last executing test programs: 23m47.598275873s ago: executing program 32 (id=69): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001600010000000000000000000a0000000c00008008000a"], 0x20}}, 0x0) 18m47.257536035s ago: executing program 33 (id=1349): sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="180000000414010029bf7000ffdbff2508000180"], 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) 18m7.899057419s ago: executing program 34 (id=1476): r0 = syz_open_procfs(0x0, &(0x7f0000000900)='smaps\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000280)='/dev/vcsa\x00') pread64(r0, &(0x7f0000000000)=""/183, 0xb7, 0xa0000000000000) 17m58.982061764s ago: executing program 0 (id=1504): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}]}], {0x14}}, 0x50}}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x101002) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0xa, @pix={0x0, 0x3, 0x0, 0x3, 0x0, 0x4, 0x9, 0xfeedcafe, 0x3, 0x0, 0x8002, 0x4}}) 17m58.22243439s ago: executing program 0 (id=1506): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="d8000000210081044e810382db44b9040a00007ffefe0500002015000600142603600e1209000600fe7f00007f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ae5abb3dbe08141a90bffece0b42a9ecbee5de6ccd40dd6e4edef3d93c42a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xcb}, {&(0x7f0000000080)="2947ccfbab120bb6a8b56c98e1", 0xd}], 0x2}, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/213, 0xd5}, {0x0, 0x55}, {&(0x7f0000000440)=""/90}, {&(0x7f0000001700)=""/238}, {&(0x7f00000005c0)=""/112}, {&(0x7f0000000240)=""/4}], 0x2) 17m57.524049444s ago: executing program 0 (id=1507): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000000c0)) 17m56.677153428s ago: executing program 0 (id=1510): syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000002900)={[{@orlov}, {@grpid}, {@usrjquota}, {@grpid}, {@noload}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@bsdgroups}, {@grpid}, {@norecovery}]}, 0xfe, 0x499, &(0x7f0000002e80)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 17m54.985926738s ago: executing program 0 (id=1514): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 17m49.484011229s ago: executing program 0 (id=1528): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0x8, 0x4) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e26, 0x200000ff, @loopback, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000100)="a6", 0x1}], 0x1, &(0x7f0000000080)=[@dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @local}}], 0x20, 0x4855}, 0x24000052) 17m46.728997707s ago: executing program 35 (id=1528): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0x8, 0x4) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e26, 0x200000ff, @loopback, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000100)="a6", 0x1}], 0x1, &(0x7f0000000080)=[@dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @local}}], 0x20, 0x4855}, 0x24000052) 6m4.665661266s ago: executing program 1 (id=3895): r0 = getpid() r1 = getpid() kcmp(r0, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 6m3.991075318s ago: executing program 1 (id=3898): syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x5, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 6m2.090785028s ago: executing program 1 (id=3904): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f00000002c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x20000800) 6m1.119103788s ago: executing program 1 (id=3908): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000040)='./file1\x00', 0x180c850, &(0x7f0000000200)={[{@shortname_win95}, {@shortname_winnt}, {@numtail}, {@numtail}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@numtail}, {@shortname_mixed}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@uni_xlate}, {@utf8no}, {@numtail}]}, 0x1, 0x371, &(0x7f0000002980)="$eJzs3U9oHNUfAPDvdvK30CaHH5SfIIzeBA39gwfFQ0pJobgXlaXqQVxsqpKNhSwupodu40U8Ch4VBC/iQQ8eehZBEW8evFpBq+JBeytYfLK7s7uz3U0aKWkNfj6H4Zvve2/ee5OX7GSSfXlxOdbOTcf569evxdxcJaaWTy3HjUosRhZ9l2PczIQcALA/3Egp/kg9u2xS2eMhAQB7rPv6//KhUubNL3eqn7z6A8C+V/z8P79Tnbnx1E9PdI4X9m5cAMDeGXv+/+BI8czor/qnSn8VAADsV8889/yTJ6sRT+f5XMT6W61aqxaPD8tPno9XoxGrcTQW4mZE70ahc6h0j6fPVFeO5nnejp8XoxYRH7RqEevtVq13p3Ay67afjWOxEItF++JuI6WUnf6sunIs74qIy+1u/7FeadWm42DR//cHYzWORx7/G2sfcaa6cjwvTlBb77dvR2wNn1t0xr8UC/HtS3EhGnFu/myk1L+tqa5cOpbnp1J1pH2rNhvnBldhwhMQAAAAAAAAAAAAAAAAAAAAAAC4A0v5wOJg/5s03L9naWlCeXd/nF77Yn+grd7+QGk2RUq/v/FI7e0sRvYHunV/nlZtKg7c26kDAAAAAAAAAAAAAAAAAADAv0ZzcybqjcbqRnPz4lo5aG80Nw9ERCfz2teffDEf43VuE0wVfZSK8iJ1ca2esn7llI3UKYKs03k/8/GVwYjLdWYHs5g4jNntixqNQw/8+N4wc3/WP/NfwzpZTJ5gdsswysH64d6QBpnp4ZS3vWIniuD4ba7q1ZTSdue59MJ4q6hETP3zT9zOQeoEX1175f8nmkce7WY+Tz0PPbxw9uq7H/66Vm90eu5ofDSz0byZ1urFx5MX2/ZBVlo/leIaVsorYWqn5lujmXr23W/P3vfON7vrPZUzr0+ok/Wm8+lGc7NSfKV0i2Z6QSd3S6v5xplsbCVMT1j8dxZMXGxH3l+uX7n0wy+7PU/pm4SNOgAAAAAAAAAAAAAAAAAA4K4ovVe8ULzZd3qnVo89VQRzezs6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALg7hv//vxRsjWV2E/zZjvGi2dWNZsThez1NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+4/4OAAD//5U3aTg=") chdir(&(0x7f0000000040)='./file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) 5m59.286183406s ago: executing program 1 (id=3918): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x103) 5m58.307307484s ago: executing program 1 (id=3924): syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') close(0x3) 5m42.729130692s ago: executing program 36 (id=3924): syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') close(0x3) 5m16.878738396s ago: executing program 8 (id=4049): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x107f, 0x80, 0x4d, 0xfffffff2, 0x8001, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x2006, 0x207, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x10000, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x20000001, 0x6, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0x9, 0x1005, 0x7ff, 0x5f31, 0x4, 0x9, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x93a, 0x9, 0xff], [0x7, 0xffffffff, 0x0, 0x64e, 0xfffffdfe, 0x400, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xffffffff, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x82, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0xfffff8b5, 0xbf, 0x5, 0x3, 0x400000, 0x6, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x83], [0x9, 0xbb33, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x8000005, 0xce7, 0x1fc, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x63, 0x1, 0x20000001, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000005, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1d, 0x8, 0x9, 0x1, 0x6c0b, 0x80000000, 0x2, 0x2, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000211400000011"], 0xd8}}, 0x8090) 5m15.788230445s ago: executing program 8 (id=4053): unshare(0x2c020680) r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg$unix(r0, &(0x7f0000004540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x141, &(0x7f00000046c0)) 5m14.836525787s ago: executing program 8 (id=4056): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x804cd8, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES64], 0x3, 0x233, &(0x7f0000000100)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) 5m13.838138714s ago: executing program 8 (id=4060): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000580)={[{@nomblk_io_submit}, {@journal_dev={'journal_dev', 0x3d, 0x3f2}}, {@noload}]}, 0x3, 0x482, &(0x7f0000001240)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) 5m11.802723527s ago: executing program 8 (id=4066): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f000000cf00)="$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") 5m10.402701666s ago: executing program 8 (id=4070): r0 = fsopen(&(0x7f0000000040)='bdev\x00', 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x5, &(0x7f0000000000)='sync\x00', 0x0, 0x0) 5m7.48821191s ago: executing program 37 (id=4070): r0 = fsopen(&(0x7f0000000040)='bdev\x00', 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x5, &(0x7f0000000000)='sync\x00', 0x0, 0x0) 4m26.928129973s ago: executing program 7 (id=4167): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a40)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x6, 0x1000000000000001, 0x5, 0x42, 0x4, 0xfffffffffffffffd, 0x66c}) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) 4m25.591255131s ago: executing program 7 (id=4171): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x200, 0x208, 0x2, 0xe, r1}, &(0x7f0000000140)=0x10) 4m24.63599597s ago: executing program 7 (id=4174): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xa99604aa03370af) 4m23.547791469s ago: executing program 7 (id=4177): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x400, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1, 0x5fb, &(0x7f0000000c80)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 4m22.156851191s ago: executing program 7 (id=4181): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x0, 0x300}}, 0x26}}, 0x0) 4m21.128449993s ago: executing program 7 (id=4182): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)={0x28, r1, 0x1, 0x3, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x28}}, 0x0) 4m18.879855276s ago: executing program 38 (id=4182): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)={0x28, r1, 0x1, 0x3, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x28}}, 0x0) 3m52.113438965s ago: executing program 6 (id=4226): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0700000001003f", 0x7) 3m51.373393582s ago: executing program 6 (id=4228): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xd1}, 0xe) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x4, 0x0, &(0x7f0000000000)) 3m50.918302128s ago: executing program 6 (id=4229): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) setitimer(0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) 3m50.030112665s ago: executing program 6 (id=4231): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 3m49.11395826s ago: executing program 6 (id=4233): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x4c, r1, 0x1, 0x70bd2d, 0x1, {0x4e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab, 0xfffffffc}}, {0x8, 0xb, 0x80000b6b}, {0x6}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4044040) 3m48.446562133s ago: executing program 6 (id=4235): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/fscreate\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3m46.12140205s ago: executing program 39 (id=4235): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/fscreate\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 30.878800624s ago: executing program 4 (id=4684): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000c58000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000d62000/0x3000)=nil) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000000)=0x102) 26.990723644s ago: executing program 4 (id=4697): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e22, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)={r1, 0x5}, 0x8) 25.241194308s ago: executing program 4 (id=4701): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TCFLSH(r0, 0x400455c8, 0x4000000) 22.102913677s ago: executing program 4 (id=4712): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000240)) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./bus\x00') 21.14743894s ago: executing program 4 (id=4715): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7f, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0x2, 0x1, 0x9, 0x4, 0xa}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x44, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x8009ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa004, 0x8, 0x5, 0x20000a17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x6, 0xfff, 0xe4af, 0x0, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x80000000}, {0x2, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0xb904, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x1d00, 0x5, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x6, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0x101, 0x9}, {0x0, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x3, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x1, 0xa4, 0x4, 0x7}, {0x5, 0xe4, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0x42, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d6, 0xfffffffb}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffdfff, 0x5}, {0x7, 0x3, 0x3, 0x7, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0xb, 0xfffffffe, 0x800, 0x0, 0x1}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0x9d, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0xffffffff, 0xc0, 0xfffff44c}, {0x4, 0x3, 0xfffffff5, 0x9, 0xbe, 0x4}, {0x20006, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x5, 0x9, 0xbc, 0x11}, {0x1ff, 0xfffffffc, 0xf, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x0, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x0, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x7f, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0xa, 0x100006, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x381, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x9, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x200, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x0, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x5, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x3f, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x7, 0x1, 0x3b1c, 0x2, 0x6}, {0x100004, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0x40000fff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x0, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x84, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x405}, {0x7011, 0xfff, 0x9, 0x1, 0x40000009, 0x2}, {0x1, 0xff, 0x9, 0x2968, 0x2, 0xfffffffc}, {0x0, 0x9, 0xc402, 0x2, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x3, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0x7, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x7f, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x54, 0x6, 0x2f, 0x7}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x8000, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x2, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x7ffc, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0xc, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5}, {}, {0x5}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x6}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 19.371170473s ago: executing program 4 (id=4721): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}], 0x1, 0x40408d1) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x82, &(0x7f00000001c0)=@sack_info={0x0, 0xffff, 0x8}, &(0x7f0000000200)=0xc) 15.9409772s ago: executing program 40 (id=4721): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}], 0x1, 0x40408d1) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x82, &(0x7f00000001c0)=@sack_info={0x0, 0xffff, 0x8}, &(0x7f0000000200)=0xc) 9.174539214s ago: executing program 5 (id=4743): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="05002dbd7000ffdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="6400238006000c000a"], 0x80}}, 0x0) 8.116251534s ago: executing program 3 (id=4747): r0 = fsopen(&(0x7f0000000100)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 7.993203685s ago: executing program 5 (id=4748): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000002c0)={0x1, 0xfffffffffffffff9, 0x8a, &(0x7f0000000200)=""/138}) 7.218757303s ago: executing program 3 (id=4751): dup(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12011001000000402f17010500000000000109022400010000000009040000010300030009210010010122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x0, 0x11, 0x8, {0x8, 0xb, "2424467e240f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6.870213986s ago: executing program 9 (id=4752): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) epoll_create(0x6) pselect6(0x40, &(0x7f0000004c00)={0x1e, 0x1, 0x3, 0x6, 0x10001, 0x1, 0x4229, 0x80000000000f64}, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x2}}, 0x20) 6.389330762s ago: executing program 2 (id=4753): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$unix(r1, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 6.142158988s ago: executing program 5 (id=4754): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) 5.85473394s ago: executing program 9 (id=4755): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000640)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fcdbdf250c0000000c00018008000100", @ANYRES32=r2, @ANYBLOB="140003800400050008000200140023"], 0x34}}, 0x4040) 4.77185233s ago: executing program 2 (id=4756): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000004f00)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x6, @local, 0x6}, 0x1c, 0x0}}], 0x1, 0x240c0080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8031, 0xffffffffffffffff, 0x6e138000) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, 0x0) 4.612078506s ago: executing program 9 (id=4757): unshare(0x26020480) r0 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r0, 0x2) shutdown(r0, 0x2) 3.941917366s ago: executing program 3 (id=4758): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x70bd2b, 0xffffffff, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x4, 0x0, 0x0, 0x82, 0xa}, 0x40000000}, [@migrate={0x50, 