last executing test programs: 8.036960997s ago: executing program 5 (id=602): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x46eb, 0x6, 0x4, 0x28, 0x5, 0x7}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r0, &(0x7f0000001c00)=[{&(0x7f0000000480)='ZBT\n', 0x4}], 0x1) 7.783485826s ago: executing program 5 (id=605): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = io_uring_setup(0x4a86, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.848105346s ago: executing program 5 (id=618): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c0000000206010200000000400000000a00000805000100060000000900020073797a310000000050000708060005404e22000005001500fc000000080017400000000408000a400000000108000b4000000005180001801400024000000000000000000000ffffffffffff0c00008008000140ac14141913000300686173683a6e65742c69"], 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 3.3548742s ago: executing program 5 (id=630): sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000003c0)='./file1\x00', 0x1210010, &(0x7f0000000340)=ANY=[], 0x1, 0x379, &(0x7f0000000880)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x3, 0x6, 0x7}, 0x0, 0x9}}, &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) mount$9p_virtio(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x4000c, 0x0) 2.734245001s ago: executing program 3 (id=638): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x101a02, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) 2.528898154s ago: executing program 3 (id=639): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) write(r0, &(0x7f00000000c0)="8f2a", 0x2) 2.471892746s ago: executing program 5 (id=640): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 2.234325745s ago: executing program 3 (id=643): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 2.188948256s ago: executing program 5 (id=645): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008054) bind(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400000000"], 0x158}, 0x1, 0xba01}, 0x44) 2.121276671s ago: executing program 1 (id=646): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(0x0, 0x0) setuid(0xee01) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) 1.844367445s ago: executing program 3 (id=649): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, 0x0, 0x0) 1.761027292s ago: executing program 4 (id=650): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000000)={0x0}, 0x7, 0x0, 0x0, 0x48081}, 0x20004000) 1.542858884s ago: executing program 3 (id=652): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96, 0xfffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}) msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0xee00, 0x0, 0xee01, 0x10}, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x10001, 0x1000ff, 0x2, 0x0, 0x0, 0x40, 0x0, 0xffffffffffffffff}) 1.394195752s ago: executing program 4 (id=654): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000013c0), &(0x7f0000001400)=0x8) 1.259848941s ago: executing program 3 (id=656): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a"], 0x250}}, 0x2000c000) 1.259620054s ago: executing program 2 (id=657): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 1.182433828s ago: executing program 4 (id=658): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.117687624s ago: executing program 0 (id=659): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180), 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000000000008400000002000000060008025e0b14de356c0201000008"], 0x20, 0x4c004}], 0x1, 0x20000cd4) 1.070893771s ago: executing program 2 (id=660): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="89e7ee0c7cdad9b4", 0x8}, {&(0x7f0000000340)="448b7cff000000000000", 0xa}], 0x2) 1.024029824s ago: executing program 1 (id=661): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60", 0x28) 947.765149ms ago: executing program 0 (id=662): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='-', @ANYRESDEC=r1], 0x27) 904.598476ms ago: executing program 1 (id=663): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000180)={0x18, r2, 0x2, 0x0, &(0x7f0000000140)=[{0xfffffffffffffffe, 0xffffffffffffffff}, {0x4, 0xffe}]}) close_range(r0, 0xffffffffffffffff, 0x0) 778.095706ms ago: executing program 0 (id=664): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x3, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x10) 776.398441ms ago: executing program 1 (id=665): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, 0x0, 0x0) 709.585634ms ago: executing program 4 (id=666): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000003100000095"], &(0x7f0000000300)='GPL\x00', 0x4}, 0x94) 676.285664ms ago: executing program 2 (id=667): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1a3807, 0x1, 0x0, 0x7ffffffc, 0x0, 0x0, 0x0, 0x6, 0xfe}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) 601.059466ms ago: executing program 0 (id=668): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newchain={0x24, 0x64, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0xd}, {0xfff3, 0xfff1}, {0x3, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x200008c1}, 0x4041080) 574.53195ms ago: executing program 1 (id=669): r0 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x20940, 0x1e2) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x5, 0x4, "6fa715e63fee9cb07f3c19ed0c04afcaba06f6d9584488da0162d4cc7030ec4f7b9ab89b3e19b47b6669f6bdb9c400", "8bc975aabbbbe9e4cbb0e98d43a12e12538b330e6fe3bce73919393417abdc6c58f0abd4f0c29b3c71757f74bc429c808f46e9cda4584203143a0b9705fb16b6", "666f1d5f5c43005b310134ce9a6d0369862b72c1f9f4980a2346c4dd62ad8050", [0x6, 0x61fe]}}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x8, 0xa, 0x7, 0x8, "b01eb45b7b42d1b78db69e4ddcbe602aceee5ab4c7351181a15d8f7a28bf04c5a4ee342b6847cb70588f8f84cf676d0afca0f2e6f4d82e4208ca4c5f7365d431", "b31f22c9080873366b499607be231200bc798b00", [0x2, 0x2000005e8]}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x7fff, 0x5, 0xd, 0x5, "db060475ea0d8318470c9faddcb12e3a88cae5eb3084c7f199c0fc06bf18d00ae592813c6cb76ba83322095b3803ad537e00f8ab580c7561ac7ce9f88b103b31", "74631679e4037f8f7700645bb83d08d4380e4adb7fd6268a14becdb80c44e421", [0x3ff, 0xff]}) r2 = creat(0x0, 0x6b) write$binfmt_elf32(r2, &(0x7f0000000680)=ANY=[], 0x98) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 481.634706ms ago: executing program 2 (id=670): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffd, @local, 0x2}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000003540)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0xffff}}}}}}}, 0x0) 432.005378ms ago: executing program 4 (id=671): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 381.081862ms ago: executing program 0 (id=672): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 314.744547ms ago: executing program 4 (id=673): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f3000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r0, 0xfffff000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r1, 0x0) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) 