last executing test programs: 36.821084684s ago: executing program 2 (id=213): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0xfe, 0x4a1, &(0x7f00000001c0)="$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") r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100fffffffffffffffb00000000030005000000000002000000ac1414aa0000000000000000010015000000000001001400000000000100"], 0x68}, 0x1, 0x7}, 0x0) 36.017427717s ago: executing program 2 (id=216): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="24000000220001062abd7015fcffffff14000000000036"], 0x24}], 0x1}, 0x0) 35.210693324s ago: executing program 2 (id=221): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x24000004) 33.656623607s ago: executing program 2 (id=224): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8000, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x1221, &(0x7f0000002300)="$eJzs3M9rHGUYB/Bn2/wyNdmotdqC9EUvehmbHDx5CZKCdEFpm0IrCFMz0WU3uyGzBLaI7c2rf4d49CaI/0AuXjwL3nLx2IM40p1gTUiRFNrdhs/nsg8775d9ZncZ2OF9dv/D77Y6m2W2mQ/iTKMRU9sR6WGKFGfibNQexHu3fvv9rRu371xbbbXWrqd0dfXm8gcppcXLP3/29Q9v/zI4d+vHxZ9mY2/p8/0/V/7Yu7B3cf/vm1+1y9QuU68/SHm62+8P8rvdIm20y06W0qfdIi+L1O6Vxc6h45vd/vb2MOW9jYX57Z2iLFPeG6ZOMUyDfhrsDFP+Zd7upSzL0sJ88PRmYv37h1VVRVTVdMxEVVXVSzEf5+LlWIjFaMbSdMSr8Vqcj9fjQrwRb8bF0apxdw4AAAAAAAAAAAAAAAAAAACny//M/8cr5v8BAAAAAAAAAAAAAAAAAADgmTP/DwAAAAAAAAAAAAAAAAAAAONn/h8AAAAAAAAAAAAAAAAAAADG78btO9dWW6216ynNRWx9u7u+u14/1sdXN6Md3SjiSjTjrxhN/9fq+urHrbUraWQp3t+6f5C/v7t+9nB+efR3Asfml+t8Opyfjfn/5leiGeePz68cm5+Ld9+p841H+Sya8esX0Y9ubMSj7OP8N8spffRJ60j+0mgdAAAAnAZZ+texv9+zLDUa9dIjx+snn3x/oGoeuT/QOJyfiktTYzxxRsrhvU7e7RY7L1Zx8JWMe5388iT08+Ri5qDTSelnAoqDd+TBpPTzghbTEfEMX+LIhWIuImaf44WJ5+Lxhz7uTgAAAAAAAAAAADiJE2wMnKr32558O+G4zxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAfduBYAAAAAECYv3UaHRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcFQAA//8my+RP") mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x2837481, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file1\x00', 0x0, 0x2804, 0x0) 31.012433174s ago: executing program 2 (id=232): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f000000c800)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)=""/93, 0x5d}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/110, 0x6e}, {&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000001a80)=""/102, 0x66}], 0x5}, 0xc}, {{0x0, 0x0, 0x0}, 0x24c9ddb}, {{0x0, 0x0, 0x0}, 0xf04}, {{0x0, 0x0, 0x0}, 0x1}], 0x4, 0x40000000, 0x0) 29.905735727s ago: executing program 2 (id=237): unshare(0x2c020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r0, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x10) 26.855178972s ago: executing program 32 (id=237): unshare(0x2c020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r0, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x10) 6.677316516s ago: executing program 1 (id=311): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="005901e3fd18fb9c322293c67dcde48bfeffd1843c336e09b34af65ad26aafded7da5cfeeda2b8d8d900c2195f00f646f699eeb47813177405a6a6baf786c0d14f2079a9efa9db8973bcca25eb2973856c6760a483c41d0980c78a4cb096a5affa6b980600000000000000a1eacd2c820176737d4eb55dca564820dd769d8742f6d9ab243775a67afcdf845f978e95365cdf6f30aa43423b381881433e00ccbe6353b21300d8f0ca972589398eef9487db78486fcf174990c488031f8b39cc01bb509f3ea4bcde33d4c9e305ecb4dd88204c5d7bb5e469cabfda0feca3ce70c0acbc34d13e5a5c796eab23abfe3b717834f8e9d7120e1e925c4e210b4152c75210b3e979fbe8ddf23eef2d53733209b22206e0a4afc354c33d7ca2a00116a14d686e4aa86b6ec6a4130178c3ad8c723c0d8506bd7bff780000000000000000004b2ec61cfde813cc124715aaaf5508b93d8cf0860042108b660b74f94b1e4851eeec09fdb7a617eabeeeff8ce8bb99f4b1f9c2896cf31e19c3c24155b0ea7dc3cae1b56acb1946830cad94af3f1caf43ea03b38fc08a7e19480e283a4c0d", @ANYRES64=0x0, @ANYRES16=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRES32, @ANYRES32], 0x1, 0x1f4, &(0x7f0000000780)="$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") r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) 6.434008053s ago: executing program 4 (id=313): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000d40)='\t', 0x1}], 0x1, &(0x7f0000000d00)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x4}, 0x4000) 5.955504946s ago: executing program 0 (id=314): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffdfffff}) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5.818222048s ago: executing program 3 (id=315): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x7fffffff, &(0x7f00000003c0)) 5.537239666s ago: executing program 1 (id=316): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) syz_emit_ethernet(0x57, &(0x7f00000006c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x21, 0x2c, 0x1, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x2}, {"60be77cb019532a480abef77e2"}}}}}}}, 0x0) 5.451057025s ago: executing program 4 (id=317): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01ff22010000bfa90d2c0826364f080001"], 0x1c}}, 0x0) 4.977952342s ago: executing program 0 (id=318): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ac0)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000a000000080004"], 0xfc}}, 0x0) 4.590660115s ago: executing program 3 (id=319): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="495300000000fdffffff670000000c009d00"], 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x80) 4.525900363s ago: executing program 4 (id=320): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0xde61, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x29, {0x29, 0x0, "463a5070ac7f8e4d59d9496ce5b88eca0184b036371e8bed9d9b7a258ca0277e2f04a917e669a2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.853408008s ago: executing program 0 (id=321): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000040)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x88f}]}]}, 0x44}}, 0x48088) 3.838911387s ago: executing program 1 (id=322): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x44, r1, 0xc11, 0x0, 0x0, {0x5}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4, 0x2}]}]}]}, 0x44}}, 0x88c0) 3.511485769s ago: executing program 3 (id=323): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000100)={0x0}, 0x7, 0x0, 0x0, 0x41}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000001300)) 2.738989089s ago: executing program 0 (id=324): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x0, 0x6, 0x0, 0x18, 0xb, 0xe, 0x3, 0x9, {0x10001, 0x7, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x7, 0x8, 0x0, 0x2}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 2.685779961s ago: executing program 1 (id=325): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f0000000500)={0x0, "f1a1173fb9462d3509e67197f90be6e423ceb0ab4912f9f6a31854ec7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x820) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 2.590011524s ago: executing program 3 (id=326): syz_open_dev$sndpcmc(0x0, 0x1, 0x4b4362af3d5d59dd) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f0000001440)=[{0x0}, {&(0x7f0000000080)="6417319b73d21213", 0x8}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4000) 1.855992761s ago: executing program 3 (id=327): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b0040000000000000030000081c00000008"], 0x20}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050) 1.840209318s ago: executing program 1 (id=328): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') r1 = fanotify_init(0x10, 0x80000) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000000), 0x2000000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.59116955s ago: executing program 4 (id=329): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@rand_addr=' \x01\x00', @in=@empty, 0x0, 0x4000, 0x0, 0x0, 0xa, 0x0, 0x30, 0x0, 0x0, 0xee01}, {0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0x6}, 0xffffffff, 0x0, 0x1, 0x1}, {{@in=@private=0xa010101, 0x0, 0x6c}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}}, 0xe8) sendmmsg$inet6(r0, &(0x7f00000090c0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) 1.588392607s ago: executing program 0 (id=330): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x9, @loopback, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000100)=0x8, 0x4) 1.029173901s ago: executing program 3 (id=331): io_submit(0x0, 0x0, 0x0) r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f00000005c0)=ANY=[]) 717.245755ms ago: executing program 4 (id=332): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x1, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000041}) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) 705.329455ms ago: executing program 0 (id=333): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000001c0)={r1}, &(0x7f0000000280)=0x8) 412.609995ms ago: executing program 1 (id=334): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) timerfd_settime(r0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x3938700}}, 0x0) 0s ago: executing program 4 (id=335): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000000)=""/184, 0xb8}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f00000006c0)=""/206, 0xce}, {&(0x7f0000000b80)=""/218, 0xda}], 0x5}, 0x80000000}], 0x4, 0x20, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.101' (ED25519) to the list of known hosts. [ 195.591967][ T5785] cgroup: Unknown subsys name 'net' [ 195.726852][ T5785] cgroup: Unknown subsys name 'cpuset' [ 