0x11, [{@in=@broadcast, @in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@private=0xa010100, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 3.725944253s ago: executing program 9 (id=4759): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000240), 0xff, 0x548, &(0x7f0000001880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 3.364757993s ago: executing program 5 (id=4760): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.139171968s ago: executing program 2 (id=4761): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', '', [], 0xa, "00104194adfbf5fb5931fd8ee58224da0dc56470da24135e42258cf8c5e2a5163908cff540cb55d6b824adeaf1aaccf2730db736bdbea957d39dcbdf76568dc0c404bb5d185422d11109eb812dc49211f84b3613f5e53422313a65e7b77b42737b3d33e3ea7ce237322710d0e2c590774d86330b36247b52b40e2789fe98b07b2dc7a88f05c6aba3"}, 0x8c) 3.06380264s ago: executing program 3 (id=4762): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r0, 0x1) 2.005686091s ago: executing program 2 (id=4763): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x8253, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 1.946766349s ago: executing program 3 (id=4764): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000aeb62f9b0100000000000000000400004a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x8}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20080041}, 0x20008090) 1.390886255s ago: executing program 9 (id=4765): mkdir(&(0x7f0000000040)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) inotify_add_watch(r0, &(0x7f0000000080)='./control\x00', 0xa0000000) 1.318915328s ago: executing program 5 (id=4766): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0xfd, 0x3ad, &(0x7f0000000340)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000000c0)=""/31, 0x1f) getdents(r0, 0x0, 0x58) 1.130731595s ago: executing program 2 (id=4767): io_setup(0x2, &(0x7f0000000000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000180)=0x2, 0x9, 0x1) 954.816283ms ago: executing program 3 (id=4768): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x697, &(0x7f0000001240)="$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") syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x495, &(0x7f0000000540)="$eJzs29trHGUYx/HfM8luNttqt22aVil0VVCpWHPo0XjRQwwVekjTRqSoEJtNXJoT2VTaIlq88dYbb0REQUGqaEHEG6+0d/4BCoKgF16I4F54AEGQmX1nZ7LZtkn3kGz7/UC7k3eemXkP+8777s67AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0uGnD/X02mrnAgAANNOJ0yM9fYz/AADcVc7w+R8AAOBuYvL0g0yDI0U7HvxdkjqWn7lwcXRwqPphnRYc2RbE+/9SvX39u/fs3bc/fL358fV2n06ePnMoe2R2em4+VyjkxrOjM/lzs+O5ZZ+h1uMr7QwqIDt9/sL4xEQh27erf9Hui5lfO9Z1Zwb2dR/0wtjRwaGh07GY9sRtX32JG83wk/K0TabfH/7MTkjyVHtd3OK902idQSF2BoUYHRwKCjKVH5tZ8HcOhxXhubI6ybCOmtAWNemS/HxZsj6f2RLydFCm7l+KdlJSW1gPjwVfDN/4wPa6XP62+fl8QdKDaoE2W8M65OknmaY3pDS8+s2KJmuXp4sy/TlQtFPB/cDvT/5t89iz2WdmJmZjscPmelSrjw/NtMbvTSl5OhHc8Ys2stqZQdP5k6W3ZdryySvBvELBvHTDwL4nT/XHZxhbb3EeP3aXmz8uZ0xOuNhhGzbz6l8uAAAAAAAAAFKHefpepuLX2SgxY/Jij4xTKj0Yyq5OFgE0inl6R6ZTI8Xga/j4upS22PqeslZ/9tfY/HemjszOXZrPT768UHV/OnXopcLC/Ni56rvV6d9n2+Ipt1rHUqOEeUrK9PxfH1v5uqX7v1sKEOXmo6eiNTOpyusH75t7S+uZwmdIB85ujW9XzfIKno/61zTztCDT4U3b3FqVtJbUmUpxX8j0x/vbXZyX9DMfnjZTOuNEfirX48d+I9MH/4WxwbIorXOxm6PYXj/WZHrr+OLY9S62K4rt82OHZLr+YvXYLVFsvx/7hkxzv2XD2LQfu8PFdkexu87NTo1Xq0pgpfz+/7NM73VlLewb7aX339L+/2o0FlypPNEN+nyt/T8TS7vi+vVZv///vS3oy0H/96r3/zdl+vTL7S6u1PeSbv/G4P+o/z8n0+R3i2PTLnZTFNu77IptEX77b5fp6JZr5bpx7e9aIGq1ePvfX/nuaFD7b4ylZdx1O+pTdEgqXLp8fmxqKjfPRq0brkavrJX8rJGNHWsjG2yscGOVb0xoCn/8/9yfRX31Y3m+48Z/9zElmln981o0/g9UnqhB4/+mWNqAm40k2qXUwvRcYquUKly6/Hh+emwyN5mb2d2zt2fP7gO9B/YnkuHkLtqqua7uRH77fyvTv+uulj/vLp7/VZ//pytP1KD23xxLSy+ar9RcdLj2vyrTA9evlb+XuNn8P/z+59GHSq/l/tmg9u+KpWXcde+pT9EBAAAAAAAAAAAAAAAAoKUlzNOHMh19ot3C35otZ/3fkh+gNWj9V3csbbxJv1eouVIBoAV48vSuTI+oaK/7Ceul4/FX3NH+DwAA///WsSBT") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) 94.761091ms ago: executing program 5 (id=4769): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x10, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000280)="18", 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x4e23, 0x7f, @rand_addr=' \x01\x00', 0x37}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000980)="f3", 0x1}], 0x1}}], 0x2, 0x4000014) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xf404}, 0x8) 45.792248ms ago: executing program 2 (id=4770): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) 0s ago: executing program 9 (id=4771): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf0b, 0x2000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0x2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44004}, 0x4001) r0 = socket$inet_udp(0x2, 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) kernel console output (not intermixed with test programs): 1.019104][T16413] BTRFS error (device loop7): failed to load root extent [ 1401.026895][T16413] BTRFS warning (device loop7): try to load backup roots slot 1 [ 1401.046949][ T12] BTRFS warning (device loop7): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1401.061733][T16413] BTRFS warning (device loop7): couldn't read tree root [ 1401.068965][T16413] BTRFS warning (device loop7): try to load backup roots slot 2 [ 1401.095014][ T56] BTRFS error (device loop7): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1401.165432][T16413] BTRFS warning (device loop7): couldn't read tree root [ 1401.173439][T16413] BTRFS warning (device loop7): try to load backup roots slot 3 [ 1401.228170][T16413] BTRFS info (device loop7): rebuilding free space tree [ 1401.280582][T16413] BTRFS info (device loop7): checking UUID tree [ 1401.292560][T16413] BTRFS info (device loop7): enabling ssd optimizations [ 1401.299746][T16413] BTRFS info (device loop7): turning on sync discard [ 1401.307285][T16413] BTRFS info (device loop7): enabling free space tree [ 1401.317050][T16413] BTRFS info (device loop7): force clearing of disk cache [ 1401.328152][T16413] BTRFS info (device loop7): enabling auto defrag [ 1401.335013][T16413] BTRFS info (device loop7): trying to use backup root at mount time [ 1401.345988][T16413] BTRFS info (device loop7): use zstd compression, level 3 [ 1401.825607][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1401.902201][ T9643] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1401.918460][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1401.978095][ T35] bond0 (unregistering): Released all slaves [ 1402.169468][T16410] netlink: 'syz.3.4154': attribute type 3 has an invalid length. [ 1402.289911][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.297773][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1402.681270][ T5577] Bluetooth: hci2: command tx timeout [ 1402.694915][ T35] hsr_slave_0: left promiscuous mode [ 1402.731679][ T35] hsr_slave_1: left promiscuous mode [ 1402.758132][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1402.796894][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1402.869496][ T35] veth1_vlan: left promiscuous mode [ 1402.901215][ T35] veth0_vlan: left promiscuous mode [ 1403.703369][T14719] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1403.882822][T14719] usb 4-1: Using ep0 maxpacket: 16 [ 1403.901994][T14719] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1403.938620][T14719] usb 4-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 1403.966585][T14719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.011304][T14719] usb 4-1: config 0 descriptor?? [ 1404.419760][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1404.488635][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1404.512572][T14719] betop 0003:8380:1850.0020: report_id 59171 is invalid [ 1404.535214][T14719] betop 0003:8380:1850.0020: item 0 2 1 8 parsing failed [ 1404.568760][T14719] betop 0003:8380:1850.0020: parse failed [ 1404.598075][T14719] betop 0003:8380:1850.0020: probe with driver betop failed with error -22 [ 1404.742904][T14719] usb 4-1: USB disconnect, device number 16 [ 1405.474234][ T5230] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1405.746206][T16453] loop3: detected capacity change from 0 to 128 [ 1405.826385][T16453] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1405.875226][T16453] hpfs: filesystem error: improperly stopped [ 1405.930447][T16453] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1405.977628][T16453] hpfs: You really don't want any checks? You are crazy... [ 1406.043901][T16453] hpfs: hpfs_map_sector(): read error [ 1406.095656][T16453] hpfs: code page support is disabled [ 1406.121727][T16453] hpfs: hpfs_map_4sectors(): unaligned read [ 1406.165522][T16453] hpfs: hpfs_map_4sectors(): unaligned read [ 1406.192901][T16453] hpfs: filesystem error: unable to find root dir [ 1406.949532][T16465] loop7: detected capacity change from 0 to 256 [ 1407.934348][T16473] loop7: detected capacity change from 0 to 512 [ 1408.120666][T16473] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1408.150228][T16473] ext4 filesystem being mounted at /524/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1408.804059][ T9643] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1410.218416][T16500] loop3: detected capacity change from 0 to 1024 [ 1410.380384][T16500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1410.626334][T16500] EXT4-fs warning (device loop3): ext4_empty_dir:3104: inode #11: comm syz.3.4173: directory missing '..' [ 1411.095801][ T5582] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1411.257476][T16359] bridge0: port 1(bridge_slave_0) entered blocking state [ 1411.304009][T16359] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.373270][T16359] bridge_slave_0: entered allmulticast mode [ 1411.407319][T16517] loop7: detected capacity change from 0 to 1024 [ 1411.439062][T16359] bridge_slave_0: entered promiscuous mode [ 1411.561966][T16359] bridge0: port 2(bridge_slave_1) entered blocking state [ 1411.617115][T16359] bridge0: port 2(bridge_slave_1) entered disabled state [ 1411.688151][T16359] bridge_slave_1: entered allmulticast mode [ 1411.733218][T16359] bridge_slave_1: entered promiscuous mode [ 1412.375751][T16359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1412.480246][T16359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1412.792758][T16525] loop6: detected capacity change from 0 to 4096 [ 1413.169634][T16359] team0: Port device team_slave_0 added [ 1413.177796][T16525] ntfs3(loop6): ino=19, mi_enum_attr [ 1413.229794][T16525] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1413.327581][T16359] team0: Port device team_slave_1 added [ 1413.820029][ T5230] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1413.865726][T16359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1413.913789][T16359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1414.000790][T16359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1414.100330][ T1088] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.187790][T16359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1414.195662][T16359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1414.297899][T16359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1414.351288][T16127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1414.436516][ T1088] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.692024][ T1088] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.817349][T16359] hsr_slave_0: entered promiscuous mode [ 1414.833616][T16359] hsr_slave_1: entered promiscuous mode [ 1414.846490][T16359] debugfs: 'hsr0' already exists in 'hsr' [ 1414.861103][T16359] Cannot create hsr debugfs directory [ 1414.935497][ T1088] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.241364][ T1088] bridge_slave_1: left allmulticast mode [ 1416.276769][ T1088] bridge_slave_1: left promiscuous mode [ 1416.310293][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.385421][ T1088] bridge_slave_0: left allmulticast mode [ 1416.418083][ T1088] bridge_slave_0: left promiscuous mode [ 1416.461937][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.739591][T16544] loop3: detected capacity change from 0 to 4096 [ 1416.910016][T16550] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1416.977848][T15840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1416.988232][T15840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1417.000448][T15840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1417.031759][T15840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1417.047326][T15840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1418.041432][ T9125] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 1418.097809][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1418.154356][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1418.172059][ T1088] bond0 (unregistering): Released all slaves [ 1418.230217][ T9125] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1418.246292][ T9125] usb 4-1: config 0 has no interface number 0 [ 1418.274370][ T9125] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1418.300450][ T9125] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1418.334604][ T9125] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1418.351939][ T9125] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.374381][ T9125] usb 4-1: Product: syz [ 1418.386084][ T9125] usb 4-1: Manufacturer: syz [ 1418.403082][ T9125] usb 4-1: SerialNumber: syz [ 1418.424142][ T9125] usb 4-1: config 0 descriptor?? [ 1418.679866][ T9125] keyspan 4-1:0.132: Keyspan 1 port adapter converter detected [ 1418.753671][ T9125] keyspan 4-1:0.132: found no endpoint descriptor for endpoint 81 [ 1418.805918][ T9125] keyspan 4-1:0.132: found no endpoint descriptor for endpoint 1 [ 1418.831748][ T9125] keyspan 4-1:0.132: found no endpoint descriptor for endpoint 2 [ 1418.862542][ T9125] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1418.912337][ T9125] usb 4-1: USB disconnect, device number 17 [ 1418.990969][ T9125] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1419.068167][ T9125] keyspan 4-1:0.132: device disconnected [ 1419.086623][T16567] loop6: detected capacity change from 0 to 256 [ 1419.130300][ T5844] udevd[5844]: setting owner of /dev/bus/usb/004/017 to uid=0, gid=0 failed: No such file or directory [ 1419.172421][T15840] Bluetooth: hci1: command tx timeout [ 1419.479588][T16567] FAT-fs (loop6): Directory bread(block 64) failed [ 1419.518749][T16567] FAT-fs (loop6): Directory bread(block 65) failed [ 1419.544231][T16567] FAT-fs (loop6): Directory bread(block 66) failed [ 1419.587886][T16567] FAT-fs (loop6): Directory bread(block 67) failed [ 1419.608570][T16127] veth0_vlan: entered promiscuous mode [ 1419.647792][T16567] FAT-fs (loop6): Directory bread(block 68) failed [ 1419.696657][T16567] FAT-fs (loop6): Directory bread(block 69) failed [ 1419.724571][T16567] FAT-fs (loop6): Directory bread(block 70) failed [ 1419.792959][T16567] FAT-fs (loop6): Directory bread(block 71) failed [ 1419.823602][T16567] FAT-fs (loop6): Directory bread(block 72) failed [ 1419.839861][T16567] FAT-fs (loop6): Directory bread(block 73) failed [ 1419.957067][ T1088] hsr_slave_0: left promiscuous mode [ 1420.014821][ T1088] hsr_slave_1: left promiscuous mode [ 1420.070093][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1420.108969][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1420.181533][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1420.189236][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1420.297374][ T1088] veth1_macvtap: left promiscuous mode [ 1420.319430][ T1088] veth0_macvtap: left promiscuous mode [ 1420.335249][ T1088] veth1_vlan: left promiscuous mode [ 1420.354798][ T1088] veth0_vlan: left promiscuous mode [ 1421.246743][T15840] Bluetooth: hci1: command tx timeout [ 1421.420659][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 1421.478414][ T1088] team0 (unregistering): Port device team_slave_0 removed [ 1421.798218][ T5230] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1421.905356][T16576] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1421.960250][T16576] batman_adv: batadv0: Adding interface: gretap1 [ 1421.990748][T16576] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1422.041587][T16576] batman_adv: batadv0: Interface activated: gretap1 [ 1422.407839][T16579] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4194'. [ 1422.504870][T16581] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4194'. [ 1422.539477][T16127] veth1_vlan: entered promiscuous mode [ 1423.321274][T15840] Bluetooth: hci1: command tx timeout [ 1423.333046][T16587] loop6: detected capacity change from 0 to 64 [ 1423.456460][T16587] hfs: small file entry [ 1423.867227][T16359] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1423.936557][T16359] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1424.078207][T16359] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1424.124437][T16359] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1424.158566][T16359] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1424.188094][T16359] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1424.198923][T16359] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1424.336210][T16359] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1424.518233][T16127] veth0_macvtap: entered promiscuous mode [ 1424.830049][T16127] veth1_macvtap: entered promiscuous mode [ 1425.401705][T15840] Bluetooth: hci1: command tx timeout [ 