop0): Ending clean mount [ 214.943666][ T6872] loop3: detected capacity change from 0 to 1024 [ 214.967661][ T5527] XFS (loop0): Unmounting Filesystem [ 215.034730][ T6872] hfsplus: xattr searching failed [ 215.062058][ T6875] hfsplus: xattr searching failed [ 215.073469][ T6872] hfsplus: xattr searching failed [ 215.076220][ T6876] loop2: detected capacity change from 0 to 64 [ 215.184313][ T3855] hfsplus: b-tree write err: -5, ino 3 [ 215.474074][ T6896] loop1: detected capacity change from 0 to 64 [ 215.498762][ T6896] hfs: unable to parse mount options [ 215.621310][ T3634] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 215.989215][ T3634] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 216.006275][ T3634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.043423][ T6908] loop2: detected capacity change from 0 to 64 [ 216.046418][ T3634] usb 4-1: config 0 descriptor?? [ 216.191300][ T6896] loop1: detected capacity change from 0 to 32768 [ 216.245241][ T6896] XFS (loop1): Mounting V5 Filesystem [ 216.442257][ T6896] XFS (loop1): Ending clean mount [ 216.530953][ T3634] ath6kl: Failed to submit usb control message: -71 [ 216.537599][ T3634] ath6kl: unable to send the bmi data to the device: -71 [ 216.545386][ T5431] XFS (loop1): Unmounting Filesystem [ 216.564149][ T3634] ath6kl: Unable to send get target info: -71 [ 216.585989][ T6926] loop2: detected capacity change from 0 to 1764 [ 216.670988][ T3634] ath6kl: Failed to init ath6kl core: -71 [ 216.741135][ T3634] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 216.770821][ T3634] usb 4-1: USB disconnect, device number 3 [ 218.731867][ T6969] loop1: detected capacity change from 0 to 64 [ 218.947933][ T6974] loop2: detected capacity change from 0 to 1764 [ 218.984705][ T6979] device vlan2 entered promiscuous mode [ 218.994837][ T6979] device veth1_to_batadv entered promiscuous mode [ 219.013317][ T6979] team0: Port device vlan2 added [ 219.306730][ T6949] loop3: detected capacity change from 0 to 32768 [ 219.345096][ T6949] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (6949) [ 219.406837][ T6949] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 219.429484][ T6949] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 219.449327][ T6949] BTRFS info (device loop3): use no compression [ 219.470246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 219.478666][ T6949] BTRFS info (device loop3): force zlib compression, level 3 [ 219.486314][ T6949] BTRFS info (device loop3): use no compression [ 219.504243][ T6949] BTRFS info (device loop3): turning on flush-on-commit [ 219.511460][ T6949] BTRFS info (device loop3): enabling auto defrag [ 219.518324][ T6949] BTRFS info (device loop3): using free space tree [ 219.779534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 219.788876][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 219.797159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 219.805464][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 219.813750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 219.855362][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 219.863854][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 220.341164][ T3580] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 220.351904][ T3580] Bluetooth: hci4: Injecting HCI hardware error event [ 220.373184][ T3580] Bluetooth: hci4: hardware error 0x00 [ 220.472720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 220.481157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 220.730919][ T7007] loop1: detected capacity change from 0 to 2048 [ 220.777396][ T7007] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 220.842378][ T7007] ext4 filesystem being mounted at /root/syzkaller-testdir1879403625/syzkaller.r3D1ZL/105/bus supports timestamps until 2038 (0x7fffffff) [ 220.869986][ T6949] BTRFS error (device loop3): open_ctree failed [ 220.908012][ T6982] loop0: detected capacity change from 0 to 32768 [ 220.934425][ T7007] EXT4-fs error (device loop1): ext4_find_dest_de:2112: inode #2: block 16: comm syz-executor.1: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 220.968507][ T6982] XFS (loop0): Mounting V5 Filesystem [ 221.116119][ T6982] XFS (loop0): Ending clean mount [ 221.131919][ T5431] EXT4-fs (loop1): unmounting filesystem. [ 221.210673][ T7032] loop3: detected capacity change from 0 to 64 [ 221.241966][ T7032] hfs: unable to parse mount options [ 221.385186][ T5527] XFS (loop0): Unmounting Filesystem [ 221.419383][ T7041] loop1: detected capacity change from 0 to 128 [ 221.443324][ T7041] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 221.504362][ T7041] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.824383][ T7047] loop0: detected capacity change from 0 to 64 [ 221.973100][ T7053] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 222.066194][ T7055] loop0: detected capacity change from 0 to 2048 [ 222.104822][ T7055] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 222.123838][ T7055] ext4 filesystem being mounted at /root/syzkaller-testdir2125116784/syzkaller.fKMrRB/75/bus supports timestamps until 2038 (0x7fffffff) [ 222.159933][ T7055] EXT4-fs error (device loop0): ext4_find_dest_de:2112: inode #2: block 16: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 222.412237][ T5527] EXT4-fs (loop0): unmounting filesystem. [ 222.515507][ T7069] loop0: detected capacity change from 0 to 128 [ 222.554909][ T7069] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 222.588312][ T7032] loop3: detected capacity change from 0 to 32768 [ 222.607471][ T7069] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.668998][ T3580] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 222.676220][ T7032] XFS (loop3): Mounting V5 Filesystem [ 222.891437][ T7032] XFS (loop3): Ending clean mount [ 222.939157][ T7094] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 223.009215][ T4375] XFS (loop3): Unmounting Filesystem [ 223.117693][ T7063] loop2: detected capacity change from 0 to 32768 [ 223.195734][ T7063] XFS (loop2): Mounting V5 Filesystem [ 223.269297][ T26] audit: type=1804 audit(1717797157.615:291): pid=7107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1879403625/syzkaller.r3D1ZL/118/bus" dev="sda1" ino=1960 res=1 errno=0 [ 223.365198][ T7116] loop0: detected capacity change from 0 to 24 [ 223.388246][ T7063] XFS (loop2): Ending clean mount [ 223.567289][ T5497] XFS (loop2): Unmounting Filesystem [ 223.702495][ T7128] loop1: detected capacity change from 0 to 64 [ 223.703292][ T7131] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 223.744189][ T7128] hfs: unable to parse mount options [ 223.834948][ T26] audit: type=1804 audit(1717797158.185:292): pid=7137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="bus" dev="sda1" ino=1964 res=1 errno=0 [ 224.157359][ T26] audit: type=1800 audit(1717797158.505:293): pid=7152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file2" dev="sda1" ino=1956 res=0 errno=0 [ 224.299076][ T3615] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 224.478008][ T7162] loop3: detected capacity change from 0 to 128 [ 224.508389][ T7162] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 224.550850][ T7162] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.669497][ T7128] loop1: detected capacity change from 0 to 32768 [ 224.679116][ T3615] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 224.688189][ T3615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.722568][ T3615] usb 3-1: config 0 descriptor?? [ 224.742403][ T26] audit: type=1804 audit(1717797159.095:294): pid=7168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1801098365/syzkaller.Zb5A37/218/bus" dev="sda1" ino=1960 res=1 errno=0 [ 224.792587][ T7128] XFS (loop1): Mounting V5 Filesystem [ 224.916197][ T7128] XFS (loop1): Ending clean mount [ 224.997241][ T5431] XFS (loop1): Unmounting Filesystem [ 225.020363][ T7177] loop3: detected capacity change from 0 to 1024 [ 225.112213][ T3855] hfsplus: b-tree write err: -5, ino 4 [ 225.145145][ T7158] loop0: detected capacity change from 0 to 32768 [ 225.201714][ T7158] XFS (loop0): Mounting V5 Filesystem [ 225.227082][ T3615] ath6kl: Failed to submit usb control message: -71 [ 225.234107][ T3615] ath6kl: unable to send the bmi data to the device: -71 [ 225.241522][ T3615] ath6kl: Unable to send get target info: -71 [ 225.275180][ T7158] XFS (loop0): Ending clean mount [ 225.281313][ T3615] ath6kl: Failed to init ath6kl core: -71 [ 225.346092][ T3615] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 225.381919][ T3615] usb 3-1: USB disconnect, device number 6 [ 225.409324][ T5527] XFS (loop0): Unmounting Filesystem [ 225.460265][ T26] audit: type=1800 audit(1717797159.815:295): pid=7194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file2" dev="sda1" ino=1953 res=0 errno=0 [ 225.846344][ T26] audit: type=1804 audit(1717797160.195:296): pid=7206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2700735243/syzkaller.4GMyV8/114/bus" dev="sda1" ino=1951 res=1 errno=0 [ 226.003193][ T7217] loop0: detected capacity change from 0 to 1024 [ 226.058252][ T7219] loop1: detected capacity change from 0 to 2048 [ 226.080315][ T26] audit: type=1800 audit(1717797160.435:297): pid=7223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file2" dev="sda1" ino=1955 res=0 errno=0 [ 226.094141][ T7219] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 226.126387][ T3632] hfsplus: b-tree write err: -5, ino 4 [ 226.161276][ T7219] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.199747][ T7227] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 227.278916][ T3634] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 227.544633][ T7216] loop2: detected capacity change from 0 to 32768 [ 227.600155][ T7216] XFS (loop2): Mounting V5 Filesystem [ 227.639129][ T3634] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 227.648248][ T3634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.681978][ T3634] usb 4-1: config 0 descriptor?? [ 227.695221][ T7216] XFS (loop2): Ending clean mount [ 227.781300][ T5497] XFS (loop2): Unmounting Filesystem [ 227.871224][ T26] audit: type=1800 audit(1717797162.225:298): pid=7266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file2" dev="sda1" ino=1960 res=0 errno=0 [ 228.130792][ T3634] ath6kl: Failed to submit usb control message: -71 [ 228.137487][ T3634] ath6kl: unable to send the bmi data to the device: -71 [ 228.158912][ T3634] ath6kl: Unable to send get target info: -71 [ 228.180060][ T3634] ath6kl: Failed to init ath6kl core: -71 [ 228.213078][ T7272] binder: BINDER_SET_CONTEXT_MGR already set [ 228.242199][ T7272] binder: 7270:7272 ioctl 4018620d 20000040 returned -16 [ 228.250183][ T3634] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 228.274260][ T7273] loop2: detected capacity change from 0 to 1024 [ 228.290242][ T3634] usb 4-1: USB disconnect, device number 4 [ 228.393695][ T3855] hfsplus: b-tree write err: -5, ino 4 [ 228.402349][ T7276] loop0: detected capacity change from 0 to 128 [ 228.449512][ T7276] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 228.530577][ T7248] loop1: detected capacity change from 0 to 40427 [ 228.570516][ T7248] F2FS-fs (loop1): Found nat_bits in checkpoint [ 228.717483][ T7248] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 228.832011][ T5431] syz-executor.1: attempt to access beyond end of device [ 228.832011][ T5431] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 228.978527][ T7304] loop2: detected capacity change from 0 to 1024 [ 229.057014][ T3855] hfsplus: b-tree write err: -5, ino 4 [ 229.068923][ T3580] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 229.077711][ T3580] Bluetooth: hci3: Injecting HCI hardware error event [ 229.088379][ T3580] Bluetooth: hci3: hardware error 0x00 [ 229.461323][ T7319] binder: transaction release 16 bad object at offset -12884901888, size 72 [ 229.795713][ T7296] loop0: detected capacity change from 0 to 32768 [ 229.864219][ T7296] XFS (loop0): Mounting V5 Filesystem [ 229.934356][ T7296] XFS (loop0): Ending clean mount [ 230.051602][ T7347] loop1: detected capacity change from 0 to 128 [ 230.058129][ T5527] XFS (loop0): Unmounting Filesystem [ 230.091469][ T7347] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 230.332307][ T7349] loop3: detected capacity change from 0 to 2048 [ 230.366657][ T7349] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 230.391418][ T7349] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.749987][ T5479] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 231.309264][ T5479] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 231.344217][ T5479] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 231.397611][ T5479] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 231.447171][ T3580] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 231.629105][ T5479] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 231.642805][ T5479] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.674439][ T5479] usb 2-1: Product: syz [ 231.687059][ T5479] usb 2-1: Manufacturer: syz [ 231.704258][ T5479] usb 2-1: SerialNumber: syz [ 232.042614][ T5479] usb 2-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 232.062700][ T5479] usb 2-1: found format II with max.bitrate = 0, frame size=0 [ 232.085334][ T5479] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 232.182768][ T5479] usb 2-1: USB disconnect, device number 2 [ 233.274579][ T7394] loop2: detected capacity change from 0 to 128 [ 233.317692][ T7394] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 255.623827][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.630186][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.530095][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 262.541579][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 262.551227][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 262.574500][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 