263.575257ms ago: executing program 2 (id=674): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) shmat(0x0, &(0x7f0000f62000/0x1000)=nil, 0x7000) 86.767417ms ago: executing program 0 (id=675): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) close(0x3) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) 69.415589ms ago: executing program 2 (id=676): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) 0s ago: executing program 1 (id=677): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x4, r0, &(0x7f00000011c0), 0xfffffffffffffffe) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.153' (ED25519) to the list of known hosts. [ 343.186360][ T5650] cgroup: Unknown subsys name 'net' [ 343.306393][ T5650] cgroup: Unknown subsys name 'cpuset' [ 343.317342][ T5650] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 344.908776][ T5650] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 348.848080][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 348.868160][ T5677] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 348.892255][ T5681] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 348.908886][ T5683] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 348.916863][ T5681] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 348.922017][ T5685] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 348.925890][ T5681] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 348.932821][ T5685] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 348.940081][ T5683] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 348.947956][ T5685] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 348.953216][ T5681] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 348.969016][ T5683] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 348.969485][ T5687] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 348.978121][ T5681] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 348.984032][ T5687] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 348.990571][ T5683] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 349.000326][ T5687] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 349.004716][ T5681] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 349.012178][ T5687] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 349.019631][ T5683] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 349.027511][ T5687] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 349.033891][ T5683] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 349.039794][ T5687] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 349.045840][ T5681] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 349.061292][ T5687] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 349.061851][ T5681] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 349.075330][ T5668] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 349.083127][ T5681] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 349.087403][ T5668] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 349.091935][ T5681] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 351.102208][ T5672] Bluetooth: hci5: command tx timeout [ 351.181627][ T5672] Bluetooth: hci2: command tx timeout [ 351.181769][ T5681] Bluetooth: hci3: command tx timeout [ 351.187546][ T5672] Bluetooth: hci1: command tx timeout [ 351.198412][ T5677] Bluetooth: hci4: command tx timeout [ 351.200269][ T5668] Bluetooth: hci0: command tx timeout [ 351.655609][ T5664] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.663112][ T5664] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.670247][ T5664] bridge_slave_0: entered allmulticast mode [ 351.678458][ T5664] bridge_slave_0: entered promiscuous mode [ 351.756622][ T5664] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.764155][ T5664] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.771502][ T5664] bridge_slave_1: entered allmulticast mode [ 351.779604][ T5664] bridge_slave_1: entered promiscuous mode [ 351.786934][ T5665] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.794057][ T5665] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.801377][ T5665] bridge_slave_0: entered allmulticast mode [ 351.809433][ T5665] bridge_slave_0: entered promiscuous mode [ 351.841621][ T5671] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.848738][ T5671] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.855976][ T5671] bridge_slave_0: entered allmulticast mode [ 351.863485][ T5671] bridge_slave_0: entered promiscuous mode [ 351.901649][ T5665] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.908792][ T5665] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.915993][ T5665] bridge_slave_1: entered allmulticast mode [ 351.923462][ T5665] bridge_slave_1: entered promiscuous mode [ 351.930949][ T5666] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.938182][ T5666] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.945368][ T5666] bridge_slave_0: entered allmulticast mode [ 351.952929][ T5666] bridge_slave_0: entered promiscuous mode [ 351.968061][ T5671] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.975234][ T5671] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.982503][ T5671] bridge_slave_1: entered allmulticast mode [ 351.990037][ T5671] bridge_slave_1: entered promiscuous mode [ 352.033533][ T5664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.055836][ T5666] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.063047][ T5666] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.070188][ T5666] bridge_slave_1: entered allmulticast mode [ 352.078492][ T5666] bridge_slave_1: entered promiscuous mode [ 352.114445][ T5664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.159027][ T5671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.195465][ T5665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.233270][ T5671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.283153][ T5665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.294972][ T5666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.329668][ T5667] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.337068][ T5667] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.344644][ T5667] bridge_slave_0: entered allmulticast mode [ 352.352290][ T5667] bridge_slave_0: entered promiscuous mode [ 352.361924][ T5664] team0: Port device team_slave_0 added [ 352.381740][ T5666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.390959][ T5663] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.398365][ T5663] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.405572][ T5663] bridge_slave_0: entered allmulticast mode [ 352.413365][ T5663] bridge_slave_0: entered promiscuous mode [ 352.422991][ T5671] team0: Port device team_slave_0 added [ 352.428921][ T5667] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.436143][ T5667] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.443537][ T5667] bridge_slave_1: entered allmulticast mode [ 352.451041][ T5667] bridge_slave_1: entered