last executing test programs: 2m27.945003052s ago: executing program 1 (id=81): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001000)=ANY=[@ANYBLOB="600000001000390425bd7000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="81b8000000000000400012800b000100697036746e6c000030000280080008002d0000001400030020010000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x24008006}, 0x4040844) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @local}, 0x14) 2m27.890981584s ago: executing program 1 (id=84): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2) 2m27.607617913s ago: executing program 1 (id=89): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0x31, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0xfffffffffffffe9a, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f13df33c9f7b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m27.441118678s ago: executing program 1 (id=92): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x8, &(0x7f00000001c0)={[{@sysvgroups}, {@nomblk_io_submit}]}, 0x4, 0x50a, &(0x7f00000018c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f00000004c0)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 2m27.181039527s ago: executing program 1 (id=95): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x10, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x7, 0x2}, {0x9, 0xa}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c010}, 0x44010) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2m26.4573713s ago: executing program 1 (id=102): r0 = socket(0x2, 0xa, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="001ebd9c3d1e", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x0, 0x28, 0x0, 0x0, 0x0, 0x73, 0x0, @local, @broadcast}, "052a549248000000fe58b3a300b7b024c79727c9"}}}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'ip6tnl0\x00', {0xfffffffa}, 0x8000}) 2m26.353977843s ago: executing program 32 (id=102): r0 = socket(0x2, 0xa, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="001ebd9c3d1e", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x0, 0x28, 0x0, 0x0, 0x0, 0x73, 0x0, @local, @broadcast}, "052a549248000000fe58b3a300b7b024c79727c9"}}}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'ip6tnl0\x00', {0xfffffffa}, 0x8000}) 37.047422846s ago: executing program 0 (id=893): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x7, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38) 36.473855715s ago: executing program 0 (id=895): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000012c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000000000000000000202000000040000000000000803000000000000000000000d000000000000305f5f08"], 0x0, 0x46}, 0x28) 35.875834754s ago: executing program 0 (id=907): sched_setscheduler(0x0, 0x5, &(0x7f0000000700)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) 35.851793365s ago: executing program 4 (id=899): connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@random="47f4fd025768", @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @local, @empty, @multicast1}}}}, 0x0) 35.777065127s ago: executing program 4 (id=900): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0xc0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)=ANY=[@ANYBLOB="500000000102010100000000020000000aff00c001e28b0617ff01000000000000000000000000000114000400000000000000000000110000000000010c0002800500"/80], 0x50}}, 0x0) 35.776810437s ago: executing program 0 (id=901): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x51e, &(0x7f0000001080)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000043c0)={0x29, 0x3, 0x0, {0x1, 0x8, 0x0, 'group_id'}}, 0x29) 35.717946069s ago: executing program 0 (id=902): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000140)={[{@grpquota}, {@delalloc}, {@usrjquota}, {@nomblk_io_submit}, {@nodioread_nolock}, {}, {@grpquota}, {@inlinecrypt}]}, 0xfe, 0x5e2, &(0x7f0000000dc0)="$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") r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r3, r1, r2) 33.929047706s ago: executing program 4 (id=904): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 33.144270922s ago: executing program 4 (id=910): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x16}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="28000000000000002900003447fc1ad700669e5fa1bc7742850005000000000202"], 0xfffffffffffffe73}, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x0, 0x2, 0x80000001, 0x0, 0xfffefffc}}) close_range(r0, 0xffffffffffffffff, 0x0) 32.927974389s ago: executing program 0 (id=911): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x40009) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sendfile(r2, r1, 0x0, 0x3ffff) 32.499200633s ago: executing program 33 (id=911): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x40009) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sendfile(r2, r1, 0x0, 0x3ffff) 32.480102973s ago: executing program 4 (id=917): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0xc0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)=ANY=[@ANYBLOB="500000000102010100000000020000000aff00c001e28b0617ff01000000000000000000000000000114000400000000000000000000110000000000010c0002800500"/80], 0x50}}, 0x0) 30.509077327s ago: executing program 2 (id=939): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 29.058008314s ago: executing program 2 (id=944): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {0xfff1, 0xffe0}, {0x9, 0xa}, {0xe, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x55}, 0x4008014) 28.841039221s ago: executing program 2 (id=945): r0 = syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x34b}, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000000)) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x6, 0x6, 0x1000002, 0x87, 0xffffffff, 0x3fe}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0xe7f, 0xe876, 0x3, &(0x7f0000000040)={[0xfffffffffffffffc]}, 0x8) 28.682834476s ago: executing program 3 (id=949): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x18) 28.57219645s ago: executing program 3 (id=959): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt(r0, 0x0, 0x1, &(0x7f0000000200)='.', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x8b) epoll_create1(0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000001c00), 0x12) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x2c, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(r7, 0x1, 0x1b, &(0x7f0000000040), 0x4) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r8, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r8, 0x4008af60, &(0x7f0000000300)={@my=0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x44040200) 28.089823435s ago: executing program 4 (id=951): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 27.963552679s ago: executing program 2 (id=952): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x16}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="28000000000000002900003447fc1ad700669e5fa1bc7742850005000000000202"], 0xfffffffffffffe73}, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3) close_range(r0, 0xffffffffffffffff, 0x0) 27.515499473s ago: executing program 3 (id=953): socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2c, &(0x7f00000000c0), 0x4) 27.488344554s ago: executing program 2 (id=954): open$dir(&(0x7f00000001c0)='./bus\x00', 0x301940, 0x114) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1}]}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xec, &(0x7f0000000000)=""/236}, 0x80) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140)=ANY=[], 0xfe37, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000180)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@noinit_itable}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xc, 0x5d8, &(0x7f0000000c00)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 27.393105577s ago: executing program 3 (id=955): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 26.638960652s ago: executing program 2 (id=956): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt(r0, 0x0, 0x1, &(0x7f0000000200)='.', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x8b) epoll_create1(0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000001c00), 0x12) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x2c, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(r7, 0x1, 0x1b, &(0x7f0000000040), 0x4) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r8, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r8, 0x4008af60, &(0x7f0000000300)={@my=0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x44040200) 26.569578963s ago: executing program 3 (id=957): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x87) 26.120976848s ago: executing program 3 (id=958): unshare(0x62040200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f00000010c0)={[{@norecovery}, {@auto_da_alloc}, {@nobarrier}], [{@obj_type={'obj_type', 0x3d, 'syz'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@appraise}, {@context={'context', 0x3d, 'unconfined_u'}}, {@dont_hash}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@fowner_lt}, {@euid_lt}, {@appraise}]}, 0xee, 0x474, &(0x7f0000000600)="$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") openat(0xffffffffffffffff, 0x0, 0x42, 0x91) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x200009, &(0x7f0000000000)={[{@data_writeback}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@errors_remount}, {@data_writeback}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@nombcache}, {@delalloc}, {@nombcache}]}, 0xee, 0x46e, &(0x7f0000000c40)="$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") getpid() r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x40) listen(r1, 0x7eda) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x88}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.060149569s ago: executing program 34 (id=951): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 11.566082457s ago: executing program 35 (id=956): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt(r0, 0x0, 0x1, &(0x7f0000000200)='.', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x8b) epoll_create1(0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000001c00), 0x12) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x2c, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(r7, 0x1, 0x1b, &(0x7f0000000040), 0x4) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r8, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r8, 0x4008af60, &(0x7f0000000300)={@my=0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x44040200) 10.540220281s ago: executing program 36 (id=958): unshare(0x62040200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f00000010c0)={[{@norecovery}, {@auto_da_alloc}, {@nobarrier}], [{@obj_type={'obj_type', 0x3d, 'syz'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@appraise}, {@context={'context', 0x3d, 'unconfined_u'}}, {@dont_hash}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@fowner_lt}, {@euid_lt}, {@appraise}]}, 0xee, 0x474, &(0x7f0000000600)="$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") openat(0xffffffffffffffff, 0x0, 0x42, 0x91) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x200009, &(0x7f0000000000)={[{@data_writeback}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@errors_remount}, {@data_writeback}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@nombcache}, {@delalloc}, {@nombcache}]}, 0xee, 0x46e, &(0x7f0000000c40)="$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") getpid() r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x40) listen(r1, 0x7eda) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x88}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.561938199s ago: executing program 5 (id=976): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt(r0, 0x0, 0x1, &(0x7f0000000200)='.', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x8b) epoll_create1(0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000001c00), 0x12) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x2c, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(r7, 0x1, 0x1b, &(0x7f0000000040), 0x4) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r8, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r8, 0x4008af60, &(0x7f0000000300)={@my=0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x44040200) 6.069799155s ago: executing program 6 (id=978): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)=ANY=[@ANYBLOB="500000000102010100000000020000000aff00c001e28b0617ff01000000000000000000000000000114000400000000000000000000110000000000010c0002800500"/80], 0x50}}, 0x0) 4.864894523s ago: executing program 6 (id=979): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f00000006c0)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x2}, [{0x2, 0x7, 0xee01}, {0x2, 0x3}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x4}], {}, {0x20, 0x7}}, 0x4c, 0x3) r0 = socket(0x10, 0x803, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc55d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4004000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140)=ANY=[], 0xfe37, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 3.501818047s ago: executing program 6 (id=980): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/udp\x00') pread64(r3, &(0x7f0000000180)=""/121, 0xfdcd, 0x101) 3.501622907s ago: executing program 5 (id=981): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000400)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}, {@bh}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) read(r0, &(0x7f0000000180)=""/148, 0x94) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x3) 2.908659377s ago: executing program 5 (id=982): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r1, 0x20, 0x1e, 0xc}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0xaaa359b0211086cd}, 0x4044000) socket$inet6(0xa, 0x3, 0x902) r2 = getpid() openat(0xffffffffffffff9c, 0x0, 0x101042, 0x40) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r7 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r6) r8 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r7) keyctl$invalidate(0x15, r8) keyctl$KEYCTL_MOVE(0x1e, r7, r7, r6, 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x4, 0x1, 0xf84a, r2}) 1.970848767s ago: executing program 5 (id=983): fsopen(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0x31, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0xfffffffffffffe9a, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000b00)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000000, 0xcc0, 0x0, &(0x7f0000000200)="63eced8e46dc3f13df33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.966159957s ago: executing program 6 (id=990): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f00000006c0)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x2}, [{0x2, 0x7, 0xee01}, {0x2, 0x3}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x4}], {}, {0x20, 0x7}}, 0x4c, 0x3) r0 = socket(0x10, 0x803, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc55d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x3c, 0x14, 0x9535393fea6295b5, 0x40, 0x25dfdbff, {0xa, 0x3f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x268}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[], 0xfe37, 0x0) 1.729854264s ago: executing program 5 (id=984): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) io_setup(0x3, &(0x7f00000001c0)) r2 = eventfd2(0x0, 0x0) read$FUSE(r2, &(0x7f0000001540)={0x2020}, 0x2020) 585.016341ms ago: executing program 5 (id=985): socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) futex(&(0x7f0000000800)=0x2, 0x80, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) io_uring_setup(0x5f4f, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2d, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 417.846297ms ago: executing program 6 (id=986): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0xf03, &(0x7f0000000080)={0x0, 0x3d58, 0x2, 0x3, 0x7}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x6516, 0x6d93, 0x8, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 0s ago: executing program 6 (id=987): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d0000000000000000"], 0x1, 0x192, &(0x7f0000009480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read(r0, &(0x7f0000000200)=""/187, 0xfffffe3d) kernel console output (not intermixed with test programs): 85.738977][ T5320] FAT-fs (loop0): Directory bread(block 66) failed [ 85.742433][ T5320] FAT-fs (loop0): Directory bread(block 67) failed [ 85.743752][ T5320] FAT-fs (loop0): Directory bread(block 68) failed [ 85.745042][ T5320] FAT-fs (loop0): Directory bread(block 69) failed [ 85.746368][ T5320] FAT-fs (loop0): Directory bread(block 70) failed [ 85.746404][ T5323] fuse: Bad value for 'fd' [ 85.747675][ T5320] FAT-fs (loop0): Directory bread(block 71) failed [ 85.749792][ T5320] FAT-fs (loop0): Directory bread(block 72) failed [ 85.751763][ T5320] FAT-fs (loop0): Directory bread(block 73) failed [ 86.053290][ T5338] loop0: detected capacity change from 0 to 256 [ 86.085308][ T5338] FAT-fs (loop0): Directory bread(block 64) failed [ 86.089147][ T5338] FAT-fs (loop0): Directory bread(block 65) failed [ 86.092124][ T5338] FAT-fs (loop0): Directory bread(block 66) failed [ 86.093496][ T5338] FAT-fs (loop0): Directory bread(block 67) failed [ 86.094767][ T5338] FAT-fs (loop0): Directory bread(block 68) failed [ 86.095956][ T5338] FAT-fs (loop0): Directory bread(block 69) failed [ 86.097255][ T5338] FAT-fs (loop0): Directory bread(block 70) failed [ 86.098467][ T5338] FAT-fs (loop0): Directory bread(block 71) failed [ 86.099796][ T5338] FAT-fs (loop0): Directory bread(block 72) failed [ 86.104948][ T5338] FAT-fs (loop0): Directory bread(block 73) failed [ 86.426539][ T5365] fuse: Bad value for 'fd' [ 86.434727][ T5365] overlayfs: overlapping lowerdir path [ 86.440864][ T5314] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 86.442013][ T5314] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 86.446702][ T5314] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 86.448188][ T5314] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 86.450574][ T5314] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 86.455959][ T5314] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 86.459631][ T5314] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 86.462000][ T5314] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 86.466424][ T5314] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 86.470310][ T5314] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 86.472600][ T5314] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 86.477352][ T5314] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 86.479916][ T5314] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 86.482474][ T5314] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 86.486011][ T5314] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 86.498256][ T5333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.514388][ T5333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.575915][ T5368] tipc: Started in network mode [ 86.576882][ T5368] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 86.579352][ T5368] tipc: Enabled bearer , priority 10 [ 86.583679][ T5369] netlink: 68 bytes leftover after parsing attributes in process `syz.5.254'. [ 86.689688][ T5372] loop5: detected capacity change from 0 to 256 [ 86.820679][ T5376] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 86.905362][ T5381] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 86.917168][ T5381] EXT4-fs (loop3): 1 truncate cleaned up [ 86.918267][ T5381] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 87.005385][ T5374] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 87.006870][ T5374] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 87.020946][ T5374] F2FS-fs (loop0): invalid crc value [ 87.691912][ T4335] Bluetooth: hci1: command 0x0c1a tx timeout [ 87.786424][ T5374] F2FS-fs (loop0): Found nat_bits in checkpoint [ 87.837854][ T5374] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 87.844798][ T5374] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 88.011486][ T7] tipc: Node number set to 4269801488 [ 88.049463][ T5399] set_capacity_and_notify: 3 callbacks suppressed [ 88.049473][ T5399] loop0: detected capacity change from 0 to 512 [ 88.075186][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 88.175362][ T5407] loop3: detected capacity change from 0 to 256 [ 88.178137][ T5409] loop4: detected capacity change from 0 to 16 [ 88.207501][ T5407] exfat: Deprecated parameter 'utf8' [ 88.208599][ T5407] exfat: Deprecated parameter 'namecase' [ 88.209671][ T5407] exfat: Unknown parameter 'seclabel' [ 88.221765][ T5409] erofs: (device loop4): mounted with root inode @ nid 36. [ 88.244231][ T5411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.267'. [ 88.276461][ T5409] syz.4.266: attempt to access beyond end of device [ 88.276461][ T5409] loop4: rw=524288, sector=24, nr_sectors = 112 limit=16 [ 88.279991][ T5409] syz.4.266: attempt to access beyond end of device [ 88.279991][ T5409] loop4: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 88.316823][ T5409] syz.4.266: attempt to access beyond end of device [ 88.316823][ T5409] loop4: rw=0, sector=16, nr_sectors = 8 limit=16 [ 88.480350][ T4330] Bluetooth: hci2: command 0x0c1a tx timeout [ 88.480377][ T4342] Bluetooth: hci0: command 0x0c1a tx timeout [ 88.480396][ T4334] Bluetooth: hci3: command 0x0c1a tx timeout [ 88.480415][ T4335] Bluetooth: hci4: command 0x0c1a tx timeout [ 88.755717][ T4748] EXT4-fs (loop5): unmounting filesystem. [ 89.078012][ T5405] loop0: detected capacity change from 0 to 131072 [ 89.088201][ T5405] F2FS-fs (loop0): Wrong SIT boundary, start(1536) end(2560) blocks(1536) [ 89.090102][ T5405] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 89.092260][ T5405] F2FS-fs (loop0): invalid crc value [ 89.107910][ T5405] F2FS-fs (loop0): Found nat_bits in checkpoint [ 89.124922][ T5405] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 89.126560][ T5405] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 89.355596][ T5433] loop4: detected capacity change from 0 to 40427 [ 89.378571][ T5433] F2FS-fs (loop4): invalid crc value [ 89.397387][ T5433] F2FS-fs (loop4): Found nat_bits in checkpoint [ 89.448194][ T5433] F2FS-fs (loop4): Start checkpoint disabled! [ 89.460484][ T5433] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 89.635496][ T141] kworker/u4:3: attempt to access beyond end of device [ 89.635496][ T141] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 89.743360][ T5462] loop4: detected capacity change from 0 to 256 [ 89.757132][ T5460] loop5: detected capacity change from 0 to 256 [ 89.760310][ T4330] Bluetooth: hci1: command 0x0406 tx timeout [ 89.775537][ T5462] FAT-fs (loop4): Directory bread(block 64) failed [ 89.778436][ T5462] FAT-fs (loop4): Directory bread(block 65) failed [ 89.779857][ T5462] FAT-fs (loop4): Directory bread(block 66) failed [ 89.781733][ T5462] FAT-fs (loop4): Directory bread(block 67) failed [ 89.782989][ T5462] FAT-fs (loop4): Directory bread(block 68) failed [ 89.784253][ T5462] FAT-fs (loop4): Directory bread(block 69) failed [ 89.785739][ T5462] FAT-fs (loop4): Directory bread(block 70) failed [ 89.787036][ T5462] FAT-fs (loop4): Directory bread(block 71) failed [ 89.788337][ T5462] FAT-fs (loop4): Directory bread(block 72) failed [ 89.789593][ T5462] FAT-fs (loop4): Directory bread(block 73) failed [ 89.841211][ T5460] FAT-fs (loop5): Directory bread(block 64) failed [ 89.842631][ T5460] FAT-fs (loop5): Directory bread(block 65) failed [ 89.845075][ T5460] FAT-fs (loop5): Directory bread(block 66) failed [ 89.847548][ T5460] FAT-fs (loop5): Directory bread(block 67) failed [ 89.854382][ T5460] FAT-fs (loop5): Directory bread(block 68) failed [ 89.856868][ T5460] FAT-fs (loop5): Directory bread(block 69) failed [ 89.859291][ T5460] FAT-fs (loop5): Directory bread(block 70) failed [ 89.861835][ T5460] FAT-fs (loop5): Directory bread(block 71) failed [ 89.864277][ T5460] FAT-fs (loop5): Directory bread(block 72) failed [ 89.867811][ T5460] FAT-fs (loop5): Directory bread(block 73) failed [ 89.979143][ T5468] loop5: detected capacity change from 0 to 256 [ 90.014433][ T5468] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 90.016495][ T5468] FAT-fs (loop5): Filesystem has been set read-only [ 90.024051][ T5468] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 198) [ 90.265599][ T5481] loop5: detected capacity change from 0 to 40427 [ 90.287902][ T5481] F2FS-fs (loop5): invalid crc value [ 90.317970][ T5481] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 90.359479][ T5481] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 90.378907][ T5481] syz.5.287: attempt to access beyond end of device [ 90.378907][ T5481] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 90.494091][ T5424] kworker/u4:15: attempt to access beyond end of device [ 90.494091][ T5424] loop4: rw=1, sector=1192, nr_sectors = 576 limit=256 [ 90.497300][ T5424] kworker/u4:15: attempt to access beyond end of device [ 90.497300][ T5424] loop4: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 90.517215][ T5424] kworker/u4:15: attempt to access beyond end of device [ 90.517215][ T5424] loop4: rw=1, sector=1960, nr_sectors = 2184 limit=256 [ 90.561001][ T4330] Bluetooth: hci4: command 0x0406 tx timeout [ 90.561027][ T4334] Bluetooth: hci2: command 0x0406 tx timeout [ 90.561044][ T4342] Bluetooth: hci3: command 0x0406 tx timeout [ 90.564380][ T4335] Bluetooth: hci0: command 0x0406 tx timeout [ 90.860395][ T5424] kworker/u4:15: attempt to access beyond end of device [ 90.860395][ T5424] loop4: rw=1, sector=4144, nr_sectors = 4152 limit=256 [ 90.875789][ T5494] binder: 5492:5494 tried to acquire reference to desc 0, got 1 instead [ 90.878831][ T5494] binder: 5492:5494 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 90.882203][ T5424] kworker/u4:15: attempt to access beyond end of device [ 90.882203][ T5424] loop4: rw=1, sector=8296, nr_sectors = 15808 limit=256 [ 90.883787][ T5494] binder: 5494 RLIMIT_NICE not set [ 90.885909][ T5494] binder: 5494 RLIMIT_NICE not set [ 90.887801][ T5494] binder: 5494 RLIMIT_NICE not set [ 90.888974][ T5494] binder_alloc: 5492: binder_alloc_buf, no vma [ 90.891173][ T5494] binder: cannot allocate buffer: vma cleared, target dead or dying [ 90.891230][ T5494] binder: 5492:5494 transaction reply to 5492:5494 failed 11/29189/-3, size 0-0 line 3230 [ 90.900514][ T5494] binder: send failed reply for transaction 10 to 5492:5494 [ 90.971423][ T14] binder: undelivered TRANSACTION_COMPLETE [ 90.972574][ T14] binder: undelivered TRANSACTION_ERROR: 29189 [ 90.973780][ T14] binder: undelivered TRANSACTION_ERROR: 29190 [ 91.055039][ T5502] device macsec0 entered promiscuous mode [ 91.058848][ T5502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.292'. [ 91.096349][ T5502] device veth1_macvtap left promiscuous mode [ 92.364857][ T5531] xt_hashlimit: size too large, truncated to 1048576 [ 92.942789][ T5589] loop5: detected capacity change from 0 to 512 [ 92.990672][ T5589] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 93.007835][ T5589] EXT4-fs (loop5): 1 orphan inode deleted [ 93.009114][ T5589] EXT4-fs (loop5): 1 truncate cleaned up [ 93.012136][ T5589] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 93.022888][ T5589] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 255: comm syz.5.306: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 93.033187][ T5589] EXT4-fs (loop5): Remounting filesystem read-only [ 93.063685][ T5547] F2FS-fs (loop4): invalid crc value [ 93.109763][ T4748] EXT4-fs (loop5): unmounting filesystem. [ 93.123703][ T5547] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 93.218823][ T5547] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 93.229438][ T5547] F2FS-fs (loop4): Start checkpoint disabled! [ 93.238167][ T5547] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 94.744948][ T5672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.747330][ T5672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.000562][ T5678] xt_hashlimit: size too large, truncated to 1048576 [ 95.599800][ T5691] set_capacity_and_notify: 1 callbacks suppressed [ 95.599809][ T5691] loop5: detected capacity change from 0 to 512 [ 95.627194][ T5685] loop4: detected capacity change from 0 to 40427 [ 95.640031][ T5691] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 95.683360][ T4748] EXT4-fs (loop5): unmounting filesystem. [ 95.710068][ T5685] F2FS-fs (loop4): invalid crc value [ 95.730990][ T5685] F2FS-fs (loop4): Found nat_bits in checkpoint [ 95.739839][ T5697] loop5: detected capacity change from 0 to 2048 [ 95.794072][ T5697] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 95.799392][ T5697] fs-verity: sha512 using implementation "sha512-ce" [ 95.845021][ T4748] EXT4-fs (loop5): unmounting filesystem. [ 96.179616][ T5713] loop4: detected capacity change from 0 to 1024 [ 96.194212][ T5714] loop5: detected capacity change from 0 to 256 [ 96.195268][ T5713] EXT4-fs: Ignoring removed nobh option [ 96.231638][ T5714] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001293d, chksum : 0x6d516103, utbl_chksum : 0xe619d30d) [ 96.250839][ T5713] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 96.259616][ T5713] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 96.465439][ T5721] tipc: Started in network mode [ 96.466481][ T5721] tipc: Node identity 4, cluster identity 4711 [ 96.467588][ T5721] tipc: Node number set to 4 [ 96.891157][ T5723] loop3: detected capacity change from 0 to 40427 [ 96.901362][ T5723] F2FS-fs (loop3): Corrupted extension count (327717 + 1 > 64) [ 96.903286][ T5723] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 96.911447][ T5723] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 96.932297][ T5723] F2FS-fs (loop3): invalid crc value [ 96.937346][ T5723] F2FS-fs (loop3): Found nat_bits in checkpoint [ 96.955311][ T5723] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 96.956796][ T5723] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 97.037170][ T5732] device gretap0 entered promiscuous mode [ 97.038761][ T5732] device vlan2 entered promiscuous mode [ 97.044738][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 97.111099][ T5735] loop4: detected capacity change from 0 to 512 [ 97.157300][ T5735] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 97.206412][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 97.288506][ T5743] loop4: detected capacity change from 0 to 512 [ 97.339656][ T5743] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.343: invalid indirect mapped block 4294967295 (level 1) [ 97.353837][ T5743] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.343: invalid indirect mapped block 4294967295 (level 1) [ 97.402852][ T5743] EXT4-fs (loop4): 2 truncates cleaned up [ 97.404033][ T5743] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 97.427374][ T5743] EXT4-fs error (device loop4): empty_inline_dir:1895: inode #12: block 7: comm syz.4.343: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 97.449020][ T5743] EXT4-fs warning (device loop4): empty_inline_dir:1902: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 97.508970][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 97.563373][ T5755] tipc: Failed to remove unknown binding: 66,0,0/0:2068618626/2068618628 [ 97.565172][ T5755] tipc: Failed to remove unknown binding: 66,0,0/0:2068618626/2068618627 [ 98.336642][ T5765] loop5: detected capacity change from 0 to 131072 [ 98.645987][ T5765] F2FS-fs (loop5): Invalid log sectorsize (67108873) [ 98.652874][ T5765] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 98.664919][ T5765] F2FS-fs (loop5): invalid crc value [ 98.684005][ T5765] F2FS-fs (loop5): Found nat_bits in checkpoint [ 98.694857][ T5765] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 98.696476][ T5765] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 98.795570][ T5785] loop4: detected capacity change from 0 to 16 [ 98.808793][ T5785] erofs: (device loop4): mounted with root inode @ nid 36. [ 98.818992][ T27] audit: type=1326 audit(98.800:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5784 comm="syz.4.359" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80377aa8 code=0x7ffc0000 [ 98.825092][ T27] audit: type=1326 audit(98.810:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5784 comm="syz.4.359" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80377aa8 code=0x7ffc0000 [ 98.833139][ T27] audit: type=1326 audit(98.810:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5784 comm="syz.4.359" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80377aa8 code=0x7ffc0000 [ 98.839758][ T27] audit: type=1326 audit(98.810:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5784 comm="syz.4.359" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80377aa8 code=0x7ffc0000 [ 98.847544][ T27] audit: type=1326 audit(98.820:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5784 comm="syz.4.359" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=11 compat=0 ip=0xffff80377aa8 code=0x7ffc0000 [ 98.852827][ T27] audit: type=1326 audit(98.820:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5784 comm="syz.4.359" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80377aa8 code=0x7ffc0000 [ 98.857565][ T27] audit: type=1326 audit(98.820:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5784 comm="syz.4.359" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80377aa8 code=0x7ffc0000 [ 98.862640][ T27] audit: type=1326 audit(98.820:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5784 comm="syz.4.359" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff80377aa8 code=0x7ffc0000 [ 98.867001][ T27] audit: type=1326 audit(98.820:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5784 comm="syz.4.359" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff80377aa8 code=0x7ffc0000 [ 98.937965][ T5789] exfat: Deprecated parameter 'namecase' [ 98.941466][ T5789] exfat: Deprecated parameter 'namecase' [ 98.949292][ T5789] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 99.141232][ T5795] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 99.513566][ T4331] EXT4-fs (loop0): unmounting filesystem. [ 99.596656][ T5806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 99.890721][ T5787] F2FS-fs (loop4): Unrecognized mount option "ÿ" or missing value [ 101.316436][ T5791] set_capacity_and_notify: 3 callbacks suppressed [ 101.316446][ T5791] loop5: detected capacity change from 0 to 131072 [ 101.331819][ T5791] F2FS-fs (loop5): Test dummy encryption mode enabled [ 101.344131][ T5791] F2FS-fs (loop5): invalid crc value [ 101.443533][ T5791] F2FS-fs (loop5): Found nat_bits in checkpoint [ 101.469698][ T5791] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 101.600620][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 101.616224][ T5831] device syzkaller0 entered promiscuous mode [ 101.838987][ T5841] netlink: 8 bytes leftover after parsing attributes in process `syz.5.379'. [ 101.855937][ T5841] netlink: 8 bytes leftover after parsing attributes in process `syz.5.379'. [ 101.863511][ T5843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.866035][ T5843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.408584][ T5862] loop5: detected capacity change from 0 to 256 [ 102.421546][ T5862] exfat: Deprecated parameter 'utf8' [ 102.426300][ T5862] exfat: Deprecated parameter 'namecase' [ 102.429429][ T5852] loop4: detected capacity change from 0 to 40427 [ 102.431853][ T5862] exfat: Deprecated parameter 'namecase' [ 102.437386][ T5862] exfat: Deprecated parameter 'utf8' [ 102.443716][ T5852] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 102.454909][ T5852] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 102.465872][ T5852] F2FS-fs (loop4): invalid crc value [ 102.466997][ T5862] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 102.483193][ T5852] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 102.507290][ T5852] F2FS-fs (loop4): Start checkpoint disabled! [ 102.510112][ T5852] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 102.518323][ T5852] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 102.688026][ T5879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.696240][ T5879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.712704][ T5880] loop3: detected capacity change from 0 to 512 [ 103.802534][ T5901] loop3: detected capacity change from 0 to 1024 [ 103.806780][ T5901] EXT4-fs: Ignoring removed bh option [ 103.808122][ T5901] EXT4-fs: test_dummy_encryption requires encrypt feature [ 103.945060][ T5911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.409'. [ 103.952733][ T5913] loop5: detected capacity change from 0 to 512 [ 103.970667][ T5913] EXT4-fs: Ignoring removed i_version option [ 103.974241][ T5913] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.045820][ T5913] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 104.089585][ T4748] EXT4-fs (loop5): unmounting filesystem. [ 104.134445][ T5928] loop5: detected capacity change from 0 to 512 [ 104.178947][ T5928] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 104.180818][ T5928] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 104.182330][ T5928] System zones: 0-1, 15-15, 18-18, 34-34 [ 104.183995][ T5928] EXT4-fs (loop5): orphan cleanup on readonly fs [ 104.186405][ T5928] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 104.189298][ T5928] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 104.199674][ T5928] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 104.201802][ T5928] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.415: bg 0: block 40: padding at end of block bitmap is not set [ 104.206319][ T5928] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 104.208310][ T5928] EXT4-fs (loop5): 1 truncate cleaned up [ 104.209403][ T5928] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 104.234290][ T5928] EXT4-fs error (device loop5): ext4_encrypted_get_link:46: inode #16: comm syz.5.415: bad symlink. [ 104.254473][ T4748] EXT4-fs (loop5): unmounting filesystem. [ 104.308673][ T5932] loop5: detected capacity change from 0 to 512 [ 104.321955][ T5932] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 104.335737][ T5932] EXT4-fs (loop5): 1 truncate cleaned up [ 104.336814][ T5932] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 104.521898][ T5938] overlayfs: failed to clone upperpath [ 105.948546][ T5947] loop4: detected capacity change from 0 to 256 [ 105.965672][ T5947] exfat: Deprecated parameter 'utf8' [ 105.974302][ T5947] exfat: Deprecated parameter 'namecase' [ 105.975644][ T5947] exfat: Deprecated parameter 'namecase' [ 105.976657][ T5947] exfat: Deprecated parameter 'utf8' [ 105.993155][ T5947] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 106.126654][ T4748] EXT4-fs (loop5): unmounting filesystem. [ 106.185825][ T5953] device lo entered promiscuous mode [ 106.188496][ T5953] device batadv_slave_0 entered promiscuous mode [ 106.192994][ T5953] device syz_tun entered promiscuous mode [ 106.220357][ T5950] device syz_tun left promiscuous mode [ 106.223986][ T5950] device batadv_slave_0 left promiscuous mode [ 106.225334][ T5950] device lo left promiscuous mode [ 106.316182][ T5958] loop5: detected capacity change from 0 to 256 [ 106.342888][ T5958] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 106.574519][ T5967] netlink: 72 bytes leftover after parsing attributes in process `syz.3.429'. [ 106.720033][ T5974] loop3: detected capacity change from 0 to 1024 [ 106.739046][ T5974] EXT4-fs: Ignoring removed bh option [ 106.773293][ T5925] loop0: detected capacity change from 0 to 131072 [ 106.777448][ T5974] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 106.793049][ T5974] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: block 3: comm syz.3.432: lblock 3 mapped to illegal pblock 3 (length 3) [ 106.826628][ T5925] F2FS-fs (loop0): Test dummy encryption mode enabled [ 106.865770][ T5925] F2FS-fs (loop0): invalid crc value [ 106.867914][ T5974] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 106.882261][ T5974] EXT4-fs (loop3): This should not happen!! Data will be lost [ 106.882261][ T5974] [ 106.899847][ T5980] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.432: lblock 3 mapped to illegal pblock 3 (length 1) [ 106.901524][ T5982] loop5: detected capacity change from 0 to 16 [ 106.904667][ T5980] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.432: lblock 3 mapped to illegal pblock 3 (length 1) [ 106.905004][ T5925] F2FS-fs (loop0): Found nat_bits in checkpoint [ 106.908453][ T5980] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.432: lblock 3 mapped to illegal pblock 3 (length 1) [ 106.916369][ T5984] EXT4-fs error (device loop3): ext4_ext_remove_space:2945: inode #15: comm syz.3.432: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 106.923944][ T5984] EXT4-fs error (device loop3) in ext4_setattr:5695: Corrupt filesystem [ 106.946012][ T5982] erofs: (device loop5): mounted with root inode @ nid 36. [ 106.968000][ T5925] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 106.976886][ T5982] bio_check_eod: 2 callbacks suppressed [ 106.976896][ T5982] syz.5.433: attempt to access beyond end of device [ 106.976896][ T5982] loop5: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 107.013763][ T5982] syz.5.433: attempt to access beyond end of device [ 107.013763][ T5982] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 107.018089][ T5982] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 107.021464][ T5982] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 107.023780][ T5982] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 107.025755][ T5982] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 107.029378][ T5982] syz.5.433: attempt to access beyond end of device [ 107.029378][ T5982] loop5: rw=0, sector=16, nr_sectors = 8 limit=16 [ 107.031633][ T5982] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 107.033988][ T5982] syz.5.433: attempt to access beyond end of device [ 107.033988][ T5982] loop5: rw=0, sector=16, nr_sectors = 8 limit=16 [ 107.036367][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 107.073650][ T5982] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 107.078702][ T5982] syz.5.433: attempt to access beyond end of device [ 107.078702][ T5982] loop5: rw=0, sector=16, nr_sectors = 8 limit=16 [ 107.084510][ T5982] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 107.086536][ T5982] syz.5.433: attempt to access beyond end of device [ 107.086536][ T5982] loop5: rw=0, sector=16, nr_sectors = 8 limit=16 [ 107.091193][ T5982] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 107.095370][ T5992] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 107.096869][ T5991] loop4: detected capacity change from 0 to 256 [ 107.098922][ T5992] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 107.116033][ T5994] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 107.123839][ T5994] loop3: detected capacity change from 0 to 512 [ 107.132450][ T5991] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 107.142459][ T5994] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 107.160087][ T5994] EXT4-fs (loop3): 1 truncate cleaned up [ 107.183527][ T5994] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 107.265087][ T5990] mmap: syz.2.435 (5990) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 107.657429][ T5998] loop0: detected capacity change from 0 to 40427 [ 107.668526][ T5998] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff [ 107.672564][ T5998] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 107.690797][ T5998] F2FS-fs (loop0): invalid crc value [ 107.721168][ T5998] F2FS-fs (loop0): Found nat_bits in checkpoint [ 107.746188][ T5998] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 107.835456][ T6013] loop0: detected capacity change from 0 to 256 [ 109.097180][ T6001] overlayfs: statfs failed on './file0' [ 109.135678][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 109.219819][ T6023] loop3: detected capacity change from 0 to 256 [ 109.235691][ T6023] exfat: Deprecated parameter 'utf8' [ 109.236882][ T6023] exfat: Deprecated parameter 'namecase' [ 109.237964][ T6023] exfat: Deprecated parameter 'namecase' [ 109.272800][ T6023] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d) [ 109.278581][ T6029] device vlan2 entered promiscuous mode [ 109.279655][ T6029] device bridge0 entered promiscuous mode [ 109.282134][ T6029] bridge0: port 3(vlan2) entered blocking state [ 109.283306][ T6029] bridge0: port 3(vlan2) entered disabled state [ 109.410873][ T6033] loop4: detected capacity change from 0 to 256 [ 109.445132][ T6033] FAT-fs (loop4): Directory bread(block 64) failed [ 109.446441][ T6033] FAT-fs (loop4): Directory bread(block 65) failed [ 109.447713][ T6033] FAT-fs (loop4): Directory bread(block 66) failed [ 109.448832][ T6033] FAT-fs (loop4): Directory bread(block 67) failed [ 109.453023][ T6033] FAT-fs (loop4): Directory bread(block 68) failed [ 109.454217][ T6033] FAT-fs (loop4): Directory bread(block 69) failed [ 109.455342][ T6033] FAT-fs (loop4): Directory bread(block 70) failed [ 109.456483][ T6033] FAT-fs (loop4): Directory bread(block 71) failed [ 109.457719][ T6033] FAT-fs (loop4): Directory bread(block 72) failed [ 109.458952][ T6033] FAT-fs (loop4): Directory bread(block 73) failed [ 109.553204][ T6039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.556063][ T6039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.694943][ T6043] binder: 6042:6043 tried to acquire reference to desc 0, got 1 instead [ 109.696752][ T6043] binder: 6042:6043 ioctl c0306201 0 returned -14 [ 109.698008][ T6043] binder: 6042:6043 ioctl c0306201 0 returned -14 [ 109.700888][ T6043] binder: 6042:6043 BC_FREE_BUFFER u0000000020ffd000 matched unreturned or currently freeing buffer [ 109.702892][ T1518] binder: undelivered TRANSACTION_COMPLETE [ 109.730230][ T1518] binder: undelivered transaction 16, process died. [ 109.792396][ T6031] loop3: detected capacity change from 0 to 131072 [ 109.800040][ T6031] F2FS-fs (loop3): inline encryption not supported [ 109.802663][ T6031] F2FS-fs (loop3): Test dummy encryption mode enabled [ 109.811903][ T6031] F2FS-fs (loop3): invalid crc value [ 109.860592][ T6031] F2FS-fs (loop3): Found nat_bits in checkpoint [ 109.884993][ T6055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.888069][ T6055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.894502][ T6031] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 110.487636][ T6072] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.4.464: corrupted xattr block 95 [ 110.496103][ T6072] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.464: bg 0: block 7: invalid block bitmap [ 110.506049][ T6072] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 110.507813][ T6072] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2918: inode #11: comm syz.4.464: corrupted xattr block 95 [ 110.533188][ T6072] EXT4-fs warning (device loop4): ext4_evict_inode:301: xattr delete (err -117) [ 110.535006][ T6072] EXT4-fs (loop4): 1 orphan inode deleted [ 110.536068][ T6072] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 110.551663][ T6067] FAT-fs (loop3): Directory bread(block 64) failed [ 110.552926][ T6067] FAT-fs (loop3): Directory bread(block 65) failed [ 110.554151][ T6067] FAT-fs (loop3): Directory bread(block 66) failed [ 110.558666][ T6067] FAT-fs (loop3): Directory bread(block 67) failed [ 110.559963][ T6067] FAT-fs (loop3): Directory bread(block 68) failed [ 110.606122][ T6072] EXT4-fs error (device loop4): ext4_read_inline_dir:1611: inode #12: block 7: comm syz.4.464: path /116/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=14, rec_len=3, size=80 fake=0 [ 110.613782][ T6067] FAT-fs (loop3): Directory bread(block 69) failed [ 110.615180][ T6067] FAT-fs (loop3): Directory bread(block 70) failed [ 110.616319][ T6067] FAT-fs (loop3): Directory bread(block 71) failed [ 110.617548][ T6067] FAT-fs (loop3): Directory bread(block 72) failed [ 110.618689][ T6067] FAT-fs (loop3): Directory bread(block 73) failed [ 110.622907][ T6072] EXT4-fs error (device loop4): ext4_read_inline_dir:1611: inode #12: block 7: comm syz.4.464: path /116/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=14, rec_len=3, size=80 fake=0 [ 110.677071][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 110.970023][ T6087] FAT-fs (loop3): Directory bread(block 64) failed [ 110.971554][ T6087] FAT-fs (loop3): Directory bread(block 65) failed [ 110.972745][ T6087] FAT-fs (loop3): Directory bread(block 66) failed [ 110.990227][ T6087] FAT-fs (loop3): Directory bread(block 67) failed [ 110.991425][ T6087] FAT-fs (loop3): Directory bread(block 68) failed [ 110.992532][ T6087] FAT-fs (loop3): Directory bread(block 69) failed [ 110.993730][ T6087] FAT-fs (loop3): Directory bread(block 70) failed [ 110.994927][ T6087] FAT-fs (loop3): Directory bread(block 71) failed [ 110.996159][ T6087] FAT-fs (loop3): Directory bread(block 72) failed [ 110.997338][ T6087] FAT-fs (loop3): Directory bread(block 73) failed [ 111.123815][ T6062] F2FS-fs (loop0): invalid crc value [ 111.153227][ T6062] F2FS-fs (loop0): Found nat_bits in checkpoint [ 111.172493][ T6062] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 111.180497][ T6062] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 111.435355][ T6093] F2FS-fs (loop3): invalid crc value [ 111.453667][ T6093] F2FS-fs (loop3): Found nat_bits in checkpoint [ 111.474422][ T6093] F2FS-fs (loop3): Start checkpoint disabled! [ 111.492990][ T6093] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 111.542724][ T6093] syz.3.470: attempt to access beyond end of device [ 111.542724][ T6093] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 111.546374][ T6093] syz.3.470: attempt to access beyond end of device [ 111.546374][ T6093] loop3: rw=0, sector=77952, nr_sectors = 8 limit=40427 [ 111.593058][ T4388] kworker/u4:7: attempt to access beyond end of device [ 111.593058][ T4388] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 111.886276][ T6071] set_capacity_and_notify: 5 callbacks suppressed [ 111.886286][ T6071] loop5: detected capacity change from 0 to 131072 [ 111.940396][ T6071] F2FS-fs (loop5): Test dummy encryption mode enabled [ 111.953919][ T6071] F2FS-fs (loop5): invalid crc value [ 111.989147][ T6071] F2FS-fs (loop5): Found nat_bits in checkpoint [ 112.012484][ T6071] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 112.255439][ T6080] loop4: detected capacity change from 0 to 131072 [ 112.293457][ T6080] F2FS-fs (loop4): Found nat_bits in checkpoint [ 112.318348][ T6080] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 112.340884][ T6080] F2FS-fs (loop4): sanity_check_inode: corrupted inode i_blocks i_ino=6 iblocks=0, run fsck to fix. [ 112.676735][ T6097] loop0: detected capacity change from 0 to 131072 [ 112.678311][ T6121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.684473][ T6121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.009698][ T6097] F2FS-fs (loop0): inline encryption not supported [ 113.013043][ T6097] F2FS-fs (loop0): Test dummy encryption mode enabled [ 113.020410][ T6097] F2FS-fs (loop0): invalid crc value [ 113.037368][ T6097] F2FS-fs (loop0): Found nat_bits in checkpoint [ 113.057837][ T6097] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 113.165917][ T6099] loop3: detected capacity change from 0 to 131072 [ 113.174824][ T6099] F2FS-fs (loop3): Test dummy encryption mode enabled [ 113.179776][ T6099] F2FS-fs (loop3): invalid crc value [ 113.182358][ T6099] F2FS-fs (loop3): Found nat_bits in checkpoint [ 113.192216][ T6099] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 113.631803][ T6140] loop5: detected capacity change from 0 to 256 [ 113.664999][ T6140] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 113.842138][ T6146] loop5: detected capacity change from 0 to 512 [ 113.861175][ T6146] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 113.901385][ T6146] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5 [ 113.903368][ T6146] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 113.905297][ T6146] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.486: Failed to acquire dquot type 1 [ 113.927175][ T6146] EXT4-fs (loop5): 1 truncate cleaned up [ 113.934945][ T6146] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 113.997295][ T4748] EXT4-fs (loop5): unmounting filesystem. [ 114.077240][ T6158] loop0: detected capacity change from 0 to 256 [ 114.104590][ T6158] FAT-fs (loop0): Directory