262.582185][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 262.591081][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 262.624033][ T48] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 262.635821][ T48] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 262.644996][ T48] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 262.654179][ T48] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 262.669410][ T48] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 262.676804][ T48] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 263.855636][ T3580] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 263.866182][ T3580] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 263.875704][ T3580] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 263.896193][ T3580] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 263.905670][ T3580] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 263.913526][ T3580] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 264.012582][ T3583] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 264.031933][ T3583] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 264.045348][ T3583] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 264.054260][ T3583] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 264.062029][ T3583] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 264.074604][ T3583] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 264.659217][ T48] Bluetooth: hci5: command tx timeout [ 264.749850][ T48] Bluetooth: hci6: command tx timeout [ 265.118257][ T3580] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 265.128599][ T3580] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 265.138638][ T3580] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 265.146953][ T3580] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 265.156222][ T3580] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 265.163548][ T3580] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 266.019045][ T48] Bluetooth: hci7: command tx timeout [ 266.099074][ T48] Bluetooth: hci8: command tx timeout [ 266.739041][ T48] Bluetooth: hci5: command tx timeout [ 266.820273][ T48] Bluetooth: hci6: command tx timeout [ 267.219101][ T48] Bluetooth: hci9: command tx timeout [ 268.098972][ T48] Bluetooth: hci7: command tx timeout [ 268.179172][ T48] Bluetooth: hci8: command tx timeout [ 268.819280][ T48] Bluetooth: hci5: command tx timeout [ 268.899508][ T48] Bluetooth: hci6: command tx timeout [ 269.298890][ T48] Bluetooth: hci9: command tx timeout [ 270.178909][ T48] Bluetooth: hci7: command tx timeout [ 270.258974][ T48] Bluetooth: hci8: command tx timeout [ 270.898922][ T48] Bluetooth: hci5: command tx timeout [ 270.985583][ T3583] Bluetooth: hci6: command tx timeout [ 271.379144][ T3580] Bluetooth: hci9: command tx timeout [ 272.258983][ T3580] Bluetooth: hci7: command tx timeout [ 272.339030][ T3580] Bluetooth: hci8: command tx timeout [ 273.059461][ T3580] Bluetooth: hci0: command 0x0406 tx timeout [ 273.458956][ T3580] Bluetooth: hci9: command tx timeout [ 278.179037][ T3580] Bluetooth: hci1: command 0x0406 tx timeout [ 283.298902][ T3580] Bluetooth: hci2: command 0x0406 tx timeout [ 317.061450][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.067776][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.118184][ T3578] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 328.128419][ T3578] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 328.139877][ T3578] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 328.149609][ T3578] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 328.158323][ T3578] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 328.165757][ T3578] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 328.184168][ T3578] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 328.198172][ T3578] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 328.207882][ T3578] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 328.217642][ T3578] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 328.225384][ T3578] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 328.240173][ T3578] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 328.830054][ T3578] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 328.843075][ T3578] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 328.851281][ T3578] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 328.869033][ T3578] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 328.877325][ T3578] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 328.884737][ T3578] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 328.994166][ T3583] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 