1425.454882][T16127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1425.644106][T16127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1425.790070][ T1088] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.834548][ T1088] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.868443][ T1088] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.913155][ T1088] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.442053][T16612] netlink: 'syz.6.4203': attribute type 5 has an invalid length. [ 1427.648001][T16359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1428.134506][T16359] 8021q: adding VLAN 0 to HW filter on device team0 [ 1428.247178][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1428.254929][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1428.508257][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1428.516068][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1429.268732][T16549] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.303267][T16549] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.339870][T16549] bridge_slave_0: entered allmulticast mode [ 1429.368277][T16549] bridge_slave_0: entered promiscuous mode [ 1429.588455][T16549] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.618244][T16549] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.649270][T16549] bridge_slave_1: entered allmulticast mode [ 1429.678640][ T5577] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1429.695701][ T5577] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1429.707721][T16549] bridge_slave_1: entered promiscuous mode [ 1429.716168][ T5577] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1429.771739][ T5577] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1429.799945][ T5577] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1430.337071][ T5230] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1430.485772][T16549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1430.644263][T16638] loop6: detected capacity change from 0 to 24 [ 1430.660738][T16549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1431.285724][T16549] team0: Port device team_slave_0 added [ 1431.581871][T16549] team0: Port device team_slave_1 added [ 1431.962071][T15840] Bluetooth: hci5: command tx timeout [ 1432.371564][T16549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1432.417225][T16549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1432.417392][T16549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1432.503163][T16549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1432.503241][T16549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1432.503403][T16549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1432.866260][T13353] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1432.875970][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1433.637503][T13353] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.700080][T16650] loop6: detected capacity change from 0 to 40427 [ 1433.704972][T16650] F2FS-fs: heap/no_heap options were deprecated [ 1433.715674][T16650] F2FS-fs (loop6): Invalid log sectorsize (512) [ 1433.715788][T16650] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1433.726192][T16650] F2FS-fs (loop6): invalid crc value [ 1433.744296][T16650] F2FS-fs (loop6): invalid crc_offset: 65535 [ 1433.744523][T16650] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 1433.910340][T16549] hsr_slave_0: entered promiscuous mode [ 1434.000045][T16549] hsr_slave_1: entered promiscuous mode [ 1434.042172][T15840] Bluetooth: hci5: command tx timeout [ 1434.069966][T16549] debugfs: 'hsr0' already exists in 'hsr' [ 1434.098232][T16549] Cannot create hsr debugfs directory [ 1434.394438][T13353] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.116062][T13353] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.121363][T15840] Bluetooth: hci5: command tx timeout [ 1436.819589][T16681] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4215'. [ 1437.405795][T13353] bridge_slave_1: left allmulticast mode [ 1437.434984][T13353] bridge_slave_1: left promiscuous mode [ 1437.472337][T13353] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.540059][T13353] bridge_slave_0: left allmulticast mode [ 1437.588886][T13353] bridge_slave_0: left promiscuous mode [ 1437.607401][T13353] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.217366][T15840] Bluetooth: hci5: command tx timeout [ 1438.678166][T13353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1438.724536][T13353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1438.756729][T16693] loop3: detected capacity change from 0 to 4096 [ 1438.765418][T13353] bond0 (unregistering): Released all slaves [ 1438.815999][T16693] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 1439.213923][T16693] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1439.319490][T16693] ntfs3(loop3): ino=19, mi_enum_attr [ 1439.474099][T13353] hsr_slave_0: left promiscuous mode [ 1439.489835][T16693] ntfs3(loop3): failed to convert "c46c" to ascii [ 1439.513770][T13353] hsr_slave_1: left promiscuous mode [ 1439.545568][T16693] ntfs3(loop3): ino=20, mi_enum_attr [ 1439.554193][T13353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1439.589397][T13353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1439.703383][T13353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1439.755139][T13353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1439.867015][T13353] veth1_macvtap: left promiscuous mode [ 1439.895535][T13353] veth0_macvtap: left promiscuous mode [ 1439.920177][T13353] veth1_vlan: left promiscuous mode [ 1439.966636][T13353] veth0_vlan: left promiscuous mode [ 1441.584117][T16719] loop6: detected capacity change from 0 to 512 [ 1441.652869][T16719] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.4225: inode has both inline data and extents flags [ 1441.695753][T16719] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1441.701102][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1441.717309][ C0] EXT4-fs (loop6): initial error at time 1780270984: ext4_orphan_get:1397: inode 15 [ 1441.727201][ C0] EXT4-fs (loop6): last error at time 1780270984: ext4_orphan_get:1397: inode 15 [ 1441.758621][T16719] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.4225: couldn't read orphan inode 15 (err -117) [ 1441.836394][T16719] loop6: lost filesystem error report for type 5 error -117 [ 1441.849032][T16719] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1442.248356][T13353] team0 (unregistering): Port device team_slave_1 removed [ 1442.317568][ T9259] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1442.363890][T13353] team0 (unregistering): Port device team_slave_0 removed [ 1443.136806][T16729] loop3: detected capacity change from 0 to 1024 [ 1443.975943][T16736] syz.6.4229 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1444.368754][T16742] loop3: detected capacity change from 0 to 64 [ 1444.969357][T16359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1446.476080][ T1088] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.563640][T16549] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1446.674225][T16549] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1446.733436][T16549] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1446.841929][T16549] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1446.909089][ T1088] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.938798][T16549] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1447.039008][T16549] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1447.144917][ T1088] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.194221][T16549] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1447.285602][T16549] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1447.388636][ T1088] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.008969][T16631] bridge0: port 1(bridge_slave_0) entered blocking state [ 1448.042689][T16631] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.070001][T16631] bridge_slave_0: entered allmulticast mode [ 1448.088029][T16631] bridge_slave_0: entered promiscuous mode [ 1448.199308][T16631] bridge0: port 2(bridge_slave_1) entered blocking state [ 1448.239610][T16631] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.256497][T16631] bridge_slave_1: entered allmulticast mode [ 1448.274377][T16631] bridge_slave_1: entered promiscuous mode [ 1448.596365][T16776] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.4237'. [ 1448.636072][T16776] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.4237'. [ 1448.679142][T16631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1448.721847][ T1088] bridge_slave_1: left allmulticast mode [ 1448.740028][ T1088] bridge_slave_1: left promiscuous mode [ 1448.749215][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.805469][ T1088] bridge_slave_0: left allmulticast mode [ 1448.838286][ T1088] bridge_slave_0: left promiscuous mode [ 1448.864625][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.919477][ T1088] tipc: Resetting bearer [ 1448.948799][ T1088] batman_adv: batadv0: Interface deactivated: gretap1 [ 1449.417883][ T5577] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1449.438271][ T5577] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1449.466257][ T5577] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1449.493279][T16130] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1449.508271][T16130] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1449.915170][ T1088] tipc: Disabling bearer [ 1450.057761][ T1088] batman_adv: batadv0: Removing interface: gretap1 [ 1450.390697][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1450.450781][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1450.485778][ T1088] bond0 (unregistering): Released all slaves [ 1450.569146][T16631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1451.611720][T16130] Bluetooth: hci0: command tx timeout [ 1451.627814][T16795] loop3: detected capacity change from 0 to 32768 [ 1451.640538][T16795] btrfs: Deprecated parameter 'usebackuproot' [ 1451.647195][T16795] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1451.659831][T16795] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4241 (16795) [ 1451.685961][T16795] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1451.696697][T16795] BTRFS info (device loop3): using crc32c checksum algorithm [ 1451.830585][T13353] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1451.905929][T16795] BTRFS error (device loop3): failed to load root extent [ 1451.916100][T16795] BTRFS warning (device loop3): try to load backup roots slot 1 [ 1451.924990][T15910] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1451.947578][T16795] BTRFS warning (device loop3): couldn't read tree root [ 1451.954933][T16795] BTRFS warning (device loop3): try to load backup roots slot 2 [ 1451.964055][T13353] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1452.015350][T16795] BTRFS warning (device loop3): couldn't read tree root [ 1452.023215][T16795] BTRFS warning (device loop3): try to load backup roots slot 3 [ 1452.068775][T16795] BTRFS info (device loop3): rebuilding free space tree [ 1452.118778][T16795] BTRFS info (device loop3): checking UUID tree [ 1452.130161][T16795] BTRFS info (device loop3): enabling ssd optimizations [ 1452.138215][T16795] BTRFS info (device loop3): turning on sync discard [ 1452.145387][T16795] BTRFS info (device loop3): enabling free space tree [ 1452.155099][T16795] BTRFS info (device loop3): force clearing of disk cache [ 1452.162626][T16795] BTRFS info (device loop3): enabling auto defrag [ 1452.169269][T16795] BTRFS info (device loop3): trying to use backup root at mount time [ 1452.177723][T16795] BTRFS info (device loop3): use zstd compression, level 3 [ 1452.182717][ T1088] tipc: Disabling bearer [ 1452.215694][ T1088] tipc: Disabling bearer [ 1452.223404][ T1088] tipc: Left network mode [ 1452.237025][T16631] team0: Port device team_slave_0 added [ 1452.274458][ T1088] IPVS: stopping master sync thread 13198 ... [ 1452.358511][T16631] team0: Port device team_slave_1 added [ 1452.630437][ T5582] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1452.915975][T16631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1452.961272][T16631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1453.089949][T16631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1453.418210][T16631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1453.469248][T16631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1453.624147][T16631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1453.643849][T16130] Bluetooth: hci0: command tx timeout [ 1453.970251][ T1088] hsr_slave_0: left promiscuous mode [ 1454.047534][ T1088] hsr_slave_1: left promiscuous mode [ 1454.084547][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1454.122576][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1454.198565][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1454.206452][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1454.391095][ T1088] veth1_macvtap: left promiscuous mode [ 1454.422366][ T1088] veth0_macvtap: left promiscuous mode [ 1454.460560][ T1088] veth1_vlan: left promiscuous mode [ 1454.492974][ T1088] veth0_vlan: left promiscuous mode [ 1454.725744][T15840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1454.738103][T15840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1454.750772][T15840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1454.776351][T15840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1454.795775][T15840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1455.731405][T15840] Bluetooth: hci0: command tx timeout [ 1456.753119][T16845] loop3: detected capacity change from 0 to 256 [ 1456.842326][T15840] Bluetooth: hci4: command tx timeout [ 1457.020197][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 1457.100306][T16845] FAT-fs (loop3): Directory bread(block 64) failed [ 1457.124051][T16845] FAT-fs (loop3): Directory bread(block 65) failed [ 1457.133197][T16845] FAT-fs (loop3): Directory bread(block 66) failed [ 1457.159483][T16845] FAT-fs (loop3): Directory bread(block 67) failed [ 1457.177151][T16845] FAT-fs (loop3): Directory bread(block 68) failed [ 1457.184000][ T1088] team0 (unregistering): Port device team_slave_0 removed [ 1457.219031][T16845] FAT-fs (loop3): Directory bread(block 69) failed [ 1457.237352][T16845] FAT-fs (loop3): Directory bread(block 70) failed [ 1457.263130][T16845] FAT-fs (loop3): Directory bread(block 71) failed [ 1457.270221][T16845] FAT-fs (loop3): Directory bread(block 72) failed [ 1457.295877][T16845] FAT-fs (loop3): Directory bread(block 73) failed [ 1457.806091][T15840] Bluetooth: hci0: command tx timeout [ 1458.659029][T16857] loop3: detected capacity change from 0 to 1024 [ 1458.923906][T15840] Bluetooth: hci4: command tx timeout [ 1458.935020][T16631] hsr_slave_0: entered promiscuous mode [ 1459.002672][T16631] hsr_slave_1: entered promiscuous mode [ 1459.068092][T16631] debugfs: 'hsr0' already exists in 'hsr' [ 1459.116701][T16631] Cannot create hsr debugfs directory [ 1459.478540][ T1088] IPVS: stop unused estimator thread 0... [ 1461.004703][T15840] Bluetooth: hci4: command tx timeout [ 1461.406402][T16549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1462.325809][T16549] 8021q: adding VLAN 0 to HW filter on device team0 [ 1462.769711][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1462.777373][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1463.088845][T15840] Bluetooth: hci4: command tx timeout [ 1463.269021][ T1088] bridge_slave_1: left allmulticast mode [ 1463.296576][ T1088] bridge_slave_1: left promiscuous mode [ 1463.321983][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.357552][ T1088] bridge_slave_0: left allmulticast mode [ 1463.369873][ T1088] bridge_slave_0: left promiscuous mode [ 1463.384959][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.937189][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1463.969657][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1464.003480][ T1088] bond0 (unregistering): Released all slaves [ 1464.028723][T13353] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.036401][T13353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1464.370676][ T1088] hsr_slave_0: left promiscuous mode [ 1464.379580][ T1088] hsr_slave_1: left promiscuous mode [ 1464.393738][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1464.403920][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1465.204572][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 1465.273900][ T1088] team0 (unregistering): Port device team_slave_0 removed [ 1466.298751][T16631] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1466.356730][T16631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1466.379223][T16631] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1466.437758][T16631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1466.505804][T16631] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1466.568394][T16631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1466.622327][T16631] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1466.698813][T16631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1467.068121][T16782] bridge0: port 1(bridge_slave_0) entered blocking state [ 1467.076566][T16782] bridge0: port 1(bridge_slave_0) entered disabled state [ 