195.750542][ T5785] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.567921][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.574901][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.322168][ T5785] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 252.681758][ T5809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.693274][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 252.705984][ T5818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 252.714968][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.724663][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 252.732895][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 252.742321][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 252.750404][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.758897][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 252.770441][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 252.782175][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.797899][ T5824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 252.800295][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.810834][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 252.819683][ T5102] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 252.822770][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 252.838834][ T5102] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 252.847406][ T5102] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 252.848573][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 252.867072][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 252.882211][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 252.915549][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 252.925605][ T5102] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 252.947347][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 252.948337][ T5102] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 254.584978][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 254.877420][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 254.901666][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 254.928255][ T50] Bluetooth: hci1: command tx timeout [ 254.933944][ T50] Bluetooth: hci0: command tx timeout [ 254.942545][ T5814] Bluetooth: hci3: command tx timeout [ 255.066852][ T5818] Bluetooth: hci4: command tx timeout [ 255.072559][ T5818] Bluetooth: hci2: command tx timeout [ 255.180628][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 255.241888][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 256.009405][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.019555][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.027552][ T5808] bridge_slave_0: entered allmulticast mode [ 256.037189][ T5808] bridge_slave_0: entered promiscuous mode [ 256.200011][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.207756][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.215682][ T5808] bridge_slave_1: entered allmulticast mode [ 256.225364][ T5808] bridge_slave_1: entered promiscuous mode [ 256.282985][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.290837][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.298802][ T5807] bridge_slave_0: entered allmulticast mode [ 256.309099][ T5807] bridge_slave_0: entered promiscuous mode [ 256.564876][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.572476][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.581135][ T5812] bridge_slave_0: entered allmulticast mode [ 256.591002][ T5812] bridge_slave_0: entered promiscuous mode [ 256.602838][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.610737][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.618702][ T5807] bridge_slave_1: entered allmulticast mode [ 256.631577][ T5807] bridge_slave_1: entered promiscuous mode [ 256.652580][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.733271][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.741326][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.749218][ T5810] bridge_slave_0: entered allmulticast mode [ 256.758689][ T5810] bridge_slave_0: entered promiscuous mode [ 256.811421][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.821542][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.829583][ T5817] bridge_slave_0: entered allmulticast mode [ 256.839378][ T5817] bridge_slave_0: entered promiscuous mode [ 256.851740][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.859707][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.867598][ T5812] bridge_slave_1: entered allmulticast mode [ 256.877111][ T5812] bridge_slave_1: entered promiscuous mode [ 256.894034][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.936947][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.944830][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.952516][ T5810] bridge_slave_1: entered allmulticast mode [ 256.961703][ T5810] bridge_slave_1: entered promiscuous mode [ 257.005434][ T5818] Bluetooth: hci3: command tx timeout [ 257.005788][ T5814] Bluetooth: hci0: command tx timeout [ 257.011174][ T5818] Bluetooth: hci1: command tx timeout [ 257.028717][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.036479][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.044060][ T5817] bridge_slave_1: entered allmulticast mode [ 257.052721][ T5817] bridge_slave_1: entered promiscuous mode [ 257.143854][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.155429][ T50] Bluetooth: hci2: command tx timeout [ 257.161115][ T50] Bluetooth: hci4: command tx timeout [ 257.167364][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.361382][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.418920][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.439140][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.456780][ T5808] team0: Port device team_slave_0 added [ 257.553898][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.576973][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.592965][ T5808] team0: Port device team_slave_1 added [ 257.640008][ T5807] team0: Port device team_slave_0 added [ 257.654160][ T5812] team0: Port device team_slave_0 added [ 257.668574][ T5807] team0: Port device team_slave_1 added [ 257.717550][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.799525][ T5812] team0: Port device team_slave_1 added [ 258.023190][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.031865][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.059439][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.080302][ T5810] team0: Port device team_slave_0 added [ 258.099049][ T5810] team0: Port device team_slave_1 added [ 258.141861][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.149196][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.175643][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.192250][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.199694][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.226097][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.240324][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.248032][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.274814][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.288662][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.296150][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.322553][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.395756][ T5817] team0: Port device team_slave_0 added [ 258.458835][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.466296][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.492794][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.519616][ T5817] team0: Port device team_slave_1 added [ 258.563623][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.571046][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.597617][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.615221][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.622402][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.648833][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.848875][ T5807] hsr_slave_0: entered promiscuous mode [ 258.859984][ T5807] hsr_slave_1: entered promiscuous mode [ 258.872668][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.880015][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.906500][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.061919][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.070745][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.075534][ T50] Bluetooth: hci0: command tx timeout [ 259.098333][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.102815][ T5814] Bluetooth: hci1: command tx timeout [ 259.116766][ T5818] Bluetooth: hci3: command tx timeout [ 259.161198][ T5808] hsr_slave_0: entered promiscuous mode [ 259.170689][ T5808] hsr_slave_1: entered promiscuous mode [ 259.179536][ T5808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.187429][ T5808] Cannot create hsr debugfs directory [ 259.230369][ T5818] Bluetooth: hci4: command tx timeout [ 259.236222][ T50] Bluetooth: hci2: command tx timeout [ 259.259800][ T5812] hsr_slave_0: entered promiscuous mode [ 259.269378][ T5812] hsr_slave_1: entered promiscuous mode [ 259.278293][ T5812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.286177][ T5812] Cannot create hsr debugfs directory [ 259.483059][ T5810] hsr_slave_0: entered promiscuous mode [ 259.492196][ T5810] hsr_slave_1: entered promiscuous mode [ 259.500614][ T5810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.508517][ T5810] Cannot create hsr debugfs directory [ 259.830989][ T5817] hsr_slave_0: entered promiscuous mode [ 259.843183][ T5817] hsr_slave_1: entered promiscuous mode [ 259.851273][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.859195][ T5817] Cannot create hsr debugfs directory [ 261.081344][ T5807] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 261.105483][ T5807] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 261.144932][ T50] Bluetooth: hci0: command tx timeout [ 261.150625][ T50] Bluetooth: hci1: command tx timeout [ 261.157386][ T50] Bluetooth: hci3: command tx timeout [ 261.180581][ T5807] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 261.235729][ T5807] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 261.324580][ T5818] Bluetooth: hci2: command tx timeout [ 261.330295][ T5818] Bluetooth: hci4: command tx timeout [ 261.395560][ T5810] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 261.447799][ T5808] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 261.524915][ T5808] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 261.545315][ T5810] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 261.566078][ T5810] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 261.603265][ T5810] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 261.624732][ T5808] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 261.675276][ T5808] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 261.819553][ T5812] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 261.916506][ T5812] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 262.009688][ T5812] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 262.083224][ T5812] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 262.118525][ T5817] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 262.196176][ T5817] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 262.282238][ T5817] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 262.333581][ T5817] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 262.882619][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.013630][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.044606][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.157264][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.185677][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.289867][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.310637][ T4012] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.318304][ T4012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.335515][ T4012] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.343085][ T4012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.501921][ T4012] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.509595][ T4012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.525769][ T4012] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.533329][ T4012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.549991][ T4012] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.557683][ T4012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.630045][ T4012] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.637747][ T4012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.717084][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.905773][ T5807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 264.103104][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.230575][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.238330][ T1001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.280917][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.356159][ T1001] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.363761][ T1001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.651231][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.770806][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.778532][ T1001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.918412][ T1001] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.926110][ T1001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.169008][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.368018][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.432199][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.833295][ T5810] veth0_vlan: entered promiscuous mode [ 266.921773][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.990053][ T5810] veth1_vlan: entered promiscuous mode [ 267.091964][ T5808] veth0_vlan: entered promiscuous mode [ 267.254395][ T5808] veth1_vlan: entered promiscuous mode [ 267.373323][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.443088][ T5810] veth0_macvtap: entered promiscuous mode [ 267.587647][ T5812] veth0_vlan: entered promiscuous mode [ 267.603605][ T5810] veth1_macvtap: entered promiscuous mode [ 267.703387][ T5812] veth1_vlan: entered promiscuous mode [ 267.846134][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.858617][ T5808] veth0_macvtap: entered promiscuous mode [ 267.956745][ T5808] veth1_macvtap: entered promiscuous mode [ 267.986208][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.109287][ T5817] veth0_vlan: entered promiscuous mode [ 268.128095][ T5810] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.138436][ T5810] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.150345][ T5810] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.159546][ T5810] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.212322][ T5812] veth0_macvtap: entered promiscuous mode [ 268.279872][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.325383][ T5817] veth1_vlan: entered promiscuous mode [ 268.356529][ T5812] veth1_macvtap: entered promiscuous mode [ 268.450142][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.528131][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.593088][ T5808] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.602518][ T5808] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.612068][ T5808] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.621379][ T5808] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.691576][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.836554][ T5812] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.847542][ T5812] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.856996][ T5812] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.866214][ T5812] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.915538][ T5817] veth0_macvtap: entered promiscuous mode [ 268.958042][ T5817] veth1_macvtap: entered promiscuous mode [ 269.068084][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.185888][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.253849][ T5817] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.263349][ T5817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.272655][ T5817] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.281819][ T5817] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.557521][ T5807] veth0_vlan: entered promiscuous mode [ 269.642473][ T5807] veth1_vlan: entered promiscuous mode [ 270.091779][ T5807] veth0_macvtap: entered promiscuous mode [ 270.212277][ T5807] veth1_macvtap: entered promiscuous mode [ 270.429115][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.474186][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.580094][ T5807] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.592321][ T5807] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.602230][ T5807] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.611539][ T5807] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.328226][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.336630][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.572923][ T1001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.581349][ T1001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.962405][ T4267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.971779][ T4267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.045549][ T5810] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 276.063741][ T4267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.072133][ T4267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.236100][ T3620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.246529][ T3620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.382435][ T4012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.391222][ T4012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.867500][ T5991] loop0: detected capacity change from 0 to 1024 [ 276.897150][ T5991] ======================================================= [ 276.897150][ T5991] WARNING: The mand mount option has been deprecated and [ 276.897150][ T5991] and is ignored by this kernel. Remove the mand [ 276.897150][ T5991] option from the mount to silence this warning. [ 276.897150][ T5991] ======================================================= [ 276.982885][ T4012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.991717][ T4012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.165426][ T5991] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.178501][ T5991] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.277597][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.285971][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.385711][ T5997] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set [ 277.939116][ T1001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.947407][ T1001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.056217][ T5810] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.145143][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.153381][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.965242][ T6006] loop2: detected capacity change from 0 to 32768 [ 279.012442][ T6006] (syz.2.6,6006,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x26a7570f, computed 0x51f68f67. Applying ECC. [ 279.027092][ T6006] (syz.2.6,6006,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x26a7570f, computed 0x91fd3046 [ 279.031487][ T6012] loop3: detected capacity change from 0 to 64 [ 279.039822][ T6006] (syz.2.6,6006,1):ocfs2_validate_dir_block:452 ERROR: Checksum failed for dinode 288 [ 279.039979][ T6006] (syz.2.6,6006,1):ocfs2_read_virt_blocks:1029 ERROR: status = -5 [ 279.064550][ T6006] (syz.2.6,6006,1):ocfs2_read_dir_block:511 ERROR: status = -5 [ 279.072411][ T6006] (syz.2.6,6006,1):ocfs2_find_entry_el:728 ERROR: reading directory 18, offset 0 [ 279.084838][ T6006] (syz.2.6,6006,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22 [ 279.093837][ T6006] (syz.2.6,6006,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 279.094029][ T6006] (syz.2.6,6006,1):ocfs2_init_global_system_inodes:476 ERROR: status = -22 [ 279.118849][ T6006] (syz.2.6,6006,1):ocfs2_initialize_super:2198 ERROR: status = -22 [ 279.127687][ T6006] (syz.2.6,6006,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 279.785211][ T6017] mmap: syz.0.8 (6017) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 279.829197][ T5812] hfs: node 4:3 still has 1 user(s)! [ 280.180686][ T6019] loop3: detected capacity change from 0 to 47 [ 280.327514][ T6019] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 280.824745][ T5867] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 281.034953][ T5867] usb 1-1: Using ep0 maxpacket: 16 [ 281.183730][ T5867] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 281.193878][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 281.202498][ T5867] usb 1-1: Product: syz [ 281.207092][ T5867] usb 1-1: Manufacturer: syz [ 281.211953][ T5867] usb 1-1: SerialNumber: syz [ 281.616366][ T5867] usb 1-1: config 0 descriptor?? [ 281.952145][ T6033] loop1: detected capacity change from 0 to 40427 [ 282.094724][ T6033] F2FS-fs (loop1): invalid crc value [ 282.225236][ T5867] usb 1-1: USB disconnect, device number 2 [ 282.442941][ T6033] F2FS-fs (loop1): Start checkpoint disabled! [ 282.474536][ T6033] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 282.844244][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'. [ 282.994852][ T6048] loop4: detected capacity change from 0 to 512 [ 283.162870][ T6048] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 283.177514][ T6048] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 283.601907][ T6048] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 283.660807][ T6048] System zones: 1-12 [ 283.672228][ T6048] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 283.723990][ T6048] EXT4-fs (loop4): 1 truncate cleaned up [ 283.748185][ T6048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.373768][ T6061] loop3: detected capacity change from 0 to 256 [ 284.630914][ T5807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.830798][ T6063] loop0: detected capacity change from 0 to 1024 [ 284.877683][ T6063] EXT4-fs: Ignoring removed nobh option [ 284.883603][ T6063] EXT4-fs: inline encryption not supported [ 284.890025][ T6063] EXT4-fs: Ignoring removed bh option [ 284.978882][ T6061] FAT-fs (loop3): Directory bread(block 64) failed [ 284.987176][ T6061] FAT-fs (loop3): Directory bread(block 65) failed [ 284.994163][ T6061] FAT-fs (loop3): Directory bread(block 66) failed [ 285.001900][ T6061] FAT-fs (loop3): Directory bread(block 67) failed [ 285.009058][ T6061] FAT-fs (loop3): Directory bread(block 68) failed [ 285.016078][ T6061] FAT-fs (loop3): Directory bread(block 69) failed [ 285.023001][ T6061] FAT-fs (loop3): Directory bread(block 70) failed [ 285.030191][ T6061] FAT-fs (loop3): Directory bread(block 71) failed [ 285.038356][ T6061] FAT-fs (loop3): Directory bread(block 72) failed [ 285.048608][ T6061] FAT-fs (loop3): Directory bread(block 73) failed [ 285.189355][ T6063] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.891590][ T6074] capability: warning: `syz.2.32' uses deprecated v2 capabilities in a way that may be insecure [ 286.080173][ T5810] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.121573][ T6076] loop3: detected capacity change from 0 to 256 [ 286.231159][ T6072] udevd[6072]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.496973][ T6076] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0x31e44978, utbl_chksum : 0xe619d30d) [ 286.731716][ T6082] netlink: 16 bytes leftover after parsing attributes in process `syz.1.23'. [ 286.883044][ T6085] netlink: 16 bytes leftover after parsing attributes in process `syz.2.35'. [ 286.894834][ T6085] netlink: 36 bytes leftover after parsing attributes in process `syz.2.35'. [ 287.582192][ T6090] ip6gretap1: entered promiscuous mode [ 287.985619][ T6091] loop4: detected capacity change from 0 to 2048 [ 288.157626][ T6098] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 288.344685][ T30] audit: type=1800 audit(1748357813.056:2): pid=6091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.36" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 288.446308][ T6091] NILFS (loop4): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 288.457693][ T6091] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=16) [ 288.479184][ T6091] Remounting filesystem read-only [ 288.876282][ T5807] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 289.505027][ T6114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.45'. [ 290.051782][ T6116] capability: warning: `syz.1.48' uses 32-bit capabilities (legacy support in use) [ 290.119796][ T6108] loop2: detected capacity change from 0 to 40427 [ 290.135179][ T6108] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 290.143237][ T6108] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 290.161688][ T6108] F2FS-fs (loop2): invalid crc value [ 290.246448][ T6108] F2FS-fs (loop2): Wrong journal entry on segno 2147483648 [ 290.261808][ T6108] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 290.429339][ T6125] loop4: detected capacity change from 0 to 256 [ 290.739635][ T6125] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 291.017955][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.028962][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.447917][ T6129] tipc: Started in network mode [ 291.453229][ T6129] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 291.461818][ T6129] tipc: Enabled bearer , priority 1 [ 291.666109][ T6131] Bluetooth: MGMT ver 1.23 [ 292.588152][ T5871] tipc: Node number set to 10136234 [ 293.009296][ T6140] loop1: detected capacity change from 0 to 4096 [ 293.201181][ T6151] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 293.608116][ T6148] loop4: detected capacity change from 0 to 4096 [ 293.632976][ T6148] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 294.737076][ T5867] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 295.007045][ T5867] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.018546][ T5867] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 295.103531][ T5867] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 295.114574][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 295.122887][ T5867] usb 3-1: SerialNumber: syz [ 295.279272][ T5867] usb 3-1: 0:2 : does not exist [ 295.497109][ T6171] loop3: detected capacity change from 0 to 16 [ 295.542625][ T6171] erofs (device loop3): mounted with root inode @ nid 36. [ 295.608995][ T6169] loop4: detected capacity change from 0 to 1764 [ 295.636849][ T30] audit: type=1800 audit(1748357820.336:3): pid=6171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.73" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 297.976683][ T5867] usb 3-1: USB disconnect, device number 2 [ 298.379771][ T6198] tmpfs: Bad value for 'mpol' [ 298.866896][ T11] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 298.959705][ T6207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.90'. [ 299.124534][ T11] usb 2-1: Using ep0 maxpacket: 32 [ 299.156753][ T11] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 299.165647][ T11] usb 2-1: config 0 has no interface number 0 [ 299.289120][ T11] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 299.298810][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.312582][ T11] usb 2-1: Product: syz [ 299.320362][ T11] usb 2-1: Manufacturer: syz [ 299.325527][ T11] usb 2-1: SerialNumber: syz [ 299.377825][ T11] usb 2-1: config 0 descriptor?? [ 299.466406][ T11] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 299.728143][ T11] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 299.838973][ T11] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 300.129896][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 300.152544][ T11] usb 2-1: USB disconnect, device number 