bread(block 64) failed [ 114.106027][ T6158] FAT-fs (loop0): Directory bread(block 65) failed [ 114.109917][ T6158] FAT-fs (loop0): Directory bread(block 66) failed [ 114.111831][ T6158] FAT-fs (loop0): Directory bread(block 67) failed [ 114.113175][ T6158] FAT-fs (loop0): Directory bread(block 68) failed [ 114.114382][ T6158] FAT-fs (loop0): Directory bread(block 69) failed [ 114.115918][ T6158] FAT-fs (loop0): Directory bread(block 70) failed [ 114.116388][ T6160] loop3: detected capacity change from 0 to 1024 [ 114.117168][ T6158] FAT-fs (loop0): Directory bread(block 71) failed [ 114.118677][ T6160] EXT4-fs: Ignoring removed nobh option [ 114.124082][ T6162] tipc: Started in network mode [ 114.125008][ T6162] tipc: Node identity 4, cluster identity 4711 [ 114.126113][ T6162] tipc: Node number set to 4 [ 114.129567][ T6158] FAT-fs (loop0): Directory bread(block 72) failed [ 114.134349][ T6158] FAT-fs (loop0): Directory bread(block 73) failed [ 114.167546][ T6160] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 114.220941][ T6160] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 114.253717][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 114.348031][ T6172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.493'. [ 114.351705][ T6172] device vlan2 entered promiscuous mode [ 114.352691][ T6172] device gretap0 entered promiscuous mode [ 114.389465][ T6174] UHID_CREATE from different security context by process 226 (syz.3.494), this is not allowed. [ 114.426127][ T6176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.495'. [ 114.600201][ T4651] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 114.717832][ T6186] netlink: 48 bytes leftover after parsing attributes in process `syz.3.499'. [ 114.820099][ T4651] usb 1-1: Using ep0 maxpacket: 16 [ 114.822722][ T4651] usb 1-1: config index 0 descriptor too short (expected 37359, got 202) [ 114.824516][ T4651] usb 1-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 114.826394][ T4651] usb 1-1: config 33 has an invalid descriptor of length 254, skipping remainder of the config [ 114.828209][ T4651] usb 1-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 114.831955][ T4651] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.833784][ T4651] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.835131][ T4651] usb 1-1: Product: syz [ 114.835921][ T4651] usb 1-1: Manufacturer: syz [ 114.836768][ T4651] usb 1-1: SerialNumber: syz [ 115.161450][ T4651] usb 1-1: 0:2 : does not exist [ 115.165132][ T4651] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 115.179241][ T4651] usb 1-1: USB disconnect, device number 4 [ 115.393043][ T4794] udevd[4794]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.701257][ T6206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.702994][ T6206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.765880][ T6211] loop3: detected capacity change from 0 to 40427 [ 115.773497][ T6211] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 115.774836][ T6211] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 115.792850][ T6211] F2FS-fs (loop3): invalid crc value [ 115.824449][ T6211] F2FS-fs (loop3): Found nat_bits in checkpoint [ 115.843078][ T6211] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 115.844637][ T6211] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 115.897973][ T4327] syz-executor: attempt to access beyond end of device [ 115.897973][ T4327] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 115.992525][ T6220] loop3: detected capacity change from 0 to 512 [ 116.307401][ T6225] xt_hashlimit: size too large, truncated to 1048576 [ 116.368485][ T6227] xt_hashlimit: size too large, truncated to 1048576 [ 116.430052][ T6230] 9pnet_fd: Insufficient options for proto=fd [ 117.267622][ T6245] loop3: detected capacity change from 0 to 40427 [ 117.278568][ T6245] F2FS-fs (loop3): invalid crc value [ 117.300812][ T6245] F2FS-fs (loop3): Found nat_bits in checkpoint [ 117.337039][ T6245] F2FS-fs (loop3): Start checkpoint disabled! [ 117.341609][ T6259] xt_TCPMSS: Only works on TCP SYN packets [ 117.355955][ T6245] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 117.455317][ T6264] syz.3.522: attempt to access beyond end of device [ 117.455317][ T6264] loop3: rw=2049, sector=77824, nr_sectors = 4096 limit=40427 [ 117.476529][ T6264] syz.3.522: attempt to access beyond end of device [ 117.476529][ T6264] loop3: rw=2049, sector=49152, nr_sectors = 3848 limit=40427 [ 117.547472][ T4561] kworker/u4:14: attempt to access beyond end of device [ 117.547472][ T4561] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 117.842492][ T4330] Bluetooth: hci0: command 0x0405 tx timeout [ 118.353689][ T6267] loop3: detected capacity change from 0 to 131072 [ 118.367054][ T6267] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 118.368464][ T6267] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 118.385858][ T6267] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(2048) [ 118.387378][ T6267] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 118.402844][ T27] audit: type=1326 audit(380.384:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.3.529" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b77aa8 code=0x0 [ 118.942379][ T6280] loop4: detected capacity change from 0 to 40427 [ 118.949903][ T6280] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 118.952066][ T6280] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4 [ 118.958253][ T6280] F2FS-fs (loop4): invalid crc value [ 118.962165][ T6280] F2FS-fs (loop4): Found nat_bits in checkpoint [ 118.980260][ T6280] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 119.062538][ T6287] loop4: detected capacity change from 0 to 512 [ 119.076245][ T6287] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.082845][ T6287] EXT4-fs (loop4): invalid inodes per group: 327712 [ 119.082845][ T6287] [ 119.107049][ T6289] loop4: detected capacity change from 0 to 256 [ 119.147395][ T6291] capability: warning: `syz.4.538' uses 32-bit capabilities (legacy support in use) [ 119.182584][ T6293] loop4: detected capacity change from 0 to 512 [ 119.202439][ T6293] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 120.688051][ T6300] tipc: Failed to remove unknown binding: 66,0,0/4:3792070462/3792070464 [ 120.689741][ T6300] tipc: Failed to remove unknown binding: 66,0,0/4:3792070462/3792070463 [ 121.034413][ T6302] loop3: detected capacity change from 0 to 131072 [ 121.042999][ T6302] F2FS-fs (loop3): invalid crc value [ 121.045754][ T6302] F2FS-fs (loop3): Found nat_bits in checkpoint [ 121.058536][ T6302] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 121.230649][ T6302] F2FS-fs (loop3): Start checkpoint disabled! [ 121.369442][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 122.478780][ T6322] loop3: detected capacity change from 0 to 256 [ 122.490730][ T6322] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 122.529736][ T6324] loop3: detected capacity change from 0 to 4096 [ 122.538674][ T6324] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.557402][ T6324] EXT4-fs (loop3): Test dummy encryption mode enabled [ 122.562498][ T6324] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 122.596339][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 122.963713][ T6327] loop3: detected capacity change from 0 to 131072 [ 122.969808][ T6327] F2FS-fs (loop3): inline encryption not supported [ 122.971278][ T6327] F2FS-fs (loop3): Test dummy encryption mode enabled [ 122.974821][ T6327] F2FS-fs (loop3): invalid crc value [ 122.976965][ T6327] F2FS-fs (loop3): Found nat_bits in checkpoint [ 122.984626][ T6327] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 123.657676][ T6339] loop3: detected capacity change from 0 to 256 [ 123.718514][ T6343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.721466][ T6343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.406197][ T6348] binder: 6348 RLIMIT_NICE not set [ 125.920615][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.921940][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.203614][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 127.267517][ T6373] device veth1_macvtap entered promiscuous mode [ 127.272352][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.565'. [ 127.299338][ T6372] loop3: detected capacity change from 0 to 512 [ 127.348383][ T6372] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.564: bad orphan inode 11862016 [ 127.353241][ T6372] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 127.403751][ T6388] loop4: detected capacity change from 0 to 4096 [ 127.418905][ T6388] EXT4-fs: inline encryption not supported [ 127.420371][ T6389] loop0: detected capacity change from 0 to 512 [ 127.426387][ T6389] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 127.438975][ T6388] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.447861][ T6388] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 127.454929][ T6389] EXT4-fs (loop0): 1 truncate cleaned up [ 127.456069][ T6389] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 127.458684][ T6388] System zones: 0-5 [ 127.461327][ T6388] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 128.003337][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 128.039670][ T6400] syz.3.573 uses obsolete (PF_INET,SOCK_PACKET) [ 128.494261][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 128.644565][ T6419] loop4: detected capacity change from 0 to 512 [ 128.651601][ T6419] EXT4-fs: Ignoring removed bh option [ 128.656486][ T6419] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 128.659577][ T6419] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 128.662927][ T6419] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.577: Corrupt directory, running e2fsck is recommended [ 128.667533][ T6419] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 128.669043][ T6420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.669753][ T6419] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.577: corrupted in-inode xattr [ 128.674494][ T6419] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.577: couldn't read orphan inode 15 (err -117) [ 128.676962][ T6419] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 128.690966][ T6420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.706062][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 128.714594][ T4331] EXT4-fs (loop0): unmounting filesystem. [ 129.387541][ T6450] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 129.533525][ T6455] loop5: detected capacity change from 0 to 512 [ 129.622185][ T6443] loop3: detected capacity change from 0 to 40427 [ 129.622798][ T6455] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 129.628854][ T6443] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 129.633464][ T6443] F2FS-fs (loop3): invalid crc value [ 129.647565][ T6443] F2FS-fs (loop3): Found nat_bits in checkpoint [ 129.660221][ T6443] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 129.675123][ T6460] f2fs_ckpt-7:3: attempt to access beyond end of device [ 129.675123][ T6460] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 129.694408][ T4748] EXT4-fs (loop5): unmounting filesystem. [ 129.736281][ T6466] loop5: detected capacity change from 0 to 1024 [ 129.974823][ T6466] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 129.995080][ T6466] EXT4-fs error (device loop5): ext4_check_all_de:666: inode #12: block 7: comm syz.5.596: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 130.013626][ T6466] EXT4-fs (loop5): Remounting filesystem read-only [ 130.055705][ T4748] EXT4-fs (loop5): unmounting filesystem. [ 130.112825][ T6474] loop5: detected capacity change from 0 to 1024 [ 130.126047][ T6474] EXT4-fs: Ignoring removed i_version option [ 130.127526][ T6474] EXT4-fs: Ignoring removed i_version option [ 130.475029][ T6474] EXT4-fs (loop5): Test dummy encryption mode enabled [ 130.493472][ T6474] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 130.509103][ T6474] netlink: 'syz.5.598': attribute type 12 has an invalid length. [ 130.533612][ T4748] EXT4-fs (loop5): unmounting filesystem. [ 130.572655][ T6484] xt_hashlimit: size too large, truncated to 1048576 [ 130.836577][ T6488] loop0: detected capacity change from 0 to 40427 [ 130.851747][ T6488] F2FS-fs (loop0): Unrecognized mount option "whint_mode=fs-based" or missing value [ 131.069112][ T6513] loop3: detected capacity change from 0 to 512 [ 131.137726][ T6513] EXT4-fs (loop3): Test dummy encryption mode enabled [ 131.187271][ T6513] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 131.208184][ T6513] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 131.208204][ T6513] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 131.280015][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 131.614496][ T6528] loop4: detected capacity change from 0 to 512 [ 131.643886][ T6528] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 131.644006][ T6528] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 131.653973][ T6528] EXT4-fs (loop4): 1 truncate cleaned up [ 131.653994][ T6528] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 131.687895][ T6528] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 131.731710][ T6528] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 131.763943][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 131.924822][ T6535] loop3: detected capacity change from 0 to 512 [ 132.004418][ T6535] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.622: corrupted in-inode xattr [ 132.025188][ T6535] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.622: couldn't read orphan inode 15 (err -117) [ 132.032755][ T6535] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 132.341552][ T6535] EXT4-fs (loop3): shut down requested (1) [ 132.357917][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 132.515583][ T6551] loop3: detected capacity change from 0 to 2048 [ 132.542193][ T6551] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 132.574582][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 132.794721][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.632'. [ 132.807721][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.632'. [ 132.830774][ T6569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.833343][ T6569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.836426][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.632'. [ 132.914330][ T27] audit: type=1326 audit(394.894:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6574 comm="syz.3.638" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2b77aa8 code=0x0 [ 133.153763][ T6573] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 133.163497][ T6573] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 133.189152][ T6573] F2FS-fs (loop0): invalid crc value [ 133.210626][ T6573] F2FS-fs (loop0): Found nat_bits in checkpoint [ 133.287653][ T6573] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 133.288986][ T6573] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 133.397185][ T6589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.399857][ T6589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.426849][ T6573] syz.0.637: attempt to access beyond end of device [ 133.426849][ T6573] loop0: rw=2049, sector=77824, nr_sectors = 4096 limit=40427 [ 133.436613][ T6573] syz.0.637: attempt to access beyond end of device [ 133.436613][ T6573] loop0: rw=2049, sector=49152, nr_sectors = 472 limit=40427 [ 133.454312][ T6573] syz.0.637: attempt to access beyond end of device [ 133.454312][ T6573] loop0: rw=524288, sector=77824, nr_sectors = 256 limit=40427 [ 133.457706][ T6573] syz.0.637: attempt to access beyond end of device [ 133.457706][ T6573] loop0: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 133.460865][ T6573] syz.0.637: attempt to access beyond end of device [ 133.460865][ T6573] loop0: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 133.463538][ T6573] syz.0.637: attempt to access beyond end of device [ 133.463538][ T6573] loop0: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 133.466273][ T6573] syz.0.637: attempt to access beyond end of device [ 133.466273][ T6573] loop0: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 133.468935][ T6573] syz.0.637: attempt to access beyond end of device [ 133.468935][ T6573] loop0: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 133.472093][ T6573] syz.0.637: attempt to access beyond end of device [ 133.472093][ T6573] loop0: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 133.586780][ T6592] tipc: Failed to remove unknown binding: 66,0,0/4:3239521133/3239521135 [ 133.588372][ T6592] tipc: Failed to remove unknown binding: 66,0,0/4:3239521133/3239521134 [ 133.743382][ T6596] set_capacity_and_notify: 1 callbacks suppressed [ 133.743393][ T6596] loop5: detected capacity change from 0 to 1024 [ 133.769295][ T6596] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 134.019795][ T6600] loop5: detected capacity change from 0 to 128 [ 134.070386][ T6600] overlayfs: failed to resolve './file0': -2 [ 134.675265][ T6604] loop3: detected capacity change from 0 to 512 [ 134.731532][ T6604] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 134.766504][ T6609] loop4: detected capacity change from 0 to 256 [ 134.786844][ T6604] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.647: bad orphan inode 131072 [ 134.794016][ T6604] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 135.233621][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 135.358359][ T6623] loop5: detected capacity