1467.096124][T16782] bridge_slave_0: entered allmulticast mode [ 1467.124841][T16782] bridge_slave_0: entered promiscuous mode [ 1467.250012][T16782] bridge0: port 2(bridge_slave_1) entered blocking state [ 1467.258750][T16782] bridge0: port 2(bridge_slave_1) entered disabled state [ 1467.274996][T16782] bridge_slave_1: entered allmulticast mode [ 1467.286241][T16782] bridge_slave_1: entered promiscuous mode [ 1467.538666][T16782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1467.633782][T16782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1467.902325][T16782] team0: Port device team_slave_0 added [ 1467.958205][T16782] team0: Port device team_slave_1 added [ 1468.275386][T16834] bridge0: port 1(bridge_slave_0) entered blocking state [ 1468.307161][T16834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1468.321652][T16834] bridge_slave_0: entered allmulticast mode [ 1468.349780][T16834] bridge_slave_0: entered promiscuous mode [ 1468.459281][T16782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1468.467479][T16782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1468.500749][T16782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1468.526417][T16834] bridge0: port 2(bridge_slave_1) entered blocking state [ 1468.547188][T16834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1468.555898][T16834] bridge_slave_1: entered allmulticast mode [ 1468.572361][T16834] bridge_slave_1: entered promiscuous mode [ 1468.662947][T16782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1468.679864][T16782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1468.708763][T16782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1468.856360][T16834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1468.944297][T16834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1469.274349][T16834] team0: Port device team_slave_0 added [ 1469.531736][T16782] hsr_slave_0: entered promiscuous mode [ 1469.610081][T16782] hsr_slave_1: entered promiscuous mode [ 1469.665547][T16782] debugfs: 'hsr0' already exists in 'hsr' [ 1469.698264][T16782] Cannot create hsr debugfs directory [ 1469.747509][T16834] team0: Port device team_slave_1 added [ 1470.059954][T16834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1470.073491][T16834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1470.115460][T16834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1470.220022][T16834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1470.239664][T16834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1470.280210][T16834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1470.799624][T16834] hsr_slave_0: entered promiscuous mode [ 1470.830173][T16834] hsr_slave_1: entered promiscuous mode [ 1470.844262][T16834] debugfs: 'hsr0' already exists in 'hsr' [ 1470.850267][T16834] Cannot create hsr debugfs directory [ 1471.328937][T16631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1471.480286][T16549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1471.997792][T16631] 8021q: adding VLAN 0 to HW filter on device team0 [ 1472.450271][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1472.457885][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1472.626061][T15910] bridge0: port 2(bridge_slave_1) entered blocking state [ 1472.633752][T15910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1473.617588][T16782] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1473.675879][T16782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1473.702787][T16782] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1473.749223][T16782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1473.845114][T16782] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1473.894575][T16782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1473.914148][T16782] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1473.943885][T16782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1474.414567][T16834] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1474.473652][T16834] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1474.499609][T16834] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1474.530211][T16834] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1474.565181][T16549] veth0_vlan: entered promiscuous mode [ 1474.585805][T16834] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1474.624037][T16834] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1474.638988][T16834] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1474.695425][T16834] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1474.956423][T16549] veth1_vlan: entered promiscuous mode [ 1475.766877][T16549] veth0_macvtap: entered promiscuous mode [ 1475.944737][T16782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1476.365114][T16782] 8021q: adding VLAN 0 to HW filter on device team0 [ 1476.582917][ T9908] bridge0: port 1(bridge_slave_0) entered blocking state [ 1476.590570][ T9908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1476.874015][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1476.881784][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1476.970069][T16834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1476.990039][T16130] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1477.001592][T16130] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1477.015408][T16130] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1477.038261][T16130] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1477.054957][T16130] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1477.121314][T16631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1477.592217][T16834] 8021q: adding VLAN 0 to HW filter on device team0 [ 1477.697437][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1477.705083][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1477.993721][T15910] bridge0: port 2(bridge_slave_1) entered blocking state [ 1478.001471][T15910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1478.688523][T16631] veth0_vlan: entered promiscuous mode [ 1479.087630][T16631] veth1_vlan: entered promiscuous mode [ 1479.178254][T15840] Bluetooth: hci2: command tx timeout [ 1480.139062][T16631] veth0_macvtap: entered promiscuous mode [ 1480.297072][T16631] veth1_macvtap: entered promiscuous mode [ 1480.357367][ T35] bridge_slave_1: left allmulticast mode [ 1480.373159][ T35] bridge_slave_1: left promiscuous mode [ 1480.389337][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.417938][ T35] bridge_slave_0: left allmulticast mode [ 1480.426311][ T35] bridge_slave_0: left promiscuous mode [ 1480.440376][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.828741][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1480.857812][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1480.872572][ T35] bond0 (unregistering): Released all slaves [ 1481.196200][ T35] hsr_slave_0: left promiscuous mode [ 1481.207354][ T35] hsr_slave_1: left promiscuous mode [ 1481.219024][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1481.229444][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1481.242397][T15840] Bluetooth: hci2: command tx timeout [ 1481.270558][ T35] veth0_macvtap: left promiscuous mode [ 1481.276631][ T35] veth1_vlan: left promiscuous mode [ 1481.282389][ T35] veth0_vlan: left promiscuous mode [ 1481.876922][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1481.935746][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1482.453977][T16782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1482.493936][T16631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1482.624168][T16631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1482.777038][T15910] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1482.794587][T15910] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1482.895906][T15910] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1482.921107][ T55] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.322046][T15840] Bluetooth: hci2: command tx timeout [ 1484.604162][T16834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1485.244530][T17000] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.269999][T17000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1485.285674][T17000] bridge_slave_0: entered allmulticast mode [ 1485.316234][T17000] bridge_slave_0: entered promiscuous mode [ 1485.364937][T17000] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.376428][T17000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1485.402686][T15840] Bluetooth: hci2: command tx timeout [ 1485.406951][T17000] bridge_slave_1: entered allmulticast mode [ 1485.432346][T17000] bridge_slave_1: entered promiscuous mode [ 1485.656839][T16782] veth0_vlan: entered promiscuous mode [ 1485.859813][T17000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1485.934186][T17000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1486.284086][T17000] team0: Port device team_slave_0 added [ 1486.307702][T16782] veth1_vlan: entered promiscuous mode [ 1486.378921][T17000] team0: Port device team_slave_1 added [ 1486.680062][T17000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1486.705137][T17000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1486.736450][T17000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1486.779347][T17000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1486.788633][T17000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1486.819826][T17000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1487.272033][T17000] hsr_slave_0: entered promiscuous mode [ 1487.297855][T17000] hsr_slave_1: entered promiscuous mode [ 1487.312691][T17000] debugfs: 'hsr0' already exists in 'hsr' [ 1487.318736][T17000] Cannot create hsr debugfs directory [ 1487.904085][T16782] veth0_macvtap: entered promiscuous mode [ 1488.160397][T16782] veth1_macvtap: entered promiscuous mode [ 1488.264597][T16834] veth0_vlan: entered promiscuous mode [ 1488.849725][T16130] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1488.865406][T16130] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1488.884538][T16130] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1488.892475][T16834] veth1_vlan: entered promiscuous mode [ 1488.948564][T16130] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1488.965425][T16130] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1489.075088][T16782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1489.452184][T16782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1489.797082][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.811745][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.844145][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.866661][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.422230][T16834] veth0_macvtap: entered promiscuous mode [ 1490.664157][T17000] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1490.755078][T17000] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1490.801360][T17000] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1490.879999][T17000] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1490.916164][T16834] veth1_macvtap: entered promiscuous mode [ 1490.998596][T17000] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1491.006048][T15840] Bluetooth: hci1: command tx timeout [ 1491.069142][T17000] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1491.104797][T17000] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1491.143517][T17000] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1491.274007][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.500040][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.766720][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.008816][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.104211][T16834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1492.237428][T16834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1492.531148][ T55] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1492.572582][ T55] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1492.686278][ T55] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1492.700654][ T55] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.081939][T15840] Bluetooth: hci1: command tx timeout [ 1493.406724][ T12] bridge_slave_1: left allmulticast mode [ 1493.432496][ T12] bridge_slave_1: left promiscuous mode [ 1493.439257][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.483700][ T12] bridge_slave_0: left allmulticast mode [ 1493.508572][ T12] bridge_slave_0: left promiscuous mode [ 1493.515921][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.199108][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1494.228944][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1494.260379][ T12] bond0 (unregistering): Released all slaves [ 1494.306097][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.655805][ T12] hsr_slave_0: left promiscuous mode [ 1494.671067][ T12] hsr_slave_1: left promiscuous mode [ 1494.679587][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1494.749549][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1494.784797][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1494.793101][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1494.829874][ T12] veth1_macvtap: left promiscuous mode [ 1494.857440][ T12] veth0_macvtap: left promiscuous mode [ 1494.868991][ T12] veth1_vlan: left promiscuous mode [ 1494.874775][ T12] veth0_vlan: left promiscuous mode [ 1495.162894][T15840] Bluetooth: hci1: command tx timeout [ 1495.555910][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1495.599367][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1496.531985][T17000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1496.829779][T17000] 8021q: adding VLAN 0 to HW filter on device team0 [ 1497.104064][T13353] bridge0: port 1(bridge_slave_0) entered blocking state [ 1497.111845][T13353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1497.241738][T15840] Bluetooth: hci1: command tx timeout [ 1497.390063][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1497.397765][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1498.015693][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1498.029558][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1498.339966][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1498.381197][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1498.636521][T17084] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.660713][T17084] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.695822][T17084] bridge_slave_0: entered allmulticast mode [ 1498.748346][T17084] bridge_slave_0: entered promiscuous mode [ 1498.850120][T17084] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.891571][T17084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.923003][T17084] bridge_slave_1: entered allmulticast mode [ 1498.955175][T17084] bridge_slave_1: entered promiscuous mode [ 1499.468945][T17084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1499.558069][T17084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1500.105166][T17084] team0: Port device team_slave_0 added [ 1500.239431][T17084] team0: Port device team_slave_1 added [ 1500.384077][T17186] loop5: detected capacity change from 0 to 1024 [ 1500.596835][T17186] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1500.609962][T17186] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1500.862287][T17190] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1500.916264][T17084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1500.954090][T17084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1501.039258][T17084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1501.076597][T17084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1501.108257][T17186] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1099 with error 28 [ 1501.115318][T17084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1501.121658][T17186] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1501.121658][T17186] [ 1501.188060][T17186] EXT4-fs (loop5): Total free blocks count 0 [ 1501.239206][T17186] EXT4-fs (loop5): Free/Dirty block details [ 1501.270574][T17186] EXT4-fs (loop5): free_blocks=0 [ 1501.282811][T17186] EXT4-fs (loop5): dirty_blocks=1104 [ 1501.288559][T17084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1501.320008][T17186] EXT4-fs (loop5): Block reservation details [ 1501.366835][T17186] EXT4-fs (loop5): i_reserved_data_blocks=69 [ 1502.052366][T17084] hsr_slave_0: entered promiscuous mode [ 1502.070313][T17201] loop3: detected capacity change from 0 to 1024 [ 1502.085939][T17084] hsr_slave_1: entered promiscuous mode [ 1502.118560][T17084] debugfs: 'hsr0' already exists in 'hsr' [ 1502.152223][T17084] Cannot create hsr debugfs directory [ 1502.267039][T17201] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1502.285414][T16782] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1502.564931][T16782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1502.834723][ T5582] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1503.109605][ T5785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1503.165369][ T5785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1503.528252][T17212] vlan2: entered promiscuous mode [ 1503.584762][T17212] bridge0: entered promiscuous mode [ 