2 [ 300.192923][ T11] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 300.272855][ T6219] fuse: Unexpected value for 'default_permissions' [ 300.317638][ T11] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 300.333204][ T11] quatech2 2-1:0.51: device disconnected [ 300.974992][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.97'. [ 303.394705][ T6256] loop1: detected capacity change from 0 to 512 [ 303.561809][ T6252] loop3: detected capacity change from 0 to 4096 [ 303.666509][ T6256] EXT4-fs (loop1): 1 orphan inode deleted [ 303.675262][ T6256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.738891][ T1153] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 303.749623][ T1153] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:9: Failed to release dquot type 1 [ 303.831409][ T6256] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.901813][ T6268] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 303.963622][ T6267] loop4: detected capacity change from 0 to 512 [ 304.178228][ T6267] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.116: corrupted in-inode xattr: bad e_name length [ 304.345473][ T6267] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.116: couldn't read orphan inode 15 (err -117) [ 304.391101][ T6267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.616313][ T6267] EXT4-fs warning (device loop4): dx_probe:863: inode #2: comm syz.4.116: dx entry: limit 0 != root limit 125 [ 304.626968][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.628568][ T6267] EXT4-fs warning (device loop4): dx_probe:936: inode #2: comm syz.4.116: Corrupt directory, running e2fsck is recommended [ 304.666181][ T1153] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 304.676965][ T1153] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:9: Failed to release dquot type 1 [ 304.707384][ T6267] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.116: path /19/file7: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 305.031380][ T6276] loop1: detected capacity change from 0 to 128 [ 305.127814][ T5807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.889369][ T6284] loop0: detected capacity change from 0 to 1024 [ 305.971353][ T6289] loop3: detected capacity change from 0 to 256 [ 306.267385][ T6289] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 306.402798][ T6289] exFAT-fs (loop3): error, data size is invalid(10) [ 306.410112][ T6289] exFAT-fs (loop3): Filesystem has been set read-only [ 306.546793][ T6293] exFAT-fs (loop3): error, data size is invalid(10) [ 307.873041][ T6308] loop3: detected capacity change from 0 to 512 [ 308.113777][ T6308] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.133: casefold flag without casefold feature [ 308.137721][ T6308] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.133: couldn't read orphan inode 15 (err -117) [ 308.237030][ T6308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.747521][ T5812] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.795099][ T6319] loop4: detected capacity change from 0 to 1024 [ 308.860490][ T6319] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (61418!=35945) [ 308.870777][ T6319] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 308.986231][ T6319] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 309.072311][ T6319] EXT4-fs (loop4): orphan cleanup on readonly fs [ 309.080536][ T6319] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #3: comm syz.4.138: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 2(4), depth 0(0) [ 309.180305][ T6319] EXT4-fs error (device loop4): ext4_quota_enable:7129: comm syz.4.138: Bad quota inode: 3, type: 0 [ 309.294068][ T6319] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 309.309998][ T6319] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 309.327057][ T6319] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 309.845075][ T11] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 309.977118][ T5807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.039455][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 310.087298][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.099121][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.109956][ T11] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 310.119431][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.247313][ T11] usb 1-1: config 0 descriptor?? [ 310.781542][ T11] elecom 0003:056E:00FF.0001: item fetching failed at offset 2/5 [ 310.863905][ T11] elecom 0003:056E:00FF.0001: probe with driver elecom failed with error -22 [ 311.012948][ T5867] usb 1-1: USB disconnect, device number 3 [ 311.200947][ T6344] loop1: detected capacity change from 0 to 128 [ 312.510968][ T6363] loop4: detected capacity change from 0 to 256 [ 312.740774][ T6363] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 313.714255][ T6373] loop3: detected capacity change from 0 to 1024 [ 314.042978][ T6367] loop0: detected capacity change from 0 to 8192 [ 314.165376][ T6367] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 314.187321][ T6373] hfsplus: found bad thread record in catalog [ 314.193678][ T6373] hfsplus: catalog searching failed [ 314.303399][ T6379] loop1: detected capacity change from 0 to 256 [ 314.689306][ T1153] hfsplus: b-tree write err: -5, ino 4 [ 314.885385][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.167'. [ 315.793364][ T6394] loop2: detected capacity change from 0 to 256 [ 316.109130][ T6398] netlink: 16 bytes leftover after parsing attributes in process `syz.1.175'. [ 316.652912][ T6397] loop0: detected capacity change from 0 to 4096 [ 316.996907][ T6406] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 317.774822][ T11] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 317.946431][ T11] usb 5-1: Using ep0 maxpacket: 32 [ 317.973073][ T11] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 317.982014][ T11] usb 5-1: config 0 has no interface number 0 [ 317.989328][ T11] usb 5-1: config 0 interface 29 has no altsetting 0 [ 318.108908][ T11] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 318.118666][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.137202][ T11] usb 5-1: Product: syz [ 318.141644][ T11] usb 5-1: Manufacturer: syz [ 318.146611][ T11] usb 5-1: SerialNumber: syz [ 318.249461][ T11] usb 5-1: config 0 descriptor?? [ 318.577366][ T11] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 318.804482][ T11] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 318.811949][ T11] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 318.819316][ T11] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 319.018720][ T11] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -22 [ 319.261217][ T11] usb 5-1: USB disconnect, device number 2 [ 320.013530][ T6426] loop1: detected capacity change from 0 to 32768 [ 320.137813][ T6426] gfs2: fsid=meta: Trying to join cluster "lock_nolock", "meta" [ 320.146024][ T6426] gfs2: fsid=meta: Now mounting FS (format 1802)... [ 320.222348][ T6426] gfs2: fsid=meta.0: fatal: filesystem consistency error - inode = 0 19, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 399 [ 320.237602][ T6426] gfs2: fsid=meta.0: G: s:SH n:2/13 f:aqobnN t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 320.247118][ T6426] gfs2: fsid=meta.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0x124/0x510 [ 320.256626][ T6426] gfs2: fsid=meta.0: I: n:0/19 t:4 f:0x00 d:0x00000000 s:0 p:0 [ 320.264936][ T6426] gfs2: fsid=meta.0: about to withdraw this file system [ 320.308815][ T6426] gfs2: fsid=meta.0: Journal recovery skipped for jid 0 until next mount. [ 320.317805][ T6426] gfs2: fsid=meta.0: Glock dequeues delayed: 0 [ 320.325754][ T6426] gfs2: fsid=meta.0: File system withdrawn [ 320.331862][ T6426] CPU: 1 UID: 0 PID: 6426 Comm: syz.1.187 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(undef) [ 320.332019][ T6426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 320.332125][ T6426] Call Trace: [ 320.332187][ T6426] [ 320.332242][ T6426] __dump_stack+0x26/0x30 [ 320.332435][ T6426] dump_stack_lvl+0x1df/0x270 [ 320.332640][ T6426] dump_stack+0x1e/0x25 [ 320.332824][ T6426] gfs2_withdraw+0x1d26/0x22e0 [ 320.333102][ T6426] gfs2_consist_inode_i+0x1b2/0x250 [ 320.333333][ T6426] inode_go_instantiate+0x12a7/0x1cf0 [ 320.333593][ T6426] ? __pfx_inode_go_instantiate+0x10/0x10 [ 320.333804][ T6426] gfs2_instantiate+0x24f/0x4b0 [ 320.334034][ T6426] gfs2_glock_wait+0x26a/0x3b0 [ 320.334223][ T6426] gfs2_glock_nq+0x28cf/0x34a0 [ 320.334433][ T6426] init_journal+0x13e8/0x3a30 [ 320.334671][ T6426] ? init_inodes+0x124/0x510 [ 320.334874][ T6426] ? init_inodes+0x124/0x510 [ 320.335063][ T6426] ? kmsan_get_metadata+0xfb/0x160 [ 320.335242][ T6426] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 320.335432][ T6426] init_inodes+0x124/0x510 [ 320.335640][ T6426] gfs2_fill_super+0x38aa/0x3fb0 [ 320.335856][ T6426] ? init_locking+0xed/0x500 [ 320.336109][ T6426] get_tree_bdev_flags+0x6e6/0x920 [ 320.336273][ T6426] ? __pfx_gfs2_fill_super+0x10/0x10 [ 320.336485][ T6426] ? __pfx_gfs2_fill_super+0x10/0x10 [ 320.336685][ T6426] ? __pfx_gfs2_get_tree+0x10/0x10 [ 320.336893][ T6426] get_tree_bdev+0x38/0x50 [ 320.337045][ T6426] gfs2_get_tree+0x57/0x350 [ 320.337265][ T6426] ? __pfx_gfs2_get_tree+0x10/0x10 [ 320.337470][ T6426] vfs_get_tree+0xb3/0x5c0 [ 320.337627][ T6426] ? mount_capable+0x99/0x100 [ 