329.009402][ T3583] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 329.017615][ T3583] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 329.026412][ T3583] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 329.036218][ T3583] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 329.043917][ T3583] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 330.109132][ T3578] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 330.126258][ T3578] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 330.135193][ T3578] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 330.143132][ T3578] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 330.152328][ T3578] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 330.159805][ T3578] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 330.269232][ T3583] Bluetooth: hci10: command tx timeout [ 330.349049][ T3583] Bluetooth: hci11: command tx timeout [ 330.979022][ T3583] Bluetooth: hci12: command tx timeout [ 331.059118][ T3583] Bluetooth: hci13: command tx timeout [ 332.188993][ T3583] Bluetooth: hci14: command tx timeout [ 332.339004][ T3583] Bluetooth: hci10: command tx timeout [ 332.418958][ T3583] Bluetooth: hci11: command tx timeout [ 333.072757][ T3583] Bluetooth: hci12: command tx timeout [ 333.139130][ T3583] Bluetooth: hci13: command tx timeout [ 334.259104][ T3583] Bluetooth: hci14: command tx timeout [ 334.419144][ T3583] Bluetooth: hci10: command tx timeout [ 334.499024][ T3583] Bluetooth: hci11: command tx timeout [ 335.138919][ T3583] Bluetooth: hci12: command tx timeout [ 335.219057][ T3583] Bluetooth: hci13: command tx timeout [ 336.339019][ T3583] Bluetooth: hci14: command tx timeout [ 336.502973][ T3583] Bluetooth: hci10: command tx timeout [ 336.578972][ T3578] Bluetooth: hci11: command tx timeout [ 337.219035][ T3578] Bluetooth: hci12: command tx timeout [ 337.299082][ T3578] Bluetooth: hci13: command tx timeout [ 338.418995][ T3578] Bluetooth: hci14: command tx timeout [ 378.501737][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.508087][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.699074][ T7455] Bluetooth: hci5: command 0x0406 tx timeout [ 385.705209][ T7455] Bluetooth: hci6: command 0x0406 tx timeout [ 387.459452][ T28] INFO: task kworker/1:8:3668 blocked for more than 143 seconds. [ 387.467245][ T28] Not tainted 6.1.92-syzkaller #0 [ 387.483723][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 387.492484][ T28] task:kworker/1:8 state:D stack:25152 pid:3668 ppid:2 flags:0x00004000 2024/06/07 21:55:21 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 387.507474][ T28] Workqueue: ipv6_addrconf addrconf_dad_work [ 387.533822][ T28] Call Trace: [ 387.537146][ T28] [ 387.553552][ T28] __schedule+0x142d/0x4550 [ 387.558144][ T28] ? __sched_text_start+0x8/0x8 [ 387.571771][ T28] ? print_irqtrace_events+0x210/0x210 [ 387.577288][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 387.587073][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 387.592363][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 387.597592][ T28] schedule+0xbf/0x180 [ 387.607574][ T28] schedule_preempt_disabled+0xf/0x20 [ 387.613086][ T28] __mutex_lock+0x6b9/0xd80 [ 387.617625][ T28] ? __mutex_lock+0x53c/0xd80 [ 387.630439][ T28] ? addrconf_dad_work+0xcc/0x16b0 [ 387.635609][ T28] ? mutex_lock_nested+0x10/0x10 [ 387.643971][ T28] addrconf_dad_work+0xcc/0x16b0 [ 387.651161][ T28] ? read_lock_is_recursive+0x10/0x10 [ 387.656577][ T28] ? ipv6_get_saddr_eval+0xe90/0xe90 [ 387.665271][ T28] ? print_irqtrace_events+0x210/0x210 [ 387.688835][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 387.694798][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 387.708856][ T28] ? process_one_work+0x7a9/0x11d0 [ 387.714015][ T28] process_one_work+0x8a9/0x11d0 [ 387.728881][ T28] ? worker_detach_from_pool+0x260/0x260 [ 387.734569][ T28] ? _raw_spin_lock_irqsave+0x120/0x120 [ 387.758805][ T28] ? kthread_data+0x4e/0xc0 [ 387.763375][ T28] ? wq_worker_running+0x97/0x190 [ 387.768435][ T28] worker_thread+0xa47/0x1200 [ 387.792293][ T28] kthread+0x28d/0x320 [ 387.796415][ T28] ? worker_clr_flags+0x190/0x190 [ 387.808844][ T28] ? kthread_blkcg+0xd0/0xd0 [ 387.818614][ T28] ret_from_fork+0x1f/0x30 [ 387.834118][ T28] [ 387.839340][ T28] INFO: task kworker/0:14:3904 blocked for more than 143 seconds. [ 387.854318][ T28] Not tainted 6.1.92-syzkaller #0 [ 387.859959][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 387.868637][ T28] task:kworker/0:14 state:D stack:23544 pid:3904 ppid:2 flags:0x00004000 [ 387.884194][ T28] Workqueue: events_power_efficient reg_check_chans_work [ 387.891361][