1504.048545][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1504.080011][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1505.094796][T17000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1505.837517][T17226] loop5: detected capacity change from 0 to 4096 [ 1506.278753][T17226] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 1506.328074][T17226] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 1506.368915][T17084] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1506.412016][T17237] loop3: detected capacity change from 0 to 2048 [ 1506.559254][T17084] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1506.659038][T17084] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1506.811606][T17084] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1506.887369][T17084] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1507.020170][T17084] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1507.053682][ T14] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22. [ 1507.099812][T17084] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1507.149019][T16782] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 1507.219443][T16782] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1507.258945][T16782] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 1507.315123][T17084] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1507.339041][T15910] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22. [ 1507.440174][T17245] loop9: detected capacity change from 0 to 1024 [ 1507.698800][T17245] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1507.771450][T17245] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1508.216110][T17245] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4262: bg 0: block 112: padding at end of block bitmap is not set [ 1508.314330][T17245] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 204 with error 28 [ 1508.446307][T17245] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1508.446307][T17245] [ 1508.520105][T17245] EXT4-fs (loop9): Total free blocks count 0 [ 1508.576481][T17245] EXT4-fs (loop9): Free/Dirty block details [ 1508.606664][T17245] EXT4-fs (loop9): free_blocks=0 [ 1508.640498][T17245] EXT4-fs (loop9): dirty_blocks=224 [ 1508.698966][T17245] EXT4-fs (loop9): Block reservation details [ 1508.754409][T17245] EXT4-fs (loop9): i_reserved_data_blocks=14 [ 1509.250283][T16834] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1509.349229][T16834] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1509.597004][T17269] loop3: detected capacity change from 0 to 64 [ 1510.068853][T17000] veth0_vlan: entered promiscuous mode [ 1510.192235][T17084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1510.640462][T17000] veth1_vlan: entered promiscuous mode [ 1510.769150][T17084] 8021q: adding VLAN 0 to HW filter on device team0 [ 1511.174577][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.182309][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1511.547422][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 1511.555203][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1512.568616][T17000] veth0_macvtap: entered promiscuous mode [ 1512.879130][T17000] veth1_macvtap: entered promiscuous mode [ 1513.427034][T17000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1513.649793][T17000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1513.802361][T17303] loop9: detected capacity change from 0 to 512 [ 1513.883878][T17303] EXT4-fs: Ignoring removed oldalloc option [ 1513.890390][T17303] EXT4-fs: Ignoring removed nobh option [ 1513.987978][ T55] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.063301][ T55] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.075659][T17303] EXT4-fs warning (device loop9): ext4_xattr_inode_get:546: inode #11: comm syz.9.4280: ea_inode file size=7 entry size=6 [ 1514.107712][ T55] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.134692][ T55] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.158461][T17303] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #11: comm syz.9.4280: iget: bad extra_isize 90 (inode size 256) [ 1514.180575][T17303] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1514.180908][ C0] EXT4-fs (loop9): initial error at time 1780271057: ext4_xattr_inode_iget:441: inode 11 [ 1514.200519][ C0] EXT4-fs (loop9): last error at time 1780271057: ext4_xattr_inode_iget:441: inode 11 [ 1514.264439][T17303] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.4280: error while reading EA inode 11 err=-117 [ 1514.292646][T17303] loop9: lost filesystem error report for type 5 error -117 [ 1514.294717][T17303] EXT4-fs (loop9): 1 orphan inode deleted [ 1514.378941][T17303] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1514.547822][T17303] EXT4-fs error (device loop9): ext4_nfs_get_inode:1575: inode #11: comm syz.9.4280: iget: bad extra_isize 90 (inode size 256) [ 1514.958776][T17304] loop3: detected capacity change from 0 to 4096 [ 1515.207502][T16834] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1515.417403][T17304] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1515.808876][T17304] ntfs3(loop3): Failed to load $Extend (-22). [ 1515.884480][T17304] ntfs3(loop3): Failed to initialize $Extend. [ 1518.117039][T17346] Bluetooth: MGMT ver 1.23 [ 1518.794660][T17345] loop9: detected capacity change from 0 to 4096 [ 1519.106520][T17345] ntfs3(loop9): ino=3, ntfs_set_state failed, -22. [ 1519.158834][T17345] ntfs3(loop9): Failed to initialize $Extend/$ObjId. [ 1519.330052][T17084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1519.662579][T13353] ntfs3(loop9): ino=3, ntfs3_write_inode failed, -22. [ 1519.707430][T16834] ntfs3(loop9): ino=3, ntfs_set_state failed, -22. [ 1519.740725][T16834] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 1519.769368][T16834] ntfs3(loop9): ino=3, ntfs_set_state failed, -22. [ 1519.814363][T13353] ntfs3(loop9): ino=3, ntfs3_write_inode failed, -22. [ 1520.135376][T17084] veth0_vlan: entered promiscuous mode [ 1520.256791][T17084] veth1_vlan: entered promiscuous mode [ 1520.624191][T17084] veth0_macvtap: entered promiscuous mode [ 1520.672980][T17084] veth1_macvtap: entered promiscuous mode [ 1520.863958][T17084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1520.952576][T17084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1521.050385][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.073096][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.104599][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.114315][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.120651][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1522.159090][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1522.408718][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1522.429820][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1523.297304][T17394] loop5: detected capacity change from 0 to 1024 [ 1524.188841][T17406] loop3: detected capacity change from 0 to 256 [ 1524.235721][T17402] loop4: detected capacity change from 0 to 1024 [ 1524.498513][T17402] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1524.587413][T17402] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1524.727601][T17406] FAT-fs (loop3): Directory bread(block 64) failed [ 1524.768539][T17406] FAT-fs (loop3): Directory bread(block 65) failed [ 1524.841757][T17406] FAT-fs (loop3): Directory bread(block 66) failed [ 1524.893250][T17406] FAT-fs (loop3): Directory bread(block 67) failed [ 1524.954243][T17406] FAT-fs (loop3): Directory bread(block 68) failed [ 1525.024035][T17406] FAT-fs (loop3): Directory bread(block 69) failed [ 1525.040585][T17406] FAT-fs (loop3): Directory bread(block 70) failed [ 1525.060628][T17402] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4291: bg 0: block 112: padding at end of block bitmap is not set [ 1525.111660][T17406] FAT-fs (loop3): Directory bread(block 71) failed [ 1525.150294][T17406] FAT-fs (loop3): Directory bread(block 72) failed [ 1525.183050][T17402] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 179 with error 28 [ 1525.199357][T17406] FAT-fs (loop3): Directory bread(block 73) failed [ 1525.284868][T17402] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1525.284868][T17402] [ 1525.356097][T17402] EXT4-fs (loop4): Total free blocks count 0 [ 1525.403932][T17402] EXT4-fs (loop4): Free/Dirty block details [ 1525.431539][T17402] EXT4-fs (loop4): free_blocks=0 [ 1525.454957][T17402] EXT4-fs (loop4): dirty_blocks=192 [ 1525.505712][T17402] EXT4-fs (loop4): Block reservation details [ 1525.542008][T17402] EXT4-fs (loop4): i_reserved_data_blocks=12 [ 1526.103477][T17000] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1526.192593][T17000] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1527.082746][T17436] xt_hashlimit: size too large, truncated to 1048576 [ 1527.815900][T17444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4306'. [ 1528.423263][T17451] loop5: detected capacity change from 0 to 128 [ 1528.591293][T17451] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1528.637984][T17451] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1529.198595][T16782] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1529.554581][T17458] loop3: detected capacity change from 0 to 2048 [ 1529.751784][T17458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 1529.908507][T17458] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.4309: inline data xattr refers to an external xattr inode [ 1529.941088][T13353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1529.976383][T17458] EXT4-fs (loop3): Remounting filesystem read-only [ 1529.987345][T13353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1530.328459][T15910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1530.357991][T15910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1530.389748][ T5582] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 1531.118887][T17471] loop9: detected capacity change from 0 to 16 [ 1531.191574][T17471] erofs (device loop9): mounted with root inode @ nid 36. [ 1531.311627][T17475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4072'. [ 1531.394361][T17471] syz.9.4319: attempt to access beyond end of device [ 1531.394361][T17471] loop9: rw=524288, sector=12296, nr_sectors = 8 limit=16 [ 1531.450072][T17471] syz.9.4319: attempt to access beyond end of device [ 1531.450072][T17471] loop9: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1531.502558][T17471] syz.9.4319: attempt to access beyond end of device [ 1531.502558][T17471] loop9: rw=0, sector=12296, nr_sectors = 8 limit=16 [ 1531.604361][T17471] erofs (device loop9): read error -5 @ 0 of nid 89 [ 1531.629808][ T29] audit: type=1800 audit(1780271074.791:232): pid=17471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4319" name="file2" dev="loop9" ino=89 res=0 errno=0 [ 1532.468970][T17486] loop2: detected capacity change from 0 to 1024 [ 1532.689062][T17486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1532.801558][T17486] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1533.018556][T17493] loop3: detected capacity change from 0 to 1024 [ 1533.247151][T17486] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4310: bg 0: block 112: padding at end of block bitmap is not set [ 1533.366323][T17486] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 191 with error 28 [ 1533.466980][T17486] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1533.466980][T17486] [ 1533.583825][T17486] EXT4-fs (loop2): Total free blocks count 0 [ 1533.616758][T17486] EXT4-fs (loop2): Free/Dirty block details [ 1533.667662][T17486] EXT4-fs (loop2): free_blocks=0 [ 1533.714990][T17486] EXT4-fs (loop2): dirty_blocks=208 [ 1533.750729][T17486] EXT4-fs (loop2): Block reservation details [ 1533.783924][T17486] EXT4-fs (loop2): i_reserved_data_blocks=13 [ 1534.369090][T17084] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1534.542299][T17084] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1535.747083][T17521] Invalid ELF header magic: != ELF [ 1536.344956][T16666] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1536.552295][T16666] usb 10-1: Using ep0 maxpacket: 8 [ 1536.634166][T17529] loop3: detected capacity change from 0 to 512 [ 1536.634738][T16666] usb 10-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1536.678921][T16666] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.712985][T17530] loop2: detected capacity change from 0 to 512 [ 1536.724164][T16666] usb 10-1: Product: syz [ 1536.740186][T16666] usb 10-1: Manufacturer: syz [ 1536.755331][T16666] usb 10-1: SerialNumber: syz [ 1536.826509][T16666] usb 10-1: config 0 descriptor?? [ 1536.829403][T17530] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.4331: corrupted inode contents [ 1536.872556][T17530] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1536.879166][T16666] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1536.891015][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1536.901954][ C1] EXT4-fs (loop2): initial error at time 1780271080: ext4_do_update_inode:5690: inode 15 [ 1536.912249][ C1] EXT4-fs (loop2): last error at time 1780271080: ext4_do_update_inode:5690: inode 15 [ 1536.941208][T17530] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 1536.955483][T17534] loop4: detected capacity change from 0 to 1024 [ 1537.001385][T17530] loop2: lost filesystem error report for type 5 error -117 [ 1537.007222][T17530] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.4331: corrupted inode contents [ 1537.148467][T17534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1537.164923][T17530] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1537.181019][T17530] EXT4-fs error (device loop2): ext4_evict_inode:315: inode #15: comm syz.2.4331: mark_inode_dirty error [ 1537.209307][T17530] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1537.211183][T17534] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1537.264665][T17530] EXT4-fs (loop2): 1 orphan inode deleted [ 1537.302159][T17530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1537.670939][T17534] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4334: bg 0: block 112: padding at end of block bitmap is not set [ 1537.806860][T16666] gspca_sq930x: ucbus_write failed -71 [ 1537.893838][T17534] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 215 with error 28 [ 1537.948790][T17534] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1537.948790][T17534] [ 1538.054723][T17534] EXT4-fs (loop4): Total free blocks count 0 [ 1538.094087][T16666] gspca_sq930x: Sensor ov9630 not yet treated [ 1538.115809][T17534] EXT4-fs (loop4): Free/Dirty block details [ 1538.129762][T17084] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1538.164940][T16666] sq930x 10-1:0.0: probe with driver sq930x failed with error -22 [ 1538.186953][T17534] EXT4-fs (loop4): free_blocks=0 [ 1538.235096][T17534] EXT4-fs (loop4): dirty_blocks=224 [ 1538.265849][T17534] EXT4-fs (loop4): Block reservation details [ 1538.318073][T16666] usb 10-1: USB disconnect, device number 2 [ 1538.325593][T17534] EXT4-fs (loop4): i_reserved_data_blocks=14 [ 1538.687274][T16130] Bluetooth: hci1: command 0x0405 tx timeout [ 1539.212621][T17000] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1539.456723][T17000] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1540.088941][T17560] loop5: detected capacity change from 0 to 256 [ 1540.279184][T17560] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x596330fe, utbl_chksum : 0xe619d30d) [ 1540.435266][ T29] audit: type=1800 audit(1780271083.581:233): pid=17564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4342" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1540.722453][T17566] loop3: detected capacity change from 0 to 64 [ 1541.316290][T17574] netlink: 'syz.4.4345': attribute type 1 has an invalid length. [ 1541.377862][T17574] netlink: 'syz.4.4345': attribute type 2 has an invalid length. [ 1544.760174][T17617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4359'. [ 1545.723169][T17630] loop9: detected capacity change from 0 to 128 [ 1545.877364][T17630] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1545.949167][T17630] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1546.541099][T17643] gretap0: entered promiscuous mode [ 1546.587731][T17643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4369'. [ 1546.639621][T16834] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1546.647533][T17643] gretap0: left promiscuous mode [ 1547.506080][T17653] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4372'. [ 1548.377617][T17667] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4377'. [ 1548.419520][T17667] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4377'. [ 1548.506507][T17669] loop3: detected capacity change from 0 to 512 [ 1548.520083][T16666] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1548.637211][T17669] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 1548.718162][T17669] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.4378: corrupted in-inode xattr: e_value size too large [ 1548.746931][T16666] usb 3-1: Using ep0 maxpacket: 16 [ 1548.760033][T16666] usb 3-1: New USB device found, idVendor=0471, idProduct=0307, bcdDevice=61.a4 [ 1548.774966][T17669] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1548.790853][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1548.792428][T16666] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.800343][ C1] EXT4-fs (loop3): initial error at time 1780271091: ext4_iget_extra_inode:5128: inode 15 [ 1548.825477][ C1] EXT4-fs (loop3): last error at time 1780271091: ext4_iget_extra_inode:5128: inode 15 [ 1548.838055][T17669] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4378: couldn't read orphan inode 15 (err -117) [ 1548.889063][T17669] loop3: lost filesystem error report for type 5 error -117 [ 1548.936385][T17669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1548.987076][T16666] usb 3-1: config 0 descriptor?? [ 1549.114904][T16666] pwc: Philips PCVC675K (Vesta) USB webcam detected. [ 1549.282494][T16666] pwc: send_video_command error -71 [ 1549.319540][T16666] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1549.360463][T16666] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1549.474423][T16666] usb 3-1: USB disconnect, device number 2 [ 1549.838397][ T5582] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1550.754641][T17684] netlink: 'syz.5.4383': attribute type 11 has an invalid length. [ 1550.834885][T17684] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4383'. [ 1551.889542][T17698] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4387'. [ 1553.068272][T17712] loop9: detected capacity change from 0 to 1024 [ 1553.317244][T17712] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1553.358408][T17712] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1553.792321][T17712] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4392: bg 0: block 112: padding at end of block bitmap is not set [ 1553.882116][T17712] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 215 with error 28 [ 1553.976956][T17712] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1553.976956][T17712] [ 1554.044004][T17712] EXT4-fs (loop9): Total free blocks count 0 [ 1554.101908][T17712] EXT4-fs (loop9): Free/Dirty block details [ 1554.132642][T17712] EXT4-fs (loop9): free_blocks=0 [ 1554.179976][T17712] EXT4-fs (loop9): dirty_blocks=224 [ 1554.221479][T17712] EXT4-fs (loop9): Block reservation details [ 1554.275947][T17712] EXT4-fs (loop9): i_reserved_data_blocks=14 [ 1554.836009][T16834] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1554.948472][T17736] netlink: 'syz.2.4400': attribute type 3 has an invalid length. [ 1554.978746][T16834] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1555.008254][T17736] netlink: 'syz.2.4400': attribute type 3 has an invalid length. [ 1555.733744][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1556.342345][T17741] loop9: detected capacity change from 0 to 4096 [ 1556.576738][T17753] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1558.003084][T17768] loop5: detected capacity change from 0 to 256 [ 1558.276623][T17770] loop9: detected capacity change from 0 to 1024 [ 1558.465850][T17770] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1558.546495][T17770] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1558.905961][T17770] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4411: bg 0: block 112: padding at end of block bitmap is not set [ 1559.038208][T17770] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 239 with error 28 [ 1559.150249][T17770] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1559.150249][T17770] [ 1559.249692][T17770] EXT4-fs (loop9): Total free blocks count 0 [ 1559.283629][T17770] EXT4-fs (loop9): Free/Dirty block details [ 1559.353688][T17770] EXT4-fs (loop9): free_blocks=0 [ 1559.389080][T17770] EXT4-fs (loop9): dirty_blocks=256 [ 1559.445680][T17770] EXT4-fs (loop9): Block reservation details [ 1559.484505][T17770] EXT4-fs (loop9): i_reserved_data_blocks=16 [ 1559.789596][T17771] loop3: detected capacity change from 0 to 8192 [ 1560.298106][T16834] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1560.472754][T16834] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1561.125765][T17795] loop4: detected capacity change from 0 to 64 [ 1561.361536][ T29] audit: type=1800 audit(1780271104.521:234): pid=17795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4421" name="file1" dev="loop4" ino=22 res=0 errno=0 [ 1561.466880][T17794] hfs: keylen 1794 too large [ 1561.602026][T17797] loop9: detected capacity change from 0 to 1024 [ 1561.876242][T17791] loop5: detected capacity change from 0 to 40427 [ 1561.894529][T17791] F2FS-fs (loop5): build fault injection rate: 771 [ 1561.904182][T17791] F2FS-fs (loop5): invalid crc value [ 1562.104612][T17797] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1562.298643][T17797] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1562.324833][T17791] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1562.345682][T17791] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1562.440127][T17797] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #15: block 3: comm syz.9.4420: lblock 3 mapped to illegal pblock 3 (length 3) [ 1562.535463][T17797] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 1562.599131][T17807] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4420: bg 0: block 112: padding at end of block bitmap is not set [ 1562.680507][T17797] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1562.680507][T17797] [ 1562.754409][T17807] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 30 with error 28 [ 1562.786741][T16782] syz-executor: attempt to access beyond end of device [ 1562.786741][T16782] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1562.881163][T16782] CPU: 0 UID: 0 PID: 16782 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(lazy) [ 1562.881365][T16782] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1562.881429][T16782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1562.881521][T16782] Call Trace: [ 1562.881578][T16782] [ 1562.881633][T16782] __dump_stack+0x26/0x30 [ 1562.881811][T16782] dump_stack_lvl+0x14c/0x1c0 [ 1562.881986][T16782] dump_stack+0x1e/0x25 [ 1562.882144][T16782] f2fs_stop_checkpoint+0xac3/0xc70 [ 1562.882361][T16782] f2fs_write_end_io+0x1207/0x2200 [ 1562.882588][T16782] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1562.882758][T16782] bio_endio+0xfcc/0x1120 [ 1562.882975][T16782] submit_bio_noacct+0x533/0x2920 [ 1562.883235][T16782] submit_bio+0x57a/0x620 [ 1562.883447][T16782] f2fs_submit_write_bio+0x115/0x310 [ 1562.883676][T16782] __submit_merged_bio+0x16b/0x700 [ 1562.883877][T16782] ? kmsan_get_metadata+0xf1/0x160 [ 1562.884100][T16782] __submit_merged_write_cond+0x4ba/0xae0 [ 1562.884354][T16782] f2fs_write_data_pages+0x4f4d/0x5c60 [ 1562.884661][T16782] ? seccomp_attach_filter+0x200/0x18a0 [ 1562.884854][T16782] ? kmsan_get_metadata+0xf1/0x160 [ 1562.885060][T16782] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1562.885277][T16782] ? folios_put_refs+0x61/0xb10 [ 1562.885481][T16782] ? filter_irq_stacks+0x49/0x190 [ 1562.885663][T16782] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1562.885857][T16782] ? kmsan_get_metadata+0xf1/0x160 [ 1562.886049][T16782] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1562.886259][T16782] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1562.886434][T16782] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1562.886599][T16782] do_writepages+0x3f2/0x860 [ 1562.886745][T16782] ? _raw_spin_unlock+0x30/0x50 [ 1562.886971][T16782] ? wbc_attach_and_unlock_inode+0x131/0x660 [ 1562.887205][T16782] filemap_fdatawrite+0x207/0x260 [ 1562.887469][T16782] f2fs_sync_dirty_inodes+0x2ad/0xa30 [ 1562.887690][T16782] f2fs_write_checkpoint+0x10e1/0x3c50 [ 1562.887972][T16782] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 1562.888220][T16782] kill_f2fs_super+0x320/0x990 [ 1562.888444][T16782] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1562.888616][T16782] deactivate_locked_super+0xcb/0x3c0 [ 1562.888817][T16782] deactivate_super+0x12f/0x140 [ 1562.888998][T16782] cleanup_mnt+0x7eb/0x870 [ 1562.889175][T16782] ? __pfx___cleanup_mnt+0x10/0x10 [ 1562.889346][T16782] __cleanup_mnt+0x22/0x30 [ 1562.889499][T16782] task_work_run+0x208/0x2b0 [ 1562.889659][T16782] exit_to_user_mode_loop+0x505/0x2420 [ 1562.889839][T16782] ? user_path_at+0x1fc/0x330 [ 1562.890029][T16782] ? __x64_sys_umount+0x1dc/0x250 [ 1562.890245][T16782] do_syscall_64+0x261/0x3c0 [ 1562.890478][T16782] ? clear_bhb_loop+0x50/0xa0 [ 1562.890646][T16782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.890807][T16782] RIP: 0033:0x7fd61eb9e097 [ 1562.890944][T16782] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1562.891076][T16782] RSP: 002b:00007fff4f29fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1562.891217][T16782] RAX: 0000000000000000 RBX: 00007fd61ec321ca RCX: 00007fd61eb9e097 [ 1562.891317][T16782] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4f29fd30 [ 1562.891418][T16782] RBP: 00007fff4f29fd30 R08: 00007fff4f2a0d30 R09: 00000000ffffffff [ 1562.891518][T16782] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff4f2a0dc0 [ 1562.891611][T16782] R13: 00007fd61ec321ca R14: 000000000017d71e R15: 00007fff4f2a0e00 [ 1562.891757][T16782] [ 1563.373642][T16782] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1563.428638][T17807] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1563.428638][T17807] [ 1563.519312][T17807] EXT4-fs (loop9): Total free blocks count 0 [ 1563.572291][T17807] EXT4-fs (loop9): Free/Dirty block details [ 1563.578446][T17807] EXT4-fs (loop9): free_blocks=0 [ 1563.584350][T17807] EXT4-fs (loop9): dirty_blocks=64 [ 1563.602412][T17807] EXT4-fs (loop9): Block reservation details [ 1563.941332][T16666] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1564.114819][T16666] usb 3-1: Using ep0 maxpacket: 8 [ 1564.189794][T16666] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1564.296881][T16666] usb 3-1: config 179 has no interface number 0 [ 1564.370499][T16666] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1564.434533][T17819] loop4: detected capacity change from 0 to 256 [ 1564.457580][ T35] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 1564.475694][T16666] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1564.576425][T17819] exfat: Deprecated parameter 'utf8' [ 1564.595742][T16666] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1564.665207][T17819] exfat: Deprecated parameter 'namecase' [ 1564.694301][T16834] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1564.724426][T16666] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1564.757083][T16666] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1564.792193][T16666] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1564.867529][T16666] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1564.906918][T17819] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf974f890, utbl_chksum : 0xe619d30d) [ 1564.999825][T17813] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1565.688829][T16666] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input15 [ 1565.849299][ T9125] usb 3-1: USB disconnect, device number 3 [ 1565.856266][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1565.864886][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1567.159172][T17828] loop4: detected capacity change from 0 to 2048 [ 1567.337800][T17828] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1567.508420][T17835] loop2: detected capacity change from 0 to 164 [ 1567.838247][T17835] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1569.203032][T17851] loop9: detected capacity change from 0 to 128 [ 1571.364252][ T9125] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1571.424307][T17874] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1571.632021][ T9125] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1571.673143][ T9125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.718694][ T9125] usb 3-1: Product: syz [ 1571.763919][ T9125] usb 3-1: Manufacturer: syz [ 1571.815358][ T9125] usb 3-1: SerialNumber: syz [ 1571.932540][ T9125] usb 3-1: config 0 descriptor?? [ 1572.056624][ T9125] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1572.882774][ T9125] gspca_sunplus: reg_w_riv err -71 [ 1572.921919][ T9125] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1572.963444][ T9125] usb 3-1: USB disconnect, device number 4 [ 1573.161269][T16130] Bluetooth: hci0: command 0x0406 tx timeout [ 1573.357742][T17890] loop9: detected capacity change from 0 to 1024 [ 1573.394753][T17890] EXT4-fs: Ignoring removed bh option [ 1573.578659][T17890] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1574.297114][T16834] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1574.459306][T17906] vivid-008: disconnect [ 1574.489034][T17904] vivid-008: reconnect [ 1575.357052][T17919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4460'. [ 1575.437444][T17919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4460'. [ 1575.731198][T17910] loop5: detected capacity change from 0 to 4096 [ 1575.798402][T17910] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 1575.849901][T17910] ntfs3(loop5): ino=3, mi_enum_attr [ 1576.226678][T17924] loop3: detected capacity change from 0 to 512 [ 1576.329342][T17910] ntfs3(loop5): ino=5, "/" indx_read_ra [ 1576.357503][T17910] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1576.428018][T17924] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.4462: missing EA_INODE flag [ 1576.457182][T17929] ntfs3(loop5): ino=5, "/" indx_read_ra [ 1576.518416][T17929] ntfs3(loop5): ino=5, "/" ntfs_readdir [ 1576.594316][T17924] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1576.601157][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1576.617413][ C0] EXT4-fs (loop3): initial error at time 1780271119: ext4_xattr_inode_iget:441: inode 12 [ 1576.627744][ C0] EXT4-fs (loop3): last error at time 1780271119: ext4_xattr_inode_iget:441: inode 12 [ 1576.642191][T17924] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.4462: error while reading EA inode 12 err=-117 [ 1576.684572][T17924] loop3: lost filesystem error report for type 5 error -117 [ 1576.702554][T17924] EXT4-fs (loop3): 1 orphan inode deleted [ 1576.748565][T17924] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1578.182985][ T5582] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1578.283520][ T5577] Bluetooth: hci4: command 0x0406 tx timeout [ 1578.484988][T17944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4469'. [ 1578.569707][T17944] netlink: 'syz.4.4469': attribute type 2 has an invalid length. [ 1578.663875][T17944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4469'. [ 1580.020445][T17956] tap0: tun_chr_ioctl cmd 1074025677 [ 1580.054078][T17956] tap0: linktype set to 784 [ 1580.736635][T17962] loop5: detected capacity change from 0 to 64 [ 1580.848491][T17962] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 1582.045974][T17972] o2cb: This node has not been configured. [ 1582.091294][T17972] o2cb: Cluster check failed. Fix errors before retrying. [ 1582.121481][T17972] (syz.5.4477,17972,0):user_dlm_register:674 ERROR: status = -22 [ 1582.165692][T17976] netem: change failed [ 1582.194854][T17972] (syz.5.4477,17972,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 1583.437453][T17988] sg_write: data in/out 348160/136 bytes for SCSI command 0x0-- guessing data in; [ 1583.437453][T17988] program syz.5.4484 not setting count and/or reply_len properly [ 1584.301510][T17994] loop2: detected capacity change from 0 to 1024 [ 1584.474658][T17994] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 1584.527598][T17994] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 1584.591278][T17994] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.4486: Failed to acquire dquot type 0 [ 1584.627834][T17994] loop2: lost filesystem error report for type 5 error -117 [ 1584.630902][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1584.645320][ C1] EXT4-fs (loop2): initial error at time 1780271127: ext4_acquire_dquot:7034 [ 1584.654428][ C1] EXT4-fs (loop2): last error at time 1780271127: ext4_acquire_dquot:7034 [ 1584.695181][T17994] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1584.729537][T17994] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #13: comm syz.2.4486: corrupted inode contents [ 1584.831401][T17994] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1584.848820][T17994] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #13: comm syz.2.4486: mark_inode_dirty error [ 1585.004379][T17994] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1585.007064][T17994] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #13: comm syz.2.4486: corrupted inode contents [ 1585.098382][T17994] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1585.099868][T17994] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.4486: mark_inode_dirty error [ 1585.189832][T17994] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1585.214806][ T9125] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1585.217552][T17994] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #13: comm syz.2.4486: corrupted inode contents [ 1585.341793][T17994] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1585.344131][T17994] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 1585.446180][T17994] loop2: lost filesystem error report for type 5 error -117 [ 1585.449504][T17994] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #13: comm syz.2.4486: corrupted inode contents [ 1585.475526][ T9125] usb 10-1: Using ep0 maxpacket: 8 [ 1585.534678][ T9125] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1585.574617][ T9125] usb 10-1: config 0 has no interface number 0 [ 1585.588905][T17994] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1585.598169][T17994] EXT4-fs error (device loop2): ext4_truncate:4690: inode #13: comm syz.2.4486: mark_inode_dirty error [ 1585.650699][ T9125] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1585.685279][T17994] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1585.705761][T17994] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 1585.719617][ T9125] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1585.766249][T17994] loop2: lost filesystem error report for type 5 error -117 [ 1585.777123][T17994] EXT4-fs (loop2): 1 truncate cleaned up [ 1585.837642][T17994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1585.891338][ T9125] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1585.956624][ T9125] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1586.034872][T16665] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1586.097956][ T9125] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1586.178905][ T9125] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.266542][T16665] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1586.293868][ T9125] usb 10-1: config 0 descriptor?? [ 1586.317476][T16665] usb 6-1: config 0 has no interface number 0 [ 1586.365760][T16665] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1586.388432][T16665] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1586.445438][T16665] usb 6-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1586.513120][ T9125] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1586.533344][T16665] usb 6-1: config 0 interface 1 has no altsetting 0 [ 1586.577889][T16665] usb 6-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1586.610280][T16665] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.684885][T17084] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1586.708498][T16665] usb 6-1: config 0 descriptor?? [ 1586.761505][T16666] usb 10-1: USB disconnect, device number 3 [ 1586.856964][T16666] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 1586.911881][T18022] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1586.919934][T18022] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1587.474128][T16665] uclogic 0003:145F:0212.0021: pen parameters not found [ 1587.528231][T16665] uclogic 0003:145F:0212.0021: interface is invalid, ignoring [ 1587.626205][T18025] loop2: detected capacity change from 0 to 256 [ 1587.654596][T16665] usb 6-1: USB disconnect, device number 9 [ 1587.780383][T18027] sg_write: data in/out 352256/136 bytes for SCSI command 0x0-- guessing data in; [ 1587.780383][T18027] program syz.4.4498 not setting count and/or reply_len properly [ 1589.070200][T18040] loop5: detected capacity change from 0 to 512 [ 1589.278046][T18040] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.4503: corrupted inode contents [ 1589.536879][T18040] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1589.538708][T18040] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 1589.548485][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1589.548595][ C0] EXT4-fs (loop5): initial error at time 1780271132: ext4_do_update_inode:5690: inode 15 [ 1589.548770][ C0] EXT4-fs (loop5): last error at time 1780271132: ext4_do_update_inode:5690: inode 15 [ 1589.761946][T18040] loop5: lost filesystem error report for type 5 error -117 [ 1589.765316][T18040] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.4503: corrupted inode contents [ 1589.911776][T18040] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1589.916420][T18040] EXT4-fs error (device loop5): ext4_evict_inode:315: inode #15: comm syz.5.4503: mark_inode_dirty error [ 1589.988551][T18040] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1589.990244][T18040] EXT4-fs (loop5): 1 orphan inode deleted [ 1590.079946][T18040] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1590.736442][T16782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1590.832641][T18061] program syz.4.4509 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1590.860123][T18062] loop3: detected capacity change from 0 to 512 [ 1590.954349][T18062] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1591.088166][T18057] loop2: detected capacity change from 0 to 4096 [ 1591.103531][T18062] EXT4-fs (loop3): 1 truncate cleaned up [ 1591.185416][T18057] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1591.204993][T18062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1591.775813][T18057] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1591.880478][T18057] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 1592.114739][ T5582] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1592.663161][T18077] loop5: detected capacity change from 0 to 256 [ 1592.892504][T18077] exFAT-fs (loop5): failed to test first cluster bit of root dir(5) [ 1593.537945][T18086] loop9: detected capacity change from 0 to 1024 [ 1593.914122][T18086] hfsplus: bad catalog entry type [ 1595.096780][T18105] overlayfs: upper fs does not support tmpfile. [ 1595.608078][T18109] binder: BC_ACQUIRE_RESULT not supported [ 1595.684158][T18109] binder: 18108:18109 ioctl c0306201 2000000001c0 returned -22 [ 1596.074589][ T29] audit: type=1326 audit(1780271139.241:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18113 comm="syz.2.4526" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787859ce59 code=0x7ffc0000 [ 1596.229854][ T29] audit: type=1326 audit(1780271139.241:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18113 comm="syz.2.4526" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787859ce59 code=0x7ffc0000 [ 1596.408104][ T29] audit: type=1326 audit(1780271139.391:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18113 comm="syz.2.4526" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f787859ce59 code=0x7ffc0000 [ 1596.577314][ T29] audit: type=1326 audit(1780271139.441:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18113 comm="syz.2.4526" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787859ce59 code=0x7ffc0000 [ 1596.727443][ T29] audit: type=1326 audit(1780271139.461:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18113 comm="syz.2.4526" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f787859ce59 code=0x7ffc0000 [ 1596.891426][ T29] audit: type=1326 audit(1780271139.461:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18113 comm="syz.2.4526" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787859ce59 code=0x7ffc0000 [ 1597.477160][T18131] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4531'. [ 1600.240569][T18159] loop2: detected capacity change from 0 to 4096 [ 1600.392374][T18159] ntfs3(loop2): ino=0, mi_enum_attr [ 1600.615695][T18159] ntfs3(loop2): ino=0, mi_enum_attr [ 1600.665632][T18159] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1600.730343][T18159] ntfs3(loop2): ino=0, mi_enum_attr [ 1601.338308][T18177] loop3: detected capacity change from 0 to 1024 [ 1601.437876][T18177] EXT4-fs: Ignoring removed bh option [ 1601.686661][T18177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1601.764928][T18177] EXT4-fs (loop3): shut down requested (2) [ 1602.270040][ T5582] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1603.556454][ T5230] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1603.881194][ T5577] Bluetooth: hci2: command 0x0406 tx timeout [ 1605.063758][T18221] loop2: detected capacity change from 0 to 256 [ 1605.336159][T18220] loop5: detected capacity change from 0 to 2048 [ 1605.366340][T18221] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 1605.614513][T18227] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1607.859195][ T5565] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1608.122406][T18233] loop2: detected capacity change from 0 to 40427 [ 1608.143601][T18233] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1608.151833][T18233] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1608.176231][T18233] F2FS-fs (loop2): invalid crc value [ 1608.223812][ T5565] usb 4-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1608.394884][ T5565] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1608.559829][T18233] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1608.588656][T18233] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1608.596593][T18233] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1608.598958][ T5565] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1608.744994][ T5565] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1608.844241][ T5565] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1608.928556][ T5565] usb 4-1: Product: syz [ 1609.010576][ T5565] usb 4-1: Manufacturer: syz [ 1609.026913][ T5565] usb 4-1: SerialNumber: syz [ 1609.104440][ T5565] usb 4-1: config 0 descriptor?? [ 1609.165112][T18240] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1609.336193][ T5565] usb 4-1: selecting invalid altsetting 0 [ 1610.394746][ T5565] usb 4-1: USB disconnect, device number 18 [ 1610.567522][T18258] loop9: detected capacity change from 0 to 256 [ 1610.859161][T18258] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1611.136668][T18258] exFAT-fs (loop9): valid_size(150994954) is greater than size(10) [ 1611.164493][T17234] udevd[17234]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1611.329662][T18264] loop3: detected capacity change from 0 to 1024 [ 1611.631173][T18264] hfsplus: request for non-existent node 33423360 in B*Tree [ 1611.649881][T18264] hfsplus: request for non-existent node 33423360 in B*Tree [ 1613.861883][T18280] loop4: detected capacity change from 0 to 40427 [ 1613.888624][T18280] F2FS-fs (loop4): Image doesn't support compression [ 1613.895775][T18280] F2FS-fs (loop4): build fault injection rate: 690 [ 1613.915169][T18280] F2FS-fs (loop4): invalid crc value [ 1614.124932][ T5577] Bluetooth: hci1: command 0x0405 tx timeout [ 1614.266756][T18280] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1614.285780][T18280] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1614.294032][ T5230] 8021q: adding VLAN 0 to HW filter on device eth26 [ 1615.744997][T18299] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4587'. [ 1615.958727][T18302] loop2: detected capacity change from 0 to 1024 [ 1615.981816][T18299] ipvlan2: entered allmulticast mode [ 1616.035100][T18299] syz_tun: entered allmulticast mode [ 1616.868042][T18310] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4591'. [ 1617.182155][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1619.047346][T18330] loop4: detected capacity change from 0 to 128 [ 1619.183318][T18330] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1619.279950][T18330] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1619.392985][ T5565] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1619.550617][T18330] fscrypt (loop4, inode 12): Direct key flag not allowed with different contents and filenames modes [ 1619.653332][ T5565] usb 4-1: Using ep0 maxpacket: 8 [ 1619.730558][ T5565] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1619.780519][ T5565] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1619.809570][T18341] macvtap0: entered promiscuous mode [ 1619.861514][ T5565] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1619.917550][T18341] macvtap0: left promiscuous mode [ 1619.940545][ T5565] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1619.999618][ T5565] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1620.097700][ T5565] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1620.169752][ T5565] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.194356][T10809] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1620.207047][T17000] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1620.478266][T10809] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1620.578099][T10809] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 1620.649014][ T5565] usb 4-1: GET_CAPABILITIES returned 2f [ 1620.674317][ T5565] usbtmc 4-1:16.0: can't read capabilities [ 1620.724132][T10809] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1620.800635][T10809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.855101][T10809] usb 3-1: Product: syz [ 1620.878589][T10809] usb 3-1: Manufacturer: syz [ 1620.911337][ T5565] usb 4-1: USB disconnect, device number 19 [ 1620.918120][T10809] usb 3-1: SerialNumber: syz [ 1621.089609][T10809] usb 3-1: config 0 descriptor?? [ 1621.149510][T18344] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1621.193376][T18344] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1621.533503][T18344] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1621.593926][T18344] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1622.154720][T10809] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1622.232971][T18357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4607'. [ 1622.374903][T10809] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 1622.544088][T10809] usb 3-1: USB disconnect, device number 5 [ 1622.835697][ T5230] 8021q: adding VLAN 0 to HW filter on device eth27 [ 1623.245113][T18363] loop5: detected capacity change from 0 to 2048 [ 1623.524153][T18363] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1623.664933][T18369] loop4: detected capacity change from 0 to 2048 [ 1623.908950][T18369] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1624.423590][T18374] pimreg: entered allmulticast mode [ 1624.508360][T18375] pimreg: left allmulticast mode [ 1624.609980][T18378] loop3: detected capacity change from 0 to 64 [ 1627.535614][T18412] loop3: detected capacity change from 0 to 512 [ 1627.732360][T18412] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1627.887262][T18424] loop5: detected capacity change from 0 to 512 [ 1627.918666][T18424] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1627.976189][T18424] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1628.007559][T18412] EXT4-fs error (device loop3): ext4_validate_block_bitmap:423: comm syz.3.4625: bg 0: bad block bitmap checksum [ 1628.132048][T18424] EXT4-fs (loop5): 1 truncate cleaned up [ 1628.229937][T18424] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1628.547013][T18424] EXT4-fs warning (device loop5): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 1628.751528][ T5582] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1629.155160][T16782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1631.395029][ T5230] 8021q: adding VLAN 0 to HW filter on device eth28 [ 1631.612798][T18461] 9p: Unknown uid 00000000004294967295 [ 1632.296660][T18465] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4642'. [ 1634.455267][T10518] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1634.767068][T10518] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1634.866111][T10518] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1634.943447][T10518] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1635.036516][T10518] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1635.087657][T10518] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1635.134396][T10518] usb 6-1: SerialNumber: syz [ 1635.351907][T18499] loop3: detected capacity change from 0 to 128 [ 1635.545275][T10518] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 1635.574680][T10809] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1635.637408][T10518] usb 6-1: USB disconnect, device number 10 [ 1635.794360][T10809] usb 10-1: Using ep0 maxpacket: 32 [ 1635.844907][T10809] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 1635.893541][T10809] usb 10-1: config 0 has no interface number 0 [ 1635.917294][T10809] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1635.941770][T10809] usb 10-1: config 0 interface 85 has no altsetting 0 [ 1635.974213][T10809] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1636.059498][T10809] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.145216][T10809] usb 10-1: Product: syz [ 1636.199353][T10809] usb 10-1: Manufacturer: syz [ 1636.225218][T10809] usb 10-1: SerialNumber: syz [ 1636.302964][T10809] usb 10-1: config 0 descriptor?? [ 1637.045483][T18513] bpf: Bad value for 'uid' [ 1637.247627][T18515] loop2: detected capacity change from 0 to 64 [ 1637.307813][T10809] appletouch 10-1:0.85: Geyser mode initialized. [ 1637.395730][T10809] input: appletouch as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.85/input/input16 [ 1637.442455][T18515] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. Mounting read-only. [ 1637.469124][T18515] hfs: filesystem is marked locked, mounting read-only. [ 1637.501008][ C0] appletouch 10-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 1637.860348][T10518] usb 10-1: USB disconnect, device number 4 [ 1637.909399][T18519] program syz.3.4661 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1638.048071][T10518] appletouch 10-1:0.85: input: appletouch disconnected [ 1639.178149][T18524] loop2: detected capacity change from 0 to 512 [ 1639.330528][T18528] loop9: detected capacity change from 0 to 256 [ 1639.399749][T18524] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.4663: missing EA_INODE flag [ 1639.535499][T18524] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1639.537272][T18524] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.4663: error while reading EA inode 12 err=-117 [ 1639.547028][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1639.547135][ C0] EXT4-fs (loop2): initial error at time 1780271182: ext4_xattr_inode_iget:441: inode 12 [ 1639.547318][ C0] EXT4-fs (loop2): last error at time 1780271182: ext4_xattr_inode_iget:441: inode 12 [ 1639.644771][T18524] loop2: lost filesystem error report for type 5 error -117 [ 1639.667398][T18524] EXT4-fs (loop2): 1 orphan inode deleted [ 1639.743993][T18524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1640.051887][T18524] fscrypt (loop2, inode 18): Can't use IV_INO_LBLK_64 policy on filesystem 'loop2' because it doesn't have stable inode numbers [ 1640.778317][T17084] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1643.953585][T18584] loop3: detected capacity change from 0 to 256 [ 1645.536194][T18591] loop2: detected capacity change from 0 to 4096 [ 1646.315326][T18607] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4691'. [ 1649.753240][ T9908] Bluetooth: hci5: Frame reassembly failed (-84) [ 1650.145919][T18648] loop5: detected capacity change from 0 to 256 [ 1650.431351][T10809] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1650.622208][T10809] usb 4-1: Using ep0 maxpacket: 32 [ 1650.664751][T10809] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1650.700569][T10809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.805669][T10809] usb 4-1: config 0 descriptor?? [ 1650.910139][T10809] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1651.255938][T18657] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1651.593675][T10809] gspca_sunplus: reg_r err -71 [ 1651.599266][T10809] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 1651.693659][T10809] usb 4-1: USB disconnect, device number 20 [ 1651.792147][T18663] loop9: detected capacity change from 0 to 1024 [ 1651.801508][T15840] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1654.609282][T18688] loop2: detected capacity change from 0 to 512 [ 1654.748911][T18688] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1654.816293][T18688] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1654.916091][T18691] loop3: detected capacity change from 0 to 256 [ 1654.964256][T18688] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 1655.030679][T18688] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 1655.175028][T18688] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.4718: Failed to acquire dquot type 1 [ 1655.246922][T18688] loop2: lost filesystem error report for type 5 error -5 [ 1655.249261][T18691] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1655.260965][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1655.278901][ C1] EXT4-fs (loop2): initial error at time 1780271198: ext4_acquire_dquot:7034 [ 1655.288136][ C1] EXT4-fs (loop2): last error at time 1780271198: ext4_acquire_dquot:7034 [ 1655.298453][T18688] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 1655.332290][T18688] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 1655.428839][T18688] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.4718: Failed to acquire dquot type 1 [ 1655.495417][T18688] loop2: lost filesystem error report for type 5 error -5 [ 1655.505772][T18688] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4718: bg 0: block 40: padding at end of block bitmap is not set [ 1655.686792][ T56] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.722248][T18688] loop2: lost filesystem error report for type 5 error -117 [ 1655.727866][T18688] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1655.826049][T18688] loop2: lost filesystem error report for type 5 error -117 [ 1655.887817][T18688] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #16: comm syz.2.4718: corrupted xattr block 31: invalid header [ 1655.921637][T18688] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1655.944676][T18688] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 1656.036178][T18688] EXT4-fs (loop2): 1 orphan inode deleted [ 1656.082577][T18688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1656.092274][ T56] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.332808][ T56] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.631869][ T56] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.811874][T17084] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1657.434079][ T56] bridge_slave_1: left allmulticast mode [ 1657.476801][ T56] bridge_slave_1: left promiscuous mode [ 1657.507115][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.549691][ T56] bridge_slave_0: left allmulticast mode [ 1657.566137][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1658.778510][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1658.870452][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1658.954896][ T56] bond0 (unregistering): Released all slaves [ 1660.549086][ T56] hsr_slave_0: left promiscuous mode [ 1660.556399][T15840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1660.580391][T15840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1660.606096][T15840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1660.629709][ T56] hsr_slave_1: left promiscuous mode [ 1660.651569][T15840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1660.665092][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1660.680328][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1660.695536][T15840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1660.735796][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1660.762434][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1660.985856][T18736] program syz.2.4732 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1660.998958][ T56] veth1_macvtap: left promiscuous mode [ 1661.034982][ T56] veth0_macvtap: left promiscuous mode [ 1661.070117][ T56] veth1_vlan: left promiscuous mode [ 1661.101504][ T56] veth0_vlan: left promiscuous mode [ 1662.543276][T18750] loop9: detected capacity change from 0 to 256 [ 1662.597331][T18750] exfat: Deprecated parameter 'namecase' [ 1662.761346][T18750] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1662.842720][ T5577] Bluetooth: hci2: command tx timeout [ 1664.016113][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1664.155631][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1664.194317][T18760] Illegal XDP return value 4294967274 on prog (id 78) dev N/A, expect packet loss! [ 1664.922492][ T5577] Bluetooth: hci2: command tx timeout [ 1665.799285][T18772] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4743'. [ 1665.947219][T18779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4745'. [ 1667.002047][ T5577] Bluetooth: hci2: command tx timeout [ 1667.140003][T18791] loop2: detected capacity change from 0 to 1024 [ 1667.208092][T18788] loop5: detected capacity change from 0 to 2048 [ 1667.307410][T18791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1667.513130][T18788] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1667.570349][T18788] ext4 filesystem being mounted at /110/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1668.056322][T17084] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1668.081128][ T5674] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1668.341336][ T5674] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1668.392444][T16782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1668.411075][ T5674] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1668.463409][ T5674] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 1668.502339][ T5674] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.547471][ T5674] usb 4-1: config 0 descriptor?? [ 1669.080993][ T5577] Bluetooth: hci2: command tx timeout [ 1669.223002][ T5674] waltop 0003:172F:0501.0022: hidraw0: USB HID v10.00 Device [HID 172f:0501] on usb-dummy_hcd.3-1/input0 [ 1669.358907][ T5674] usb 4-1: USB disconnect, device number 21 [ 1670.553541][T18818] fido_id[18818]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1671.346303][T18833] loop9: detected capacity change from 0 to 512 [ 1671.449331][T18833] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1671.607418][T18837] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1671.632045][T18837] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1671.639599][T18837] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1671.646987][T18837] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1671.654405][T18837] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1671.661779][T18837] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1671.669122][T18837] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1671.676585][T18837] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1671.684063][T18837] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1671.691398][T18833] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1671.691442][T18837] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1671.746254][T18833] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4759: bg 0: block 248: padding at end of block bitmap is not set [ 1671.795245][T18833] loop9: lost filesystem error report for type 5 error -117 [ 1671.798550][T18833] Quota error (device loop9): write_blk: dquota write failed [ 1671.806574][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1671.806668][ C0] EXT4-fs (loop9): last error at time 1780271214: ext4_validate_block_bitmap:441 [ 1671.891897][T18833] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 1671.945655][T18833] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.4759: Failed to acquire dquot type 1 [ 1672.017750][T18833] loop9: lost filesystem error report for type 5 error -28 [ 1672.034437][T18833] EXT4-fs (loop9): 1 truncate cleaned up [ 1672.174761][T18833] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1672.966686][ T9908] Quota error (device loop9): do_check_range: Getting block 0 out of range 1-5 [ 1673.014834][T16834] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1673.051196][ T9908] EXT4-fs error (device loop9): ext4_release_dquot:7070: comm kworker/u8:6: Failed to release dquot type 1 [ 1673.135173][ T9908] loop9: lost filesystem error report for type 5 error -117 [ 1673.478009][T18857] loop5: detected capacity change from 0 to 512 [ 1673.526960][T18857] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1674.150278][T18867] loop3: detected capacity change from 0 to 1024 [ 1674.474829][T18867] ===================================================== [ 1674.482135][T18867] BUG: KMSAN: uninit-value in irqentry_exit_to_kernel_mode_preempt+0xb0/0xc0 [ 1674.491147][T18867] irqentry_exit_to_kernel_mode_preempt+0xb0/0xc0 [ 1674.497825][T18867] irqentry_exit+0x82/0xa00 [ 1674.502671][T18867] sysvec_apic_timer_interrupt+0x52/0x90 [ 1674.508578][T18867] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 1674.514814][T18867] virt_to_page_or_null+0x0/0x170 [ 1674.520101][T18867] kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1674.526005][T18867] __msan_metadata_ptr_for_store_2+0x27/0x40 [ 1674.532236][T18867] char2uni+0x13e/0x1d0 [ 1674.536686][T18867] hfsplus_hash_dentry+0x2d2/0x1470 [ 1674.542141][T18867] link_path_walk+0x13c4/0x23f0 [ 1674.547211][T18867] path_lookupat+0x107/0xdf0 [ 1674.551997][T18867] filename_lookup+0x2bc/0x800 [ 1674.556977][T18867] vfs_open_tree+0x332/0x540 [ 1674.561789][T18867] __x64_sys_open_tree+0x115/0x310 [ 1674.567168][T18867] x64_sys_call+0x3554/0x3ea0 [ 1674.572069][T18867] do_syscall_64+0x15d/0x3c0 [ 1674.576908][T18867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.582985][T18867] [ 1674.585408][T18867] Local variable u created at: [ 1674.590267][T18867] char2uni+0x43/0x1d0 [ 1674.594577][T18867] hfsplus_hash_dentry+0x2d2/0x1470 [ 1674.599973][T18867] [ 1674.602430][T18867] CPU: 1 UID: 0 PID: 18867 Comm: syz.3.4768 Tainted: G W L syzkaller #0 PREEMPT(lazy) [ 1674.613605][T18867] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1674.618927][T18867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1674.629113][T18867] ===================================================== [ 1674.636193][T18867] Disabling lock debugging due to kernel taint [ 1674.642484][T18867] Kernel panic - not syncing: kmsan.panic set ... [ 1674.649052][T18867] CPU: 1 UID: 0 PID: 18867 Comm: syz.3.4768 Tainted: G B W L syzkaller #0 PREEMPT(lazy) [ 1674.660223][T18867] Tainted: [B]=BAD_PAGE, [W]=WARN, [L]=SOFTLOCKUP [ 1674.666771][T18867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1674.676979][T18867] Call Trace: [ 1674.680377][T18867] [ 1674.683431][T18867] __dump_stack+0x26/0x30 [ 1674.687962][T18867] dump_stack_lvl+0x50/0x1c0 [ 1674.692758][T18867] ? dump_stack+0x12/0x25 [ 1674.697305][T18867] dump_stack+0x1e/0x25 [ 1674.701654][T18867] vpanic+0x7b4/0x1430 [ 1674.705981][T18867] panic+0x15d/0x160 [ 1674.710129][T18867] kmsan_report+0x31a/0x320 [ 1674.714873][T18867] ? __msan_warning+0x1b/0x30 [ 1674.719777][T18867] ? irqentry_exit_to_kernel_mode_preempt+0xb0/0xc0 [ 1674.726579][T18867] ? irqentry_exit+0x82/0xa00 [ 1674.731493][T18867] ? sysvec_apic_timer_interrupt+0x52/0x90 [ 1674.737529][T18867] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 1674.743880][T18867] ? __pfx_virt_to_page_or_null+0x10/0x10 [ 1674.749836][T18867] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1674.755875][T18867] ? __msan_metadata_ptr_for_store_2+0x27/0x40 [ 1674.762281][T18867] ? char2uni+0x13e/0x1d0 [ 1674.766830][T18867] ? hfsplus_hash_dentry+0x2d2/0x1470 [ 1674.772405][T18867] ? link_path_walk+0x13c4/0x23f0 [ 1674.777630][T18867] ? path_lookupat+0x107/0xdf0 [ 1674.782618][T18867] ? filename_lookup+0x2bc/0x800 [ 1674.787799][T18867] ? vfs_open_tree+0x332/0x540 [ 1674.792823][T18867] ? __x64_sys_open_tree+0x115/0x310 [ 1674.798348][T18867] ? x64_sys_call+0x3554/0x3ea0 [ 1674.803427][T18867] ? do_syscall_64+0x15d/0x3c0 [ 1674.808425][T18867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.814693][T18867] ? ktime_get+0x545/0x5a0 [ 1674.819351][T18867] ? kmsan_get_metadata+0xf1/0x160 [ 1674.824693][T18867] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1674.830756][T18867] ? kmsan_get_metadata+0xf1/0x160 [ 1674.836118][T18867] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1674.842764][T18867] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1674.849118][T18867] ? kmsan_get_metadata+0xf1/0x160 [ 1674.854535][T18867] __msan_warning+0x1b/0x30 [ 1674.859341][T18867] irqentry_exit_to_kernel_mode_preempt+0xb0/0xc0 [ 1674.865979][T18867] irqentry_exit+0x82/0xa00 [ 1674.870717][T18867] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1674.877276][T18867] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1674.883565][T18867] sysvec_apic_timer_interrupt+0x52/0x90 [ 1674.889458][T18867] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 1674.895639][T18867] RIP: 0010:virt_to_page_or_null+0x0/0x170 [ 1674.901743][T18867] Code: 83 3d 47 89 21 10 00 0f 84 c0 fe ff ff 90 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <48> 89 f8 48 2d 00 00 00 80 73 29 48 89 fa 48 2b 15 8b 52 92 0f 48 [ 1674.921548][T18867] RSP: 0018:ffff8881186ab888 EFLAGS: 00000293 [ 1674.927796][T18867] RAX: 0000000001ffff14 RBX: ffff8881186aba3c RCX: 0000000000577957 [ 1674.935918][T18867] RDX: 00000001186aba3e RSI: 0000000000000001 RDI: ffff8881186aba3c [ 1674.944039][T18867] RBP: ffff8881186ab8a8 R08: ffffea000000000f R09: 0000000000000004 [ 1674.952186][T18867] R10: ffff888117eab90c R11: ffffffff83e4ede0 R12: ffff8881186aba3e [ 1674.960325][T18867] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 1674.968457][T18867] ? __pfx_char2uni+0x10/0x10 [ 1674.973426][T18867] ? kmsan_get_metadata+0xf1/0x160 [ 1674.978806][T18867] kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1674.984763][T18867] __msan_metadata_ptr_for_store_2+0x27/0x40 [ 1674.990970][T18867] char2uni+0x13e/0x1d0 [ 1674.995350][T18867] ? __pfx_char2uni+0x10/0x10 [ 1675.000252][T18867] hfsplus_hash_dentry+0x2d2/0x1470 [ 1675.005708][T18867] ? inode_permission+0x655/0x8b0 [ 1675.010939][T18867] ? __pfx_hfsplus_hash_dentry+0x10/0x10 [ 1675.016815][T18867] link_path_walk+0x13c4/0x23f0 [ 1675.021935][T18867] path_lookupat+0x107/0xdf0 [ 1675.026768][T18867] ? kmsan_get_metadata+0xf1/0x160 [ 1675.032110][T18867] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1675.038199][T18867] filename_lookup+0x2bc/0x800 [ 1675.043174][T18867] ? kmsan_get_metadata+0xf1/0x160 [ 1675.048535][T18867] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1675.054624][T18867] vfs_open_tree+0x332/0x540 [ 1675.059433][T18867] __x64_sys_open_tree+0x115/0x310 [ 1675.064792][T18867] x64_sys_call+0x3554/0x3ea0 [ 1675.069691][T18867] do_syscall_64+0x15d/0x3c0 [ 1675.074515][T18867] ? clear_bhb_loop+0x50/0xa0 [ 1675.079414][T18867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.085498][T18867] RIP: 0033:0x7f325a99ce59 [ 1675.090059][T18867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1675.109864][T18867] RSP: 002b:00007f325b8d4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 1675.118470][T18867] RAX: ffffffffffffffda RBX: 00007f325ac15fa0 RCX: 00007f325a99ce59 [ 1675.126606][T18867] RDX: 0000000000081000 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 1675.134741][T18867] RBP: 00007f325aa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1675.142875][T18867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1675.150987][T18867] R13: 00007f325ac16038 R14: 00007f325ac15fa0 R15: 00007ffef7bf4148 [ 1675.159142][T18867] [ 1675.162927][T18867] Kernel Offset: disabled [ 1675.167366][T18867] Rebooting in 86400 seconds..