320.337831][ T6426] do_new_mount+0x738/0x1610 [ 320.337989][ T6426] ? kmsan_get_metadata+0xfb/0x160 [ 320.338172][ T6426] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 320.338384][ T6426] path_mount+0x6db/0x1e90 [ 320.338548][ T6426] ? user_path_at+0x32d/0x3d0 [ 320.338765][ T6426] __se_sys_mount+0x6eb/0x7d0 [ 320.338928][ T6426] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 320.339201][ T6426] __x64_sys_mount+0xe4/0x150 [ 320.339383][ T6426] x64_sys_call+0xfa7/0x3db0 [ 320.339596][ T6426] do_syscall_64+0xd9/0x1c0 [ 320.339760][ T6426] ? irqentry_exit+0x16/0x60 [ 320.339902][ T6426] ? clear_bhb_loop+0x40/0x90 [ 320.340082][ T6426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.340267][ T6426] RIP: 0033:0x7fbb1e99010a [ 320.340406][ T6426] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.340528][ T6426] RSP: 002b:00007fbb1f7b9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 320.340672][ T6426] RAX: ffffffffffffffda RBX: 00007fbb1f7b9ef0 RCX: 00007fbb1e99010a [ 320.340779][ T6426] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007fbb1f7b9eb0 [ 320.340878][ T6426] RBP: 0000200000000400 R08: 00007fbb1f7b9ef0 R09: 0000000001000004 [ 320.340982][ T6426] R10: 0000000001000004 R11: 0000000000000246 R12: 0000200000012500 [ 320.341077][ T6426] R13: 00007fbb1f7b9eb0 R14: 000000000001263f R15: 0000200000000240 [ 320.341217][ T6426] [ 320.648913][ T6426] gfs2: fsid=meta.0: can't acquire journal inode glock: -5 [ 322.163263][ T5990] udevd[5990]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 322.370704][ T6448] loop1: detected capacity change from 0 to 32768 [ 322.430558][ T6448] (syz.1.197,6448,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22 [ 322.439965][ T6448] (syz.1.197,6448,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 2, possibly corrupt fs? [ 322.440149][ T6448] (syz.1.197,6448,1):ocfs2_init_global_system_inodes:476 ERROR: status = -22 [ 322.462054][ T6448] (syz.1.197,6448,1):ocfs2_initialize_super:2198 ERROR: status = -22 [ 322.471191][ T6448] (syz.1.197,6448,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 323.167634][ T6458] loop3: detected capacity change from 0 to 256 [ 323.401566][ T6458] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 323.661896][ T6466] loop4: detected capacity change from 0 to 8 [ 323.885214][ T6466] SQUASHFS error: lzo decompression failed, data probably corrupt [ 323.893552][ T6466] SQUASHFS error: Failed to read block 0x28d: -5 [ 323.900407][ T6466] SQUASHFS error: Unable to read metadata cache entry [28b] [ 323.908163][ T6466] SQUASHFS error: Unable to read inode 0x11f [ 324.441198][ T6464] loop0: detected capacity change from 0 to 32768 [ 324.522327][ T6464] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 324.591181][ T6464] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=xxhash,data_checksum=xxhash,compression=lz4,str_hash=crc64,norecovery,reconstruct_alloc [ 324.591181][ T6464] allowing incompatible features above 0.0: (unknown version) [ 324.591181][ T6464] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 324.632592][ T6464] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 324.641650][ T6464] bcachefs (loop0): Version upgrade from 1.19: autofix_errors to 1.7: mi_btree_bitmap incomplete [ 324.641650][ T6464] Doing compatible version upgrade from 1.19: autofix_errors to 1.28: inode_has_case_insensitive [ 324.641650][ T6464] running recovery passes: check_extents_to_backpointers,check_inodes [ 324.681813][ T6464] bcachefs (loop0): dropping and reconstructing all alloc info [ 324.741943][ T6464] bcachefs (loop0): error reading btree root btree=dirents level=0: btree_node_read_error, fixing [ 324.761809][ T6464] bcachefs (loop0): btree node read error at btree xattrs level 0/0 [ 324.761916][ T6464] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 324.762023][ T6464] loop0 node offset 0/16: got wrong btree node: got [ 324.762101][ T6464] btree=xattrs level=0 seq ded0abe32 1 [ 324.762170][ T6464] min: POS_MIN [ 324.762229][ T6464] max: SPOS_MAX [ 324.762293][ T6464] flagging btree xattrs lost data [ 324.762362][ T6464] ret btree_node_read_validate_error [ 324.827876][ T6464] bcachefs (loop0): error reading btree root btree=xattrs level=0: btree_node_read_error, fixing [ 324.865014][ T6464] bcachefs (loop0): scan_for_btree_nodes... [ 324.910111][ T6464] bcachefs (loop0): btree node scan found 3 nodes after overwrites [ 324.929542][ T6464] done [ 324.932563][ T6464] bcachefs (loop0): check_topology... [ 324.932960][ T6464] bcachefs (loop0): btree root dirents unreadable, must recover from scan [ 324.948137][ T6464] bcachefs (loop0): no nodes found for btree dirents, continuing [ 324.956535][ T6464] bcachefs (loop0): btree root xattrs unreadable, must recover from scan [ 324.965840][ T6464] bcachefs (loop0): bch2_get_scanned_nodes(): recovery btree=xattrs level=0 POS_MIN - SPOS_MAX [ 324.977486][ T6464] bcachefs (loop0): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ded0abe32 written 8 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 325.015899][ T6464] done [ 325.019004][ T6464] bcachefs (loop0): accounting_read... done [ 325.029672][ T6464] bcachefs (loop0): alloc_read... done [ 325.038105][ T6464] bcachefs (loop0): snapshots_read... done [ 325.047269][ T6464] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 325.059412][ T6464] bcachefs (loop0): done starting filesystem [ 325.265277][ T5810] bcachefs (loop0): shutting down [ 325.380941][ T5810] bcachefs (loop0): shutdown complete [ 325.849083][ T6483] loop2: detected capacity change from 0 to 512 [ 325.975392][ T6483] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.213: corrupted in-inode xattr: invalid ea_ino [ 326.035745][ T6483] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.213: couldn't read orphan inode 15 (err -117) [ 326.057066][ T6483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.307873][ T5808] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.769139][ T6494] netlink: 16 bytes leftover after parsing attributes in process `syz.4.217'. [ 327.376496][ T6500] loop3: detected capacity change from 0 to 256 [ 327.608773][ T6503] tipc: Started in network mode [ 327.614025][ T6503] tipc: Node identity e0000001, cluster identity 4711 [ 327.621510][ T6503] tipc: Enabling of bearer rejected, failed to enable media [ 327.936636][ T6500] FAT-fs (loop3): Directory bread(block 64) failed [ 327.943600][ T6500] FAT-fs (loop3): Directory bread(block 65) failed [ 327.959142][ T6500] FAT-fs (loop3): Directory bread(block 66) failed [ 327.968931][ T6500] FAT-fs (loop3): Directory bread(block 67) failed [ 327.976087][ T6500] FAT-fs (loop3): Directory bread(block 68) failed [ 327.982884][ T6500] FAT-fs (loop3): Directory bread(block 69) failed [ 327.989995][ T6500] FAT-fs (loop3): Directory bread(block 70) failed [ 327.996923][ T6500] FAT-fs (loop3): Directory bread(block 71) failed [ 328.003881][ T6500] FAT-fs (loop3): Directory bread(block 72) failed [ 328.010950][ T6500] FAT-fs (loop3): Directory bread(block 73) failed [ 328.330506][ T6504] loop4: detected capacity change from 0 to 4096 [ 328.701381][ T6508] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 328.946326][ T6510] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 328.956239][ T6510] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=12) [ 329.100193][ T6510] Remounting filesystem read-only [ 329.105830][ T6510] NILFS (loop4): error -5 truncating bmap (ino=12) [ 329.135051][ T5867] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 329.392049][ T5867] usb 2-1: Using ep0 maxpacket: 16 [ 329.433716][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 329.445688][ T5867] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 329.459209][ T5867] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 329.468949][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.608914][ T5807] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 329.675686][ T5867] usb 2-1: config 0 descriptor?? [ 330.226913][ T5867] hid-picolcd 0003:04D8:C002.0002: No report with id 0x11 found [ 330.363746][ T5867] usb 2-1: USB disconnect, device number 3 [ 330.803170][ T6513] loop2: detected capacity change from 0 to 8192 [ 331.030412][ T6524] loop4: detected capacity change from 0 to 1024 [ 331.210314][ T6524] hfsplus: walked past end of dir [ 331.357610][ T5808] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 331.366730][ T5808] FAT-fs (loop2): Filesystem has been set read-only [ 331.452262][ T5808] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 331.735158][ T6528] netlink: 'syz.1.231': attribute type 2 has an invalid length. [ 332.094891][ T6526] loop0: detected capacity change from 0 to 8192 [ 332.340523][ T14] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.631246][ T14] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.924188][ T14] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.982394][ T6535] netlink: 32 bytes leftover after parsing attributes in process `syz.3.235'. [ 332.995680][ T6537] netlink: 'syz.1.236': attribute type 2 has an invalid length. [ 333.063869][ T6535] IPVS: Unknown mcast interface: wg0 [ 333.075518][ T6537] netlink: 'syz.1.236': attribute type 2 has an invalid length. [ 333.171177][ T14] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.411906][ T6539] loop4: detected capacity change from 0 to 1024 [ 334.169124][ T14] bridge_slave_1: left allmulticast mode [ 334.175776][ T14] bridge_slave_1: left promiscuous mode [ 334.182583][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.318500][ T14] bridge_slave_0: left allmulticast mode [ 334.325284][ T14] bridge_slave_0: left promiscuous mode [ 334.332062][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.009028][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.061469][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.093544][ T14] bond0 (unregistering): Released all slaves [ 335.265729][ T14] tipc: Left network mode [ 335.748796][ T14] hsr_slave_0: left promiscuous mode [ 335.775143][ T14] hsr_slave_1: left promiscuous mode [ 335.783495][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.796410][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.890795][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.899223][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.070016][ T14] veth1_macvtap: left promiscuous mode [ 336.075979][ T14] veth0_macvtap: left promiscuous mode [ 336.081898][ T14] veth1_vlan: left promiscuous mode [ 336.087608][ T14] veth0_vlan: left promiscuous mode [ 336.094607][ T5867] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 336.599640][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.611355][ T5867] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 336.624881][ T5867] usb 4-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 336.634245][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.911577][ T5867] usb 4-1: config 0 descriptor?? [ 337.186108][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.245'. [ 337.458835][ T5867] ortek 0003:1223:3F07.0003: bogus close delimiter [ 337.467446][ T5867] ortek 0003:1223:3F07.0003: item 0 0 2 10 parsing failed [ 337.491456][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 337.501336][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 337.511116][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 337.525358][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 337.537135][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 337.583136][ T5867] ortek 0003:1223:3F07.0003: probe with driver ortek failed with error -22 [ 337.712894][ T11] usb 4-1: USB disconnect, device number 2 [ 337.825375][ T14] team0 (unregistering): Port device team_slave_1 removed [ 337.859532][ T14] team0 (unregistering): Port device team_slave_0 removed [ 338.406450][ T6571] netlink: 56 bytes leftover after parsing attributes in process `syz.4.249'. [ 338.760287][ T6574] sp0: Synchronizing with TNC [ 338.786713][ T1001] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 338.795258][ T1001] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 338.825623][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 339.145917][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 339.390862][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 339.628779][ T5818] Bluetooth: hci1: command tx timeout [ 339.795421][ T30] audit: type=1326 audit(1748357864.486:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.0.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcddcb8e969 code=0x7ffc0000 [ 339.818825][ T30] audit: type=1326 audit(1748357864.496:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.0.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcddcb8e969 code=0x7ffc0000 [ 339.843971][ T30] audit: type=1326 audit(1748357864.506:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.0.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fcddcb8e969 code=0x7ffc0000 [ 339.867233][ T30] audit: type=1326 audit(1748357864.516:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.0.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcddcb8e969 code=0x7ffc0000 [ 339.890247][ T30] audit: type=1326 audit(1748357864.516:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.0.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcddcb8e969 code=0x7ffc0000 [ 339.912780][ T30] audit: type=1326 audit(1748357864.516:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.0.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcddcb8e969 code=0x7ffc0000 [ 339.963825][ T6582] loop3: detected capacity change from 0 to 2048 [ 340.076593][ T6582] NILFS (loop3): invalid segment: Magic number mismatch [ 340.084112][ T6582] NILFS (loop3): trying rollback from an earlier position [ 340.181495][ T6582] NILFS (loop3): recovery complete [ 340.278115][ T6594] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 340.675584][ T6562] chnl_net:caif_netlink_parms(): no params data found [ 341.705153][ T5818] Bluetooth: hci1: command tx timeout [ 342.425140][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 342.916756][ T6562] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.924815][ T6562] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.932637][ T6562] bridge_slave_0: entered allmulticast mode [ 342.942386][ T6562] bridge_slave_0: entered promiscuous mode [ 343.133509][ T6562] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.141416][ T6562] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.149538][ T6562] bridge_slave_1: entered allmulticast mode [ 343.159576][ T6562] bridge_slave_1: entered promiscuous mode [ 343.675995][ T6562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.784724][ T5818] Bluetooth: hci1: command tx timeout [ 343.790846][ T6562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.110509][ T6628] loop4: detected capacity change from 0 to 4096 [ 344.268256][ T6628] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 344.386549][ T6562] team0: Port device team_slave_0 added [ 344.502988][ T6562] team0: Port device team_slave_1 added [ 344.663578][ T6628] ntfs3(loop4): ino=1a, mi_enum_attr [ 344.669850][ T6628] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 345.011524][ T6562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.024374][ T6562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.057028][ T6562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.211146][ T6646] loop1: detected capacity change from 0 to 1024 [ 345.278931][ T6562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.288380][ T6562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.315238][ T6562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.512307][ T6650] loop0: detected capacity change from 0 to 1024 [ 345.866476][ T5818] Bluetooth: hci1: command tx timeout [ 346.134629][ T6562] hsr_slave_0: entered promiscuous mode [ 346.147739][ T6562] hsr_slave_1: entered promiscuous mode [ 346.156693][ T6562] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.164723][ T6562] Cannot create hsr debugfs directory [ 347.072511][ T6663] loop0: detected capacity change from 0 to 2048 [ 347.286791][ T6663] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.153506][ T5810] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.292523][ T6678] loop3: detected capacity change from 0 to 512 [ 348.325192][ T6678] EXT4-fs: Ignoring removed oldalloc option [ 348.404846][ T6678] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 348.456406][ T6675] loop4: detected capacity change from 0 to 32768 [ 348.471109][ T6675] Mount JFS Failure: -22 [ 348.475871][ T6675] jfs_mount failed w/return code = -22 [ 348.567050][ T6678] EXT4-fs (loop3): 1 truncate cleaned up [ 348.577689][ T6678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.866709][ T6562] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 348.960337][ T6562] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 348.996101][ T6562] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 348.999342][ T6681] loop1: detected capacity change from 0 to 1024 [ 349.080782][ T6562] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 349.306581][ T6681] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.549659][ T5812] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.796034][ T6694] loop4: detected capacity change from 0 to 16 [ 349.874987][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 349.892408][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.907092][ T6694] erofs (device loop4): mounted with root inode @ nid 36. [ 349.997985][ T6694] syz.4.289: attempt to access beyond end of device [ 349.997985][ T6694] loop4: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 350.012593][ T6694] erofs (device loop4): read error -5 @ 43 of nid 36 [ 350.118850][ T6694] syz.4.289: attempt to access beyond end of device [ 350.118850][ T6694] loop4: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 350.133328][ T6694] erofs (device loop4): read error -5 @ 43 of nid 36 [ 350.597508][ T6562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.880518][ T6562] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.015048][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.022730][ T4267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.201978][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.209828][ T4267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.883970][ T6716] loop3: detected capacity change from 0 to 512 [ 352.008247][ T6716] EXT4-fs: inline encryption not supported [ 352.064937][ T6716] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 352.195978][ T6721] loop4: detected capacity change from 0 to 512 [ 352.245583][ T6716] EXT4-fs (loop3): 1 truncate cleaned up [ 352.253826][ T6716] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.303705][ T6721] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 352.444423][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.451601][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.497610][ T6721] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.512024][ T6721] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.935095][ T5812] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.566414][ T5807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.109477][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.306'. [ 354.118955][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.306'. [ 354.334852][ T6748] loop4: detected capacity change from 0 to 256 [ 354.632952][ T6562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.990942][ T6748] FAT-fs (loop4): Directory bread(block 64) failed [ 354.998213][ T6748] FAT-fs (loop4): Directory bread(block 65) failed [ 355.005743][ T6748] FAT-fs (loop4): Directory bread(block 66) failed [ 355.005968][ T6754] loop3: detected capacity change from 0 to 164 [ 355.012429][ T6748] FAT-fs (loop4): Directory bread(block 67) failed [ 355.012694][ T6748] FAT-fs (loop4): Directory bread(block 68) failed [ 355.012803][ T6748] FAT-fs (loop4): Directory bread(block 69) failed [ 355.013046][ T6748] FAT-fs (loop4): Directory bread(block 70) failed [ 355.046875][ T6748] FAT-fs (loop4): Directory bread(block 71) failed [ 355.053849][ T6748] FAT-fs (loop4): Directory bread(block 72) failed [ 355.060973][ T6748] FAT-fs (loop4): Directory bread(block 73) failed [ 356.130464][ T6766] loop1: detected capacity change from 0 to 8 [ 357.941660][ T6787] netlink: 224 bytes leftover after parsing attributes in process `syz.0.318'. [ 357.951533][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.318'. [ 358.453430][ T5867] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 358.550419][ T6562] veth0_vlan: entered promiscuous mode [ 358.662934][ T6562] veth1_vlan: entered promiscuous mode [ 358.714893][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.726850][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.737306][ T5867] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 358.748959][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.846662][ T5867] usb 5-1: config 0 descriptor?? [ 358.999603][ T6800] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 3, id = 0 [ 359.236529][ T6562] veth0_macvtap: entered promiscuous mode [ 359.360561][ T6562] veth1_macvtap: entered promiscuous mode [ 359.435150][ T5867] cypress 0003:04B4:DE61.0004: unknown main item tag 0x7 [ 359.530363][ T5867] cypress 0003:04B4:DE61.0004: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.4-1/input0 [ 359.652595][ T5867] usb 5-1: USB disconnect, device number 3 [ 359.687500][ T6562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.832971][ T6562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.956123][ T6562] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.965475][ T6562] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.974722][ T6562] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.983764][ T6562] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.997574][ T6805] fido_id[6805]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 361.985308][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 362.221227][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 362.230912][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.369016][ T9] usb 4-1: config 0 descriptor?? [ 362.397394][ T3749] ===================================================== [ 362.405013][ T3749] BUG: KMSAN: uninit-value in xas_load+0xd20/0xd70 [ 362.411725][ T3749] xas_load+0xd20/0xd70 [ 362.416235][ T3749] xas_find+0x2c8/0xd40 [ 362.420603][ T3749] xa_find+0x15a/0x2a0 [ 362.425622][ T3749] io_unregister_zcrx_ifqs+0x75/0x1d0 [ 362.431230][ T3749] io_ring_ctx_free+0x61/0x740 [ 362.436330][ T3749] io_ring_exit_work+0xdec/0xe20 [ 362.441490][ T3749] process_scheduled_works+0xb97/0x1d90 [ 362.447743][ T3749] worker_thread+0xedf/0x1590 [ 362.452663][ T3749] kthread+0xd5c/0xf00 [ 362.457098][ T3749] ret_from_fork+0x71/0x90 [ 362.467426][ T3749] ret_from_fork_asm+0x1a/0x30 [ 362.472481][ T3749] [ 362.476872][ T3749] Uninit was stored to memory at: [ 362.482170][ T3749] xa_find+0x26c/0x2a0 [ 362.486695][ T3749] io_unregister_zcrx_ifqs+0x75/0x1d0 [ 362.492321][ T3749] io_ring_ctx_free+0x61/0x740 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 362.497448][ T3749] io_ring_exit_work+0xdec/0xe20 [ 362.502631][ T3749] process_scheduled_works+0xb97/0x1d90 [ 362.508676][ T3749] worker_thread+0xedf/0x1590 [ 362.513623][ T3749] kthread+0xd5c/0xf00 [ 362.518951][ T3749] ret_from_fork+0x71/0x90 [ 362.523568][ T3749] ret_from_fork_asm+0x1a/0x30 [ 362.528691][ T3749] [ 362.531144][ T3749] Local variable id created at: [ 362.536711][ T3749] io_unregister_zcrx_ifqs+0x3d/0x1d0 [ 362.542327][ T3749] io_ring_ctx_free+0x61/0x740 [ 362.547691][ T3749] [ 362.550161][ T3749] CPU: 0 UID: 0 PID: 3749 Comm: kworker/u8:17 Not tainted 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(undef) [ 362.567937][ T3749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 362.580207][ T3749] Workqueue: iou_exit io_ring_exit_work [ 362.586185][ T3749] ===================================================== [ 362.593388][ T3749] Disabling lock debugging due to kernel taint [ 362.599825][ T3749] Kernel panic - not syncing: kmsan.panic set ... [ 362.606441][ T3749] CPU: 0 UID: 0 PID: 3749 Comm: kworker/u8:17 Tainted: G B 6.15.0-syzkaller-01972-g914873bc7df9 #0 PREEMPT(undef) [ 362.620295][ T3749] Tainted: [B]=BAD_PAGE [ 362.624606][ T3749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 362.634891][ T3749] Workqueue: iou_exit io_ring_exit_work [ 362.640748][ T3749] Call Trace: [ 362.644179][ T3749] [ 362.647270][ T3749] __dump_stack+0x26/0x30 [ 362.651872][ T3749] dump_stack_lvl+0x53/0x270 [ 362.656757][ T3749] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 362.662819][ T3749] dump_stack+0x1e/0x25 [ 362.667228][ T3749] panic+0x4bd/0xd50 [ 362.671433][ T3749] kmsan_report+0x29d/0x2a0 [ 362.676192][ T3749] ? kmsan_get_metadata+0xfb/0x160 [ 362.681554][ T3749] ? __msan_warning+0x96/0x120 [ 362.686540][ T3749] ? xas_load+0xd20/0xd70 [ 362.691080][ T3749] ? xas_find+0x2c8/0xd40 [ 362.695619][ T3749] ? xa_find+0x15a/0x2a0 [ 362.700091][ T3749] ? io_unregister_zcrx_ifqs+0x75/0x1d0 [ 362.705886][ T3749] ? io_ring_ctx_free+0x61/0x740 [ 362.711086][ T3749] ? io_ring_exit_work+0xdec/0xe20 [ 362.716436][ T3749] ? process_scheduled_works+0xb97/0x1d90 [ 362.722423][ T3749] ? worker_thread+0xedf/0x1590 [ 362.727530][ T3749] ? kthread+0xd5c/0xf00 [ 362.731982][ T3749] ? ret_from_fork+0x71/0x90 [ 362.736766][ T3749] ? ret_from_fork_asm+0x1a/0x30 [ 362.741950][ T3749] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 362.747998][ T3749] ? stack_depot_save_flags+0x60f/0x7b0 [ 362.753755][ T3749] ? stack_depot_save+0x12/0x20 [ 362.758802][ T3749] ? kmsan_internal_chain_origin+0xb6/0xd0 [ 362.764850][ T3749] ? kmsan_internal_chain_origin+0x5d/0xd0 [ 362.770917][ T3749] ? __msan_chain_origin+0xc3/0x140 [ 362.776318][ T3749] ? xa_find+0x26c/0x2a0 [ 362.780755][ T3749] ? io_unregister_zcrx_ifqs+0x75/0x1d0 [ 362.786516][ T3749] ? io_ring_ctx_free+0x61/0x740 [ 362.791654][ T3749] ? io_ring_exit_work+0xdec/0xe20 [ 362.796962][ T3749] ? process_scheduled_works+0xb97/0x1d90 [ 362.802898][ T3749] ? worker_thread+0xedf/0x1590 [ 362.807971][ T3749] ? kthread+0xd5c/0xf00 [ 362.812384][ T3749] ? ret_from_fork+0x71/0x90 [ 362.817144][ T3749] ? ret_from_fork_asm+0x1a/0x30 [ 362.822314][ T3749] ? kmsan_get_metadata+0xfb/0x160 [ 362.827625][ T3749] ? io_sqe_files_unregister+0xea/0x120 [ 362.833368][ T3749] __msan_warning+0x96/0x120 [ 362.838136][ T3749] xas_load+0xd20/0xd70 [ 362.842460][ T3749] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 362.848770][ T3749] ? kmsan_get_metadata+0xfb/0x160 [ 362.854069][ T3749] ? io_sqe_files_unregister+0xea/0x120 [ 362.859824][ T3749] ? io_sqe_files_unregister+0xea/0x120 [ 362.865582][ T3749] xas_find+0x2c8/0xd40 [ 362.869918][ T3749] ? kmsan_get_metadata+0xfb/0x160 [ 362.875230][ T3749] ? kmsan_get_metadata+0xfb/0x160 [ 362.880553][ T3749] ? io_sqe_files_unregister+0xea/0x120 [ 362.886329][ T3749] ? io_sqe_files_unregister+0xea/0x120 [ 362.892077][ T3749] xa_find+0x15a/0x2a0 [ 362.896351][ T3749] ? io_sqe_files_unregister+0xea/0x120 [ 362.902121][ T3749] io_unregister_zcrx_ifqs+0x75/0x1d0 [ 362.907713][ T3749] ? io_sqe_files_unregister+0xea/0x120 [ 362.913481][ T3749] io_ring_ctx_free+0x61/0x740 [ 362.918453][ T3749] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 362.924482][ T3749] io_ring_exit_work+0xdec/0xe20 [ 362.929627][ T3749] ? __pfx_io_tctx_exit_cb+0x10/0x10 [ 362.935157][ T3749] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 362.941795][ T3749] ? __pfx_io_ring_exit_work+0x10/0x10 [ 362.947474][ T3749] process_scheduled_works+0xb97/0x1d90 [ 362.953302][ T3749] worker_thread+0xedf/0x1590 [ 362.958276][ T3749] kthread+0xd5c/0xf00 [ 362.962518][ T3749] ? __pfx_worker_thread+0x10/0x10 [ 362.967887][ T3749] ? __pfx_kthread+0x10/0x10 [ 362.972657][ T3749] ret_from_fork+0x71/0x90 [ 362.977237][ T3749] ? __pfx_kthread+0x10/0x10 [ 362.982009][ T3749] ret_from_fork_asm+0x1a/0x30 [ 362.987020][ T3749] [ 362.990542][ T3749] Kernel Offset: disabled [ 362.994977][ T3749] Rebooting in 86400 seconds..