change from 0 to 256 [ 135.362259][ T6623] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 135.387442][ T4443] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 135.522499][ T6638] ipt_CLUSTERIP: Please specify destination IP [ 135.545303][ T6642] loop5: detected capacity change from 0 to 1024 [ 135.549258][ T6642] EXT4-fs: Ignoring removed mblk_io_submit option [ 135.613796][ T6642] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 136.373406][ T4748] EXT4-fs (loop5): unmounting filesystem. [ 136.468641][ T6639] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 136.471002][ T6639] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 136.478772][ T6639] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 136.484337][ T6639] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 136.488908][ T6639] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 136.863536][ T6665] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 136.865529][ T6665] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 137.682265][ T4334] Bluetooth: hci1: command 0x0c1a tx timeout [ 137.949179][ T6693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.958961][ T6693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.163064][ T6693] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.165359][ T6693] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.460260][ T14] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 138.480307][ T4330] Bluetooth: hci4: command 0x0c1a tx timeout [ 138.481587][ T4330] Bluetooth: hci3: command 0x0c1a tx timeout [ 138.482814][ T4330] Bluetooth: hci2: command 0x0c1a tx timeout [ 138.562309][ T4334] Bluetooth: hci0: command 0x0c1a tx timeout [ 138.645196][ T14] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 138.648294][ T14] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.649929][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 138.651934][ T14] usb 1-1: SerialNumber: syz [ 138.685567][ T6693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.732843][ T6693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.056776][ T6693] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.058715][ T6693] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.064231][ T6693] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.068855][ T6693] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.327903][ T14] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 139.762829][ T14] usb 1-1: USB disconnect, device number 5 [ 139.978530][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 139.990808][ T14] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 140.191505][ T6742] xt_hashlimit: size too large, truncated to 1048576 [ 140.647270][ T6786] loop3: detected capacity change from 0 to 128 [ 140.714392][ T6786] EXT4-fs (loop3): Test dummy encryption mode enabled [ 140.746686][ T6786] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 140.773057][ T6795] loop0: detected capacity change from 0 to 16 [ 140.784248][ T6795] erofs: (device loop0): mounted with root inode @ nid 36. [ 141.360211][ T1518] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 141.628724][ T1518] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.631266][ T1518] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.633742][ T1518] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 141.635526][ T1518] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 141.639247][ T1518] usb 1-1: SerialNumber: syz [ 141.678508][ T6798] loop4: detected capacity change from 0 to 40427 [ 141.701701][ T6798] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x5 [ 141.739084][ T6798] F2FS-fs (loop4): invalid crc value [ 141.745624][ T6798] F2FS-fs (loop4): invalid crc value [ 141.748985][ T6798] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 141.819787][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 141.853753][ T1518] usb 1-1: 0:2 : does not exist [ 141.869771][ T1518] usb 1-1: USB disconnect, device number 6 [ 141.874272][ T6814] loop3: detected capacity change from 0 to 128 [ 141.879916][ T6814] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 141.944157][ T39] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 141.992002][ T6816] loop3: detected capacity change from 0 to 512 [ 141.999775][ T6816] EXT4-fs: Ignoring removed bh option [ 142.018959][ T6816] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.707: corrupted in-inode xattr [ 142.049460][ T6816] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.707: couldn't read orphan inode 15 (err -117) [ 142.052487][ T6816] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 142.092408][ T4794] udevd[4794]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.103256][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 143.313244][ T6878] loop3: detected capacity change from 0 to 512 [ 143.314841][ T6878] EXT4-fs: Ignoring removed orlov option [ 143.366062][ T6878] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 143.422754][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 143.669295][ T6896] loop3: detected capacity change from 0 to 2048 [ 143.803383][ T6899] loop4: detected capacity change from 0 to 4096 [ 143.809056][ T6899] EXT4-fs: inline encryption not supported [ 143.816388][ T6886] loop0: detected capacity change from 0 to 40427 [ 143.823868][ T6899] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 143.827832][ T6886] F2FS-fs (loop0): Invalid log blocks per segment (1) [ 143.829853][ T6899] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 143.834564][ T6899] System zones: 0-5 [ 143.838926][ T6899] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 143.882366][ T6886] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 143.884315][ T6886] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 143.885932][ T6886] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff [ 143.887944][ T6886] F2FS-fs (loop0): invalid crc value [ 143.916441][ T6886] F2FS-fs (loop0): Found nat_bits in checkpoint [ 143.927509][ T6886] F2FS-fs (loop0): Start checkpoint disabled! [ 143.936815][ T6886] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 143.938170][ T6886] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 144.305018][ T4548] bio_check_eod: 5877 callbacks suppressed [ 144.305028][ T4548] kworker/u4:13: attempt to access beyond end of device [ 144.305028][ T4548] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 144.356504][ T6915] loop5: detected capacity change from 0 to 4096 [ 144.378208][ T6915] ext4: Unknown parameter 'defcontext' [ 144.495097][ T6917] EXT4-fs: inline encryption not supported [ 144.502952][ T6917] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 144.506849][ T6917] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 144.511929][ T6917] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 144.516298][ T6917] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 144.527149][ T6917] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 144.529229][ T6917] EXT4-fs (loop5): orphan cleanup on readonly fs [ 144.537195][ T6917] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.741: bg 0: block 34: padding at end of block bitmap is not set [ 144.549373][ T6917] Quota error (device loop5): write_blk: dquota write failed [ 144.551458][ T6917] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 144.553467][ T6917] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.741: Failed to acquire dquot type 1 [ 144.586392][ T6917] EXT4-fs (loop5): 1 truncate cleaned up [ 144.589373][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 144.591207][ T6917] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 144.653859][ T6917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.655660][ T6917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.769517][ T6926] netlink: 104 bytes leftover after parsing attributes in process `syz.3.744'. [ 144.836497][ T6929] netlink: 'syz.2.745': attribute type 12 has an invalid length. [ 144.843812][ T6929] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 144.851379][ T6931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.859642][ T6931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.093200][ T6919] F2FS-fs (loop0): Invalid log sectorsize (0) [ 145.094602][ T6919] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 145.096636][ T6919] F2FS-fs (loop0): invalid crc value [ 145.127028][ T6919] F2FS-fs (loop0): Found nat_bits in checkpoint [ 145.137602][ T6919] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 145.139030][ T6919] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 145.517571][ T4748] EXT4-fs (loop5): unmounting filesystem. [ 145.744838][ T6964] set_capacity_and_notify: 2 callbacks suppressed [ 145.744848][ T6964] loop5: detected capacity change from 0 to 128 [ 145.758122][ T6964] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 145.826781][ T6964] fscrypt: Adiantum using implementation "adiantum(xchacha12-neon,aes-ce,nhpoly1305-generic)" [ 145.882113][ T6963] loop3: detected capacity change from 0 to 40427 [ 145.925542][ T6960] loop4: detected capacity change from 0 to 40427 [ 145.939973][ T4748] EXT4-fs (loop5): unmounting filesystem. [ 145.961991][ T6963] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 145.972933][ T6963] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 145.983617][ T6960] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 145.988590][ T6963] F2FS-fs (loop3): Found nat_bits in checkpoint [ 145.988845][ T6960] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 146.013084][ T6960] F2FS-fs (loop4): invalid crc value [ 146.035263][ T6963] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 146.036779][ T6963] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 146.061823][ T6960] F2FS-fs (loop4): Found nat_bits in checkpoint [ 146.069575][ T6960] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 146.072275][ T6963] syz.3.758: attempt to access beyond end of device [ 146.072275][ T6963] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 146.074596][ T6960] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 146.103366][ T6963] syz.3.758: attempt to access beyond end of device [ 146.103366][ T6963] loop3: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 146.208005][ T4327] syz-executor: attempt to access beyond end of device [ 146.208005][ T4327] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 146.398542][ T6993] loop5: detected capacity change from 0 to 4096 [ 146.400779][ T6993] EXT4-fs: inline encryption not supported [ 146.401863][ T6993] EXT4-fs: Ignoring removed mblk_io_submit option [ 146.403107][ T6993] EXT4-fs: quotafile must be on filesystem root [ 147.676565][ T6997] loop0: detected capacity change from 0 to 40427 [ 147.686815][ T6997] F2FS-fs (loop0): invalid crc value [ 147.701302][ T6997] F2FS-fs (loop0): Found nat_bits in checkpoint [ 147.715973][ T6997] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 148.182591][ T7030] loop4: detected capacity change from 0 to 256 [ 148.206846][ T7030] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 148.434358][ T7004] loop5: detected capacity change from 0 to 131072 [ 148.441309][ T7004] F2FS-fs (loop5): Test dummy encryption mode enabled [ 148.443024][ T7004] F2FS-fs (loop5): invalid crc value [ 148.447398][ T7004] F2FS-fs (loop5): Found nat_bits in checkpoint [ 148.459918][ T7004] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 149.044290][ T7050] loop4: detected capacity change from 0 to 256 [ 149.341038][ T7055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.342720][ T7055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.359750][ T7056] loop3: detected capacity change from 0 to 128 [ 149.681803][ T7058] syz.3.787: attempt to access beyond end of device [ 149.681803][ T7058] loop3: rw=2049, sector=225, nr_sectors = 128 limit=128 [ 149.874928][ T7060] loop0: detected capacity change from 0 to 128 [ 150.439705][ T11] kworker/u4:1: attempt to access beyond end of device [ 150.439705][ T11] loop3: rw=1, sector=353, nr_sectors = 257 limit=128 [ 151.001754][ T7076] loop0: detected capacity change from 0 to 256 [ 151.149114][ T7084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.154235][ T7084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.243634][ T7081] loop4: detected capacity change from 0 to 128 [ 151.267997][ T7081] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 151.319828][ T7085] loop0: detected capacity change from 0 to 40427 [ 151.326824][ T7085] F2FS-fs (loop0): invalid crc value [ 151.329304][ T7085] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 151.342943][ T7085] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 151.344375][ T7085] F2FS-fs (loop0): Start checkpoint disabled! [ 151.346273][ T7085] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 151.480338][ T7097] loop5: detected capacity change from 0 to 512 [ 151.838361][ T7097] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 151.851862][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 152.230316][ T141] kworker/u4:3: attempt to access beyond end of device [ 152.230316][ T141] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 152.279417][ T7097] EXT4-fs (loop5): 1 orphan inode deleted [ 152.284064][ T7103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.285683][ T7103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.295031][ T7097] EXT4-fs (loop5): 1 truncate cleaned up [ 152.296140][ T7097] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 152.349879][ T7097] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1450: inode #12: block 7: comm syz.5.802: path /117/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 152.365917][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.803'. [ 152.375722][ T4748] EXT4-fs (loop5): unmounting filesystem. [ 152.376707][ T7108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.803'. [ 152.778000][ T7114] loop0: detected capacity change from 0 to 512 [ 152.780986][ T7114] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 153.195172][ T7114] EXT4-fs (loop0): failed to open journal device unknown-block(238,156) -6 [ 153.202863][ T7114] netlink: 104 bytes leftover after parsing attributes in process `syz.0.808'. [ 153.298457][ T7126] loop4: detected capacity change from 0 to 512 [ 153.313753][ T7126] EXT4-fs (loop4): Test dummy encryption mode enabled [ 153.343830][ T7126] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.812: inode has both inline data and extents flags [ 153.346647][ T7126] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.812: couldn't read orphan inode 15 (err -117) [ 153.349104][ T7126] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 153.905168][ T7133] netlink: 60 bytes leftover after parsing attributes in process `syz.3.811'. [ 154.293880][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 155.310063][ T7141] tipc: Started in network mode [ 155.311121][ T7141] tipc: Node identity 4, cluster identity 4711 [ 155.312307][ T7141] tipc: Node number set to 4 [ 155.537826][ T7145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.546680][ T7145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.613482][ T7149] loop0: detected capacity change from 0 to 128 [ 156.581485][ T7158] syz.0.818: attempt to access beyond end of device [ 156.581485][ T7158] loop0: rw=2049, sector=225, nr_sectors = 128 limit=128 [ 156.760465][ T4520] kworker/u4:12: attempt to access beyond end of device [ 156.760465][ T4520] loop0: rw=1, sector=353, nr_sectors = 257 limit=128 [ 156.776876][ T7160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.779052][ T7160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.804135][ T7162] loop3: detected capacity change from 0 to 512 [ 156.806013][ T7162] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 156.814260][ T7162] EXT4-fs (loop3): 1 truncate cleaned up [ 156.815416][ T7162] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 157.741957][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 157.769514][ T7176] loop5: detected capacity change from 0 to 512 [ 157.780865][ T7176] EXT4-fs (loop5): Test dummy encryption mode enabled [ 157.824781][ T7176] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.826: inode has both inline data and extents flags [ 157.827357][ T7176] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.826: couldn't read orphan inode 15 (err -117) [ 157.839252][ T7176] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 158.235874][ T4748] EXT4-fs (loop5): unmounting filesystem. [ 158.718144][ T7192] netlink: 60 bytes leftover after parsing attributes in process `syz.2.827'. [ 159.280506][ T7189] loop5: detected capacity change from 0 to 4096 [ 159.289130][ T7189] EXT4-fs: inline encryption not supported [ 159.321251][ T7189] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 159.343149][ T7189] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 159.347980][ T7194] loop4: detected capacity change from 0 to 512 [ 159.354056][ T7189] System zones: 0-5 [ 159.373911][ T7189] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 159.461477][ T7194] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 159.913151][ T7194] EXT4-fs (loop4): failed to open journal device unknown-block(238,156) -6 [ 160.040004][ T4748] EXT4-fs (loop5): unmounting filesystem. [ 160.086886][ T7194] netlink: 104 bytes leftover after parsing attributes in process `syz.4.829'. [ 160.096392][ T7194] loop4: detected capacity change from 0 to 642 [ 160.106306][ T7194] EXT4-fs (loop4): failed to parse options in superblock: ÿÿ [ 160.107860][ T7194] EXT4-fs (loop4): Invalid default hash set in the superblock [ 160.182575][ T7180] loop0: detected capacity change from 0 to 131072 [ 160.184744][ T7180] F2FS-fs (loop0): Test dummy encryption mode enabled [ 160.193095][ T7180] F2FS-fs (loop0): invalid crc value [ 160.198158][ T7180] F2FS-fs (loop0): Found nat_bits in checkpoint [ 160.210678][ T7180] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 160.542305][ T7214] loop5: detected capacity change from 0 to 256 [ 161.371878][ T7223] loop4: detected capacity change from 0 to 128 [ 161.710724][ T4376] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 161.719793][ T7240] syz.4.833: attempt to access beyond end of device [ 161.719793][ T7240] loop4: rw=2049, sector=225, nr_sectors = 128 limit=128 [ 161.953634][ T7238] loop5: detected capacity change from 0 to 40427 [ 161.982702][ T7238] F2FS-fs (loop5): invalid crc value [ 161.985661][ T141] kworker/u4:3: attempt to access beyond end of device [ 161.985661][ T141] loop4: rw=1, sector=353, nr_sectors = 257 limit=128 [ 162.006391][ T7238] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 162.018513][ T7238] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 162.019920][ T7238] F2FS-fs (loop5): Start checkpoint disabled! [ 162.022954][ T7238] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 162.190278][ T4376] usb 1-1: Using ep0 maxpacket: 32 [ 162.501670][ T4376] usb 1-1: config index 0 descriptor too short (expected 164, got 36) [ 162.502358][ T4457] kworker/u4:9: attempt to access beyond end of device [ 162.502358][ T4457] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 162.503233][ T4376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 91, changing to 10 [ 162.507691][ T4376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18269, setting to 1024 [ 162.509771][ T4376] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 162.511595][ T4376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.514716][ T4376] usb 1-1: config 0 descriptor?? [ 162.516733][ T7229] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 162.520063][ T4376] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count [ 162.563799][ T7249] loop4: detected capacity change from 0 to 4096 [ 162.581077][ T7249] EXT4-fs: inline encryption not supported [ 162.597191][ T7251] loop3: detected capacity change from 0 to 512 [ 162.619338][ T7249] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 162.651422][ T7251] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 162.659847][ T7249] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 162.661754][ T7249] System zones: 0-5 [ 162.680970][ T7249] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 162.767671][ T4376] usbhid 1-1:0.0: can't add hid device: -71 [ 162.769084][ T4376] usbhid: probe of 1-1:0.0 failed with error -71 [ 163.185911][ T7262] netlink: 60 bytes leftover after parsing attributes in process `syz.5.843'. [ 163.697460][ T4376] usb 1-1: USB disconnect, device number 7 [ 164.356070][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 164.358387][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 164.392579][ T7273] fuse: Bad value for 'fd' [ 164.425469][ T7275] loop0: detected capacity change from 0 to 512 [ 164.428832][ T7275] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 164.436732][ T7278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.442067][ T7278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.446288][ T7275] EXT4-fs (loop0): 1 truncate cleaned up [ 164.447359][ T7275] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 164.497208][ T7286] loop3: detected capacity change from 0 to 128 [ 164.910617][ T7286] syz.3.856: attempt to access beyond end of device [ 164.910617][ T7286] loop3: rw=2049, sector=225, nr_sectors = 128 limit=128 [ 164.925746][ T4443] kworker/u4:8: attempt to access beyond end of device [ 164.925746][ T4443] loop3: rw=1, sector=353, nr_sectors = 257 limit=128 [ 165.081941][ T7299] netlink: 60 bytes leftover after parsing attributes in process `syz.3.862'. [ 165.106348][ T7302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.109582][ T7302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.515856][ T4331] EXT4-fs (loop0): unmounting filesystem. [ 165.616176][ T7314] random: crng reseeded on system resumption [ 165.950581][ T7323] loop4: detected capacity change from 0 to 512 [ 166.234665][ T7324] loop5: detected capacity change from 0 to 128 [ 166.268989][ T7324] syz.5.872: attempt to access beyond end of device [ 166.268989][ T7324] loop5: rw=2049, sector=225, nr_sectors = 128 limit=128 [ 166.293678][ T5491] kworker/u4:16: attempt to access beyond end of device [ 166.293678][ T5491] loop5: rw=1, sector=353, nr_sectors = 257 limit=128 [ 166.318299][ T7330] netlink: 60 bytes leftover after parsing attributes in process `syz.5.874'. [ 166.355423][ T7332] loop4: detected capacity change from 0 to 1024 [ 166.361923][ T7332] EXT4-fs: Ignoring removed i_version option [ 166.364859][ T7332] EXT4-fs (loop4): Test dummy encryption mode enabled [ 166.367129][ T7334] loop5: detected capacity change from 0 to 128 [ 166.386971][ T7334] syz.5.885: attempt to access beyond end of device [ 166.386971][ T7334] loop5: rw=2049, sector=225, nr_sectors = 128 limit=128 [ 166.423569][ T7332] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 166.443345][ T4495] kworker/u4:11: attempt to access beyond end of device [ 166.443345][ T4495] loop5: rw=1, sector=353, nr_sectors = 257 limit=128 [ 166.491282][ T7342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.492971][ T7342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.190778][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 167.241796][ T7360] netlink: 60 bytes leftover after parsing attributes in process `syz.3.886'. [ 167.305684][ T1518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 167.309494][ T1518] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 167.346660][ T7370] fido_id[7370]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 167.368271][ T7372] loop4: detected capacity change from 0 to 128 [ 167.943123][ T7384] loop5: detected capacity change from 0 to 512 [ 168.015870][ T7386] syz.4.891: attempt to access beyond end of device [ 168.015870][ T7386] loop4: rw=2049, sector=225, nr_sectors = 128 limit=128 [ 168.430424][ T7384] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 168.469585][ T7384] EXT4-fs (loop5): 1 truncate cleaned up [ 168.470753][ T7384] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 168.535149][ T5821] kworker/u4:19: attempt to access beyond end of device [ 168.535149][ T5821] loop4: rw=1, sector=353, nr_sectors = 257 limit=128 [ 168.617339][ T7402] loop0: detected capacity change from 0 to 512 [ 168.646357][ T7402] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 168.772408][ T7407] netlink: 60 bytes leftover after parsing attributes in process `syz.4.900'. [ 170.277328][ T4748] EXT4-fs (loop5): unmounting filesystem. [ 170.313298][ T4331] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 170.315979][ T4331] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /142/file0/lost+found: directory fails checksum at offset 8192 [ 170.322991][ T4331] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 170.326116][ T4331] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 170.329966][ T4331] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 170.335561][ T4331] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /142/file0/lost+found: directory fails checksum at offset 8192 [ 170.338751][ T4331] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 170.342395][ T4331] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 170.345381][ T4331] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 170.348715][ T4331] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /142/file0/lost+found: directory fails checksum at offset 8192 [ 170.354284][ T4331] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 170.357410][ T4331] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 170.361533][ T4331] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 170.364636][ T4331] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /142/file0/lost+found: directory fails checksum at offset 8192 [ 170.367700][ T4331] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 170.374467][ T4331] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 170.382731][ T4331] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 170.386090][ T4331] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /142/file0/lost+found: directory fails checksum at offset 8192 [ 170.401884][ T4331] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 170.405150][ T4331] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 2: comm syz-executor: Directory block failed checksum [ 171.402538][ T4331] EXT4-fs (loop0): unmounting filesystem. [ 171.725571][ T7433] loop5: detected capacity change from 0 to 256 [ 171.756499][ T7433] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 171.950810][ T7438] loop3: detected capacity change from 0 to 512 [ 171.996165][ T7438] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 172.029510][ T7438] EXT4-fs (loop3): 1 truncate cleaned up [ 172.030829][ T7438] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 172.209036][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 172.223168][ T4334] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 172.226079][ T4334] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 172.227791][ T4334] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 172.229566][ T4334] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 172.245037][ T4334] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 172.246552][ T4334] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 172.258776][ T7453] loop5: detected capacity change from 0 to 256 [ 172.353247][ T4495] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.471479][ T4495] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.553059][ T4495] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.587325][ T7471] loop5: detected capacity change from 0 to 256 [ 172.623381][ T7471] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.630019][ T7471] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 172.635075][ T7471] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 172.663912][ T4495] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.668128][ T7448] chnl_net:caif_netlink_parms(): no params data found [ 172.746822][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 172.758452][ T7448] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.764449][ T7448] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.768550][ T7448] device bridge_slave_0 entered promiscuous mode [ 172.774584][ T7448] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.777189][ T7448] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.784506][ T7448] device bridge_slave_1 entered promiscuous mode [ 172.823605][ T7448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.829454][ T7448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.839578][ T7448] team0: Port device team_slave_0 added [ 172.849469][ T7448] team0: Port device team_slave_1 added [ 173.236078][ T7448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.258494][ T7448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.264665][ T7448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.279032][ T7448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.302764][ T7448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.309695][ T7448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.322920][ T4495] tipc: Disabling bearer [ 173.325272][ T4495] tipc: Left network mode [ 173.396195][ T7448] device hsr_slave_0 entered promiscuous mode [ 173.446806][ T7448] device hsr_slave_1 entered promiscuous mode [ 173.480191][ T7448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.481712][ T7448] Cannot create hsr debugfs directory [ 173.812753][ T7528] option changes via remount are deprecated (pid=7526 comm=syz.3.936) [ 173.852132][ T7530] loop5: detected capacity change from 0 to 512 [ 173.883707][ T7530] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 173.895138][ T7448] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 173.974959][ T7530] EXT4-fs (loop5): 1 truncate cleaned up [ 173.976063][ T7530] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 174.312480][ T7448] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 174.337357][ T4334] Bluetooth: hci2: command 0x0409 tx timeout [ 174.423672][ T7448] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 174.926428][ T7448] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 175.311655][ T4748] EXT4-fs (loop5): unmounting filesystem. [ 175.658608][ T7448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.717566][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.719394][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.727860][ T7448] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.739422][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.741440][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.743247][ T4457] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.744621][ T4457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.757801][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.281839][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.283778][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.285640][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.286976][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.328425][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.335702][ T141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.339366][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.343804][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.346019][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.349675][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.352020][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.356717][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.358861][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.369100][ T7448] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.377810][ T7448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.380609][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.382520][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.402853][ T4334] Bluetooth: hci2: command 0x041b tx timeout [ 176.909799][ T7607] device syzkaller0 entered promiscuous mode [ 176.980038][ T4495] device hsr_slave_0 left promiscuous mode [ 177.010329][ T4495] device hsr_slave_1 left promiscuous mode [ 177.090237][ T4495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.091782][ T4495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.093551][ T4495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.094979][ T4495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.096742][ T4495] device bridge_slave_1 left promiscuous mode [ 177.098011][ T4495] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.131707][ T4495] device bridge_slave_0 left promiscuous mode [ 177.133100][ T4495] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.260275][ T4495] device veth1_macvtap left promiscuous mode [ 177.261687][ T4495] device veth0_macvtap left promiscuous mode [ 177.262932][ T4495] device veth1_vlan left promiscuous mode [ 177.264015][ T4495] device veth0_vlan left promiscuous mode [ 178.339440][ T7639] loop3: detected capacity change from 0 to 512 [ 178.349435][ T7639] ext4: Unknown parameter 'obj_type' [ 178.360777][ T7639] loop3: detected capacity change from 0 to 512 [ 178.370394][ T7639] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 178.372669][ T7639] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 178.374342][ T7639] EXT4-fs (loop3): group descriptors corrupted! [ 178.480202][ T4334] Bluetooth: hci2: command 0x040f tx timeout [ 179.982089][ T4495] team0 (unregistering): Port device team_slave_1 removed [ 180.142209][ T4495] team0 (unregistering): Port device team_slave_0 removed [ 180.300689][ T4495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.501021][ T4495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.560366][ T4334] Bluetooth: hci2: command 0x0419 tx timeout [ 182.021863][ T4495] bond0 (unregistering): Released all slaves [ 187.361166][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.362377][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 191.379624][ T4334] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 191.385188][ T4334] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 191.387931][ T4334] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 191.389573][ T4334] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 191.397112][ T4334] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 191.398474][ T4334] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 192.875348][ T4330] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 192.877598][ T4330] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 192.879278][ T4330] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 192.887191][ T4330] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 192.888772][ T4330] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 192.890847][ T4330] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 193.450174][ T4330] Bluetooth: hci5: command 0x0409 tx timeout [ 193.887597][ T4334] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 193.890385][ T4334] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 193.892413][ T4334] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 193.894076][ T4334] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 193.895565][ T4334] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 193.896910][ T4334] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 194.366147][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.367518][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 194.373929][ T7448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.462146][ T7685] loop5: detected capacity change from 0 to 40427 [ 194.480943][ T7685] F2FS-fs (loop5): invalid crc value [ 194.490319][ T7685] F2FS-fs (loop5): Found nat_bits in checkpoint [ 194.522213][ T7685] F2FS-fs (loop5): Start checkpoint disabled! [ 194.530973][ T7685] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 194.568018][ T7685] syz.5.969: attempt to access beyond end of device [ 194.568018][ T7685] loop5: rw=2049, sector=45096, nr_sectors = 96 limit=40427 [ 194.574226][ T7685] syz.5.969: attempt to access beyond end of device [ 194.574226][ T7685] loop5: rw=2049, sector=77824, nr_sectors = 40 limit=40427 [ 194.576716][ T7685] syz.5.969: attempt to access beyond end of device [ 194.576716][ T7685] loop5: rw=2049, sector=45096, nr_sectors = 96 limit=40427 [ 194.621316][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 194.623244][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 194.674673][ T5503] kworker/u4:17: attempt to access beyond end of device [ 194.674673][ T5503] loop5: rw=2049, sector=45192, nr_sectors = 8 limit=40427 [ 194.696191][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.697963][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.699803][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 194.702301][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 194.720381][ T7674] chnl_net:caif_netlink_parms(): no params data found [ 194.741304][ T7663] chnl_net:caif_netlink_parms(): no params data found [ 194.746880][ T7448] device veth0_vlan entered promiscuous mode [ 194.782259][ T7448] device veth1_vlan entered promiscuous mode [ 194.911110][ T7663] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.912592][ T7663] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.914366][ T7663] device bridge_slave_0 entered promiscuous mode [ 194.918771][ T7674] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.920028][ T7674] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.923674][ T7674] device bridge_slave_0 entered promiscuous mode [ 194.927682][ T7674] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.929028][ T7674] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.941003][ T7674] device bridge_slave_1 entered promiscuous mode [ 194.960462][ T4330] Bluetooth: hci6: command 0x0409 tx timeout [ 195.520195][ T4334] Bluetooth: hci5: command 0x041b tx timeout [ 195.684133][ T7663] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.690466][ T7663] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.692243][ T7663] device bridge_slave_1 entered promiscuous mode [ 195.716958][ T7669] chnl_net:caif_netlink_parms(): no params data found [ 195.719882][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 195.721728][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 195.813719][ T7674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.842672][ T7448] device veth0_macvtap entered promiscuous mode [ 195.845454][ T5503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 195.847375][ T5503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.849120][ T5503] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 195.866891][ T7448] device veth1_macvtap entered promiscuous mode [ 195.883408][ T7663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.890058][ T7674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.921318][ T4334] Bluetooth: hci7: command 0x0409 tx timeout [ 195.943757][ T7663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.977134][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.979075][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.985740][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.987616][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.004735][ T7448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.007395][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.009285][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.013572][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.015434][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.018097][ T7448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.043045][ T7674] team0: Port device team_slave_0 added [ 196.046518][ T7674] team0: Port device team_slave_1 added [ 196.052666][ T7674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.053972][ T7674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.058513][ T7674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.061340][ T7674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.062600][ T7674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.067241][ T7674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.115048][ T7674] device hsr_slave_0 entered promiscuous mode [ 196.150651][ T7674] device hsr_slave_1 entered promiscuous mode [ 196.389019][ T7663] team0: Port device team_slave_0 added [ 196.494283][ T7663] team0: Port device team_slave_1 added [ 196.499732][ T7663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.501239][ T7663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.505456][ T7663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.508167][ T7663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.509321][ T7663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.514398][ T7663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.517643][ T7669] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.521122][ T7669] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.522939][ T7669] device bridge_slave_0 entered promiscuous mode [ 196.525705][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 196.530611][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 196.532448][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 196.534148][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 196.535933][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 196.541940][ T7448] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.543538][ T7448] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.549083][ T7448] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.551052][ T7448] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.566148][ T7669] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.567684][ T7669] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.569434][ T7669] device bridge_slave_1 entered promiscuous mode [ 196.644259][ T7669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.683573][ T7663] device hsr_slave_0 entered promiscuous mode [ 196.721063][ T7663] device hsr_slave_1 entered promiscuous mode [ 196.750276][ T7663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.751725][ T7663] Cannot create hsr debugfs directory [ 196.765757][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.767345][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.789576][ T7669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.805764][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 196.919633][ T4477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.921418][ T4477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.923358][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 196.933187][ T7669] team0: Port device team_slave_0 added [ 196.936396][ T7669] team0: Port device team_slave_1 added [ 197.023572][ T7669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.024817][ T7669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.029665][ T7669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.040263][ T4334] Bluetooth: hci6: command 0x041b tx timeout [ 197.045881][ T7669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.047437][ T7669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.070992][ T7669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.132495][ T7669] device hsr_slave_0 entered promiscuous mode [ 197.160583][ T7669] device hsr_slave_1 entered promiscuous mode [ 197.200511][ T7669] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.201945][ T7669] Cannot create hsr debugfs directory [ 197.610427][ T4330] Bluetooth: hci5: command 0x040f tx timeout [ 197.669353][ T7674] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 197.719418][ T7674] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 197.777620][ T7674] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 197.813329][ T7674] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 197.922586][ T7663] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 198.003675][ T4334] Bluetooth: hci7: command 0x041b tx timeout [ 198.293504][ T7663] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 198.377172][ T7663] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 198.500268][ T7801] netlink: 60 bytes leftover after parsing attributes in process `syz.6.978'. [ 198.647518][ T7663] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 199.120250][ T4334] Bluetooth: hci6: command 0x040f tx timeout [ 199.205475][ T7674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.214749][ T7674] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.233837][ T7674] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 199.235708][ T7674] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.244550][ T4495] tipc: Left network mode [ 199.266408][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.268481][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.270031][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.275829][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.278457][ T4443] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.279736][ T4443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.287948][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.289895][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.298194][ T4443] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.299494][ T4443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.308314][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.313342][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.318624][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.322432][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.326821][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.333504][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.338937][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.345635][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.347489][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.353773][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.396365][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.398096][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.399633][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.428451][ T7669] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 199.574228][ T7669] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 199.581401][ T7816] loop6: detected capacity change from 0 to 512 [ 199.600484][ T7816] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 199.624531][ T7669] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 199.630004][ T7816] EXT4-fs (loop6): 1 truncate cleaned up [ 199.632362][ T7816] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 199.662596][ T7669] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 199.680260][ T4334] Bluetooth: hci5: command 0x0419 tx timeout [ 199.747482][ T7674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.753159][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 199.754728][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 200.250299][ T4330] Bluetooth: hci7: command 0x040f tx timeout [ 200.571256][ T7663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.624121][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.625918][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.717384][ T7663] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.735069][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.736985][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.738354][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.739631][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.751951][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.764377][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.766449][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.784209][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.785588][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.787240][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.854505][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.856664][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.858879][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.892594][ T7448] EXT4-fs (loop6): unmounting filesystem. [ 200.905858][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.907582][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.909365][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.912782][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.916689][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.927119][ T7848] loop5: detected capacity change from 0 to 1024 [ 200.928763][ T7848] EXT4-fs: Ignoring removed bh option [ 200.952986][ T7669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.957549][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 200.959363][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 200.965365][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.967228][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.013846][ T7848] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 201.033959][ T7848] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 3: comm syz.5.981: lblock 3 mapped to illegal pblock 3 (length 3) [ 201.054240][ T7848] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 201.057136][ T7848] EXT4-fs (loop5): This should not happen!! Data will be lost [ 201.057136][ T7848] [ 201.076362][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.082800][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.084645][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.098966][ T7669] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.105286][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 201.107102][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 201.108822][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 201.112783][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 201.116927][ T7848] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.981: lblock 3 mapped to illegal pblock 3 (length 1) [ 201.232189][ T4334] Bluetooth: hci6: command 0x0419 tx timeout [ 201.235877][ T7848] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.981: lblock 3 mapped to illegal pblock 3 (length 1) [ 201.421542][ T7848] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.981: lblock 3 mapped to illegal pblock 3 (length 1) [ 201.424405][ T7848] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.981: lblock 3 mapped to illegal pblock 3 (length 1) [ 201.427294][ T7848] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.981: lblock 3 mapped to illegal pblock 3 (length 1) [ 201.432233][ T7864] EXT4-fs error (device loop5): ext4_ext_remove_space:2945: inode #15: comm syz.5.981: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 201.437192][ T7674] device veth0_vlan entered promiscuous mode [ 201.444266][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.445937][ T7864] EXT4-fs error (device loop5) in ext4_setattr:5695: Corrupt filesystem [ 201.449483][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.454685][ T5424] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.456029][ T5424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.458266][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.462010][ T7674] device veth1_vlan entered promiscuous mode [ 201.474752][ T7674] device veth0_macvtap entered promiscuous mode [ 201.482339][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 201.484473][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 201.486252][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 201.488099][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 201.492946][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.495159][ T4748] EXT4-fs (loop5): unmounting filesystem. [ 201.496694][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.505446][ T5424] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.506899][ T5424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.558794][ T7674] device veth1_macvtap entered promiscuous mode [ 201.566221][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 201.568203][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 201.580275][ T7872] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 201.582821][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.587419][ T7872] loop5: detected capacity change from 0 to 512 [ 201.594637][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.602490][ T7872] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 201.609665][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.613204][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.633708][ T7872] EXT4-fs (loop5): 1 truncate cleaned up [ 201.634874][ T7872] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 201.723733][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.728173][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.729862][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 202.169035][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.171441][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.174952][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.192553][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.194627][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.196654][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.199616][ T7674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.209875][ T7669] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 202.214600][ T7669] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.219764][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 202.222115][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 202.223836][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.230636][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.241817][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 202.243573][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.245326][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 202.246977][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 202.250397][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.252904][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.254912][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.256873][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.259885][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.262318][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.266424][ T7674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.320599][ T4334] Bluetooth: hci7: command 0x0419 tx timeout [ 202.330779][ T7663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.332578][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 202.334241][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 202.336100][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 202.342575][ T7674] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.348418][ T7674] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.350532][ T7674] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.352269][ T7674] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.425014][ T4748] EXT4-fs (loop5): unmounting filesystem. [ 202.443679][ T7898] loop6: detected capacity change from 0 to 512 [ 202.474828][ T7898] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 202.532093][ T7898] EXT4-fs (loop6): 1 truncate cleaned up [ 202.533206][ T7898] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 203.674070][ T7669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.866299][ T7923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.868175][ T7923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.874735][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 203.889927][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 203.968805][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 203.995591][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.030880][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 204.201775][ T7448] EXT4-fs (loop6): unmounting filesystem. [ 204.228168][ T7669] device veth0_vlan entered promiscuous mode [ 204.268808][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.270769][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.272568][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.274308][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.407045][ T7947] loop6: detected capacity change from 0 to 16 [ 204.411150][ T7947] erofs: (device loop6): mounted with root inode @ nid 36. [ 204.419996][ T7947] syz.6.987: attempt to access beyond end of device [ 204.419996][ T7947] loop6: rw=524288, sector=24, nr_sectors = 112 limit=16 [ 204.427368][ T7947] syz.6.987: attempt to access beyond end of device [ 204.427368][ T7947] loop6: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 204.431784][ T7947] ================================================================== [ 204.433244][ T7947] BUG: KASAN: use-after-free in z_erofs_transform_plain+0x3a4/0x490 [ 204.434808][ T7947] Read of size 4096 at addr ffff0000fdaca000 by task syz.6.987/7947 [ 204.436289][ T7947] [ 204.436718][ T7947] CPU: 0 PID: 7947 Comm: syz.6.987 Not tainted syzkaller #0 [ 204.438085][ T7947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 204.439939][ T7947] Call trace: [ 204.440588][ T7947] dump_backtrace+0x1c0/0x1ec [ 204.441535][ T7947] show_stack+0x2c/0x3c [ 204.442370][ T7947] __dump_stack+0x30/0x40 [ 204.443233][ T7947] dump_stack_lvl+0xf4/0x15c [ 204.444161][ T7947] print_address_description+0x88/0x218 [ 204.445275][ T7947] print_report+0x50/0x68 [ 204.446128][ T7947] kasan_report+0xa8/0xfc [ 204.446940][ T7947] kasan_check_range+0x258/0x290 [ 204.447907][ T7947] memcpy+0x48/0x90 [ 204.448651][ T7947] z_erofs_transform_plain+0x3a4/0x490 [ 204.449677][ T7947] z_erofs_decompress+0x9c/0xd4 [ 204.450608][ T7947] z_erofs_decompress_queue+0x100c/0x1b40 [ 204.451673][ T7947] z_erofs_runqueue+0x152c/0x16cc [ 204.452639][ T7947] z_erofs_read_folio+0x2d8/0x5c8 [ 204.453613][ T7947] filemap_read_folio+0x134/0x384 [ 204.454568][ T7947] filemap_read+0x12cc/0x2104 [ 204.455464][ T7947] generic_file_read_iter+0xf8/0x5c4 [ 204.456488][ T7947] vfs_read+0x3d4/0x7f0 [ 204.457262][ T7947] ksys_read+0x12c/0x224 [ 204.458039][ T7947] __arm64_sys_read+0x7c/0x90 [ 204.458923][ T7947] invoke_syscall+0x98/0x290 [ 204.459782][ T7947] el0_svc_common+0x138/0x258 [ 204.460662][ T7947] do_el0_svc+0x58/0x130 [ 204.461475][ T7947] el0_svc+0x58/0x128 [ 204.462228][ T7947] el0t_64_sync_handler+0x84/0xf0 [ 204.463198][ T7947] el0t_64_sync+0x18c/0x190 [ 204.464089][ T7947] [ 204.464565][ T7947] Allocated by task 39: [ 204.465359][ T7947] kasan_set_track+0x4c/0x80 [ 204.466235][ T7947] kasan_save_alloc_info+0x24/0x30 [ 204.467232][ T7947] __kasan_slab_alloc+0x70/0x88 [ 204.468178][ T7947] slab_post_alloc_hook+0x74/0x430 [ 204.469082][ T7947] kmem_cache_alloc_node+0x250/0x33c [ 204.470101][ T7947] __alloc_skb+0x128/0x714 [ 204.470989][ T7947] wireless_send_event+0x418/0xa04 [ 204.472004][ T7947] __cfg80211_ibss_joined+0x380/0x4ec [ 204.473088][ T7947] cfg80211_process_wdev_events+0x31c/0x498 [ 204.474280][ T7947] cfg80211_process_rdev_events+0xa8/0x124 [ 204.475457][ T7947] cfg80211_event_work+0x30/0x48 [ 204.476409][ T7947] process_one_work+0x7f8/0x13a4 [ 204.477395][ T7947] worker_thread+0x8c4/0xfec [ 204.478310][ T7947] kthread+0x250/0x2d8 [ 204.479145][ T7947] ret_from_fork+0x10/0x20 [ 204.479976][ T7947] [ 204.480440][ T7947] Freed by task 4652: [ 204.481186][ T7947] kasan_set_track+0x4c/0x80 [ 204.482029][ T7947] kasan_save_free_info+0x38/0x5c [ 204.483055][ T7947] ____kasan_slab_free+0x148/0x1b0 [ 204.484096][ T7947] __kasan_slab_free+0x18/0x28 [ 204.485060][ T7947] slab_free_freelist_hook+0x16c/0x1e8 [ 204.486186][ T7947] kmem_cache_free+0x118/0x314 [ 204.487124][ T7947] kfree_skbmem+0x10c/0x198 [ 204.487990][ T7947] kfree_skb_reason+0x1a0/0x418 [ 204.488913][ T7947] skb_release_data+0x3ec/0x63c [ 204.489837][ T7947] consume_skb+0xa0/0x104 [ 204.490677][ T7947] netlink_broadcast+0xf04/0x1058 [ 204.491634][ T7947] nlmsg_notify+0xf4/0x1d4 [ 204.492502][ T7947] rtnl_notify+0xa0/0xd8 [ 204.493336][ T7947] wireless_nlevent_process+0x90/0x10c [ 204.494371][ T7947] process_one_work+0x7f8/0x13a4 [ 204.495267][ T7947] worker_thread+0x8c4/0xfec [ 204.496148][ T7947] kthread+0x250/0x2d8 [ 204.496970][ T7947] ret_from_fork+0x10/0x20 [ 204.497870][ T7947] [ 204.498331][ T7947] The buggy address belongs to the object at ffff0000fdaca000 [ 204.498331][ T7947] which belongs to the cache skbuff_head_cache of size 240 [ 204.501200][ T7947] The buggy address is located 0 bytes inside of [ 204.501200][ T7947] 240-byte region [ffff0000fdaca000, ffff0000fdaca0f0) [ 204.503695][ T7947] [ 204.504158][ T7947] The buggy address belongs to the physical page: [ 204.505451][ T7947] page:00000000fcba2827 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x13daca [ 204.507442][ T7947] flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff) [ 204.508949][ T7947] raw: 05ffc00000000200 0000000000000000 dead000000000122 ffff0000c0860180 [ 204.510651][ T7947] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 204.512338][ T7947] page dumped because: kasan: bad access detected [ 204.513628][ T7947] [ 204.514084][ T7947] Memory state around the buggy address: [ 204.515222][ T7947] ffff0000fdac9f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 204.516815][ T7947] ffff0000fdac9f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 204.518339][ T7947] >ffff0000fdaca000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 204.519940][ T7947] ^ [ 204.520765][ T7947] ffff0000fdaca080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 204.522323][ T7947] ffff0000fdaca100: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 204.523884][ T7947] ================================================================== [ 204.526171][ T7947] Disabling lock debugging due to kernel taint [ 204.527415][ T7947] syz.6.987: attempt to access beyond end of device [ 204.527415][ T7947] loop6: rw=0, sector=16, nr_sectors = 8 limit=16 [ 204.561718][ T7669] device veth1_vlan entered promiscuous mode [ 204.564406][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.565906][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.568340][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 204.570196][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 204.571900][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.573780][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.592733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 204.594474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.596405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.598149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 204.600023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 204.605228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.607261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.609481][ T7663] device veth0_vlan entered promiscuous mode [ 204.657727][ T4495] device hsr_slave_0 left promiscuous mode [ 204.671446][ T4495] device hsr_slave_1 left promiscuous mode [ 204.710664][ T4495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.712492][ T4495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.714104][ T4495] device bridge_slave_1 left promiscuous mode [ 204.715300][ T4495] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.732227][ T4495] device bridge_slave_0 left promiscuous mode [ 204.733505][ T4495] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.870684][ T4495] team0 (unregistering): Port device team_slave_1 removed [ 207.030600][ T4495] team0 (unregistering): Port device team_slave_0 removed [ 207.190791][ T4495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.390838][ T4495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.901786][ T4495] bond0 (unregistering): Released all slaves [ 209.196604][ T7663] device veth1_vlan entered promiscuous mode [ 209.200993][ T7669] device veth0_macvtap entered promiscuous mode [ 209.205538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 209.207116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 209.208703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 209.220577][ T7669] device veth1_macvtap entered promiscuous mode [ 209.236914][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.238819][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.244887][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.246949][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.248819][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.253121][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.254800][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.257109][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.261519][ T7669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.263310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.265042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.273280][ T7923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 209.275060][ T7923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 209.278106][ T7663] device veth0_macvtap entered promiscuous mode [ 209.279977][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.286529][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.288456][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.298758][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.300789][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.302743][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.304567][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.306519][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.309104][ T7669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.311438][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 209.313181][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.314851][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.317302][ T7663] device veth1_macvtap entered promiscuous mode [ 209.322630][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.324912][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.326850][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.328900][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.331403][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.333263][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.336677][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.338683][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.343532][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.345443][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.347957][ T7663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.349574][ T7923] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 209.351807][ T7923] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.353572][ T7923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.356718][ T7669] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.358700][ T7669] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.362514][ T7669] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.364194][ T7669] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.368115][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.372926][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.374833][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.376682][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.378572][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.380722][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.382605][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.384578][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.386424][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.388408][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.393343][ T7663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.395139][ T7923] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.396896][ T7923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.415841][ T7663] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.417553][ T7663] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.419363][ T7663] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.421132][ T7663] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.434894][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.436409][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.437865][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 209.468332][ T7923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.469803][ T7923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.472824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 209.477390][ T7923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.478854][ T7923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.480691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 209.494898][ T7923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.496356][ T7923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.497802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 210.401492][ T4388] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.481376][ T4388] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.581698][ T4388] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.661301][ T4388] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.000757][ T4388] tipc: Left network mode [ 213.068572][ T4388] device hsr_slave_0 left promiscuous mode [ 213.102560][ T4388] device hsr_slave_1 left promiscuous mode [ 213.170571][ T4388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.172127][ T4388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.174032][ T4388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.175268][ T4388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.176774][ T4388] device bridge_slave_1 left promiscuous mode [ 213.177916][ T4388] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.212921][ T4388] device bridge_slave_0 left promiscuous mode [ 213.214160][ T4388] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.360182][ T4388] device veth1_macvtap left promiscuous mode [ 213.361318][ T4388] device veth0_macvtap left promiscuous mode [ 213.362467][ T4388] device veth1_vlan left promiscuous mode [ 213.363526][ T4388] device veth0_vlan left promiscuous mode