promiscuous mode [ 352.459788][ T5664] team0: Port device team_slave_1 added [ 352.502548][ T5663] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.509658][ T5663] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.517451][ T5663] bridge_slave_1: entered allmulticast mode [ 352.525069][ T5663] bridge_slave_1: entered promiscuous mode [ 352.535204][ T5671] team0: Port device team_slave_1 added [ 352.567717][ T5665] team0: Port device team_slave_0 added [ 352.622813][ T5664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.629813][ T5664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.655989][ T5664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.669560][ T5665] team0: Port device team_slave_1 added [ 352.677408][ T5666] team0: Port device team_slave_0 added [ 352.714009][ T5667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.723907][ T5664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.730917][ T5664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.757401][ T5664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.782464][ T5666] team0: Port device team_slave_1 added [ 352.790825][ T5663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.801394][ T5671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.808633][ T5671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.834632][ T5671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.848159][ T5667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.894444][ T5663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.917954][ T5671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.925069][ T5671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.951048][ T5671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.989470][ T5665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.996769][ T5665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.022725][ T5665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.081934][ T5667] team0: Port device team_slave_0 added [ 353.088208][ T5665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.095408][ T5665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.122906][ T5665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.134867][ T5666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.142146][ T5666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.168131][ T5666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.181588][ T5672] Bluetooth: hci5: command tx timeout [ 353.184023][ T5663] team0: Port device team_slave_0 added [ 353.209545][ T5667] team0: Port device team_slave_1 added [ 353.234045][ T5666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.241388][ T5666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.267955][ T5672] Bluetooth: hci1: command tx timeout [ 353.267990][ T5672] Bluetooth: hci0: command tx timeout [ 353.271710][ T5668] Bluetooth: hci3: command tx timeout [ 353.274063][ T5666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.278768][ T5672] Bluetooth: hci4: command tx timeout [ 353.300018][ T5681] Bluetooth: hci2: command tx timeout [ 353.312840][ T5663] team0: Port device team_slave_1 added [ 353.325243][ T5664] hsr_slave_0: entered promiscuous mode [ 353.331886][ T5664] hsr_slave_1: entered promiscuous mode [ 353.366539][ T5667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.373499][ T5667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.399416][ T5667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.477271][ T5667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.484696][ T5667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.516807][ T5667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.548173][ T5671] hsr_slave_0: entered promiscuous mode [ 353.554664][ T5671] hsr_slave_1: entered promiscuous mode [ 353.560867][ T5671] debugfs: 'hsr0' already exists in 'hsr' [ 353.566907][ T5671] Cannot create hsr debugfs directory [ 353.574289][ T5663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.581300][ T5663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.607417][ T5663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.669117][ T5663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.676146][ T5663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.702310][ T5663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.719624][ T5665] hsr_slave_0: entered promiscuous mode [ 353.726235][ T5665] hsr_slave_1: entered promiscuous mode [ 353.732406][ T5665] debugfs: 'hsr0' already exists in 'hsr' [ 353.738125][ T5665] Cannot create hsr debugfs directory [ 353.804938][ T5666] hsr_slave_0: entered promiscuous mode [ 353.811603][ T5666] hsr_slave_1: entered promiscuous mode [ 353.817784][ T5666] debugfs: 'hsr0' already exists in 'hsr' [ 353.823895][ T5666] Cannot create hsr debugfs directory [ 353.844489][ T5667] hsr_slave_0: entered promiscuous mode [ 353.850881][ T5667] hsr_slave_1: entered promiscuous mode [ 353.857351][ T5667] debugfs: 'hsr0' already exists in 'hsr' [ 353.863180][ T5667] Cannot create hsr debugfs directory [ 354.017069][ T5663] hsr_slave_0: entered promiscuous mode [ 354.023568][ T5663] hsr_slave_1: entered promiscuous mode [ 354.029704][ T5663] debugfs: 'hsr0' already exists in 'hsr' [ 354.035732][ T5663] Cannot create hsr debugfs directory [ 354.651181][ T5665] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 354.667693][ T5665] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 354.676069][ T5665] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 354.686763][ T5665] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 354.694758][ T5665] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 354.706186][ T5665] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 354.723850][ T5665] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 354.734656][ T5665] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 354.806502][ T5664] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 354.828855][ T5664] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 354.840371][ T5664] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 354.854030][ T5664] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 354.863614][ T5664] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 354.875449][ T5664] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 354.885722][ T5664] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 354.896445][ T5664] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 354.997424][ T5671] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 355.010538][ T5671] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 355.026868][ T5671] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 355.037696][ T5671] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 355.045908][ T5671] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 355.055942][ T5671] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 355.064538][ T5671] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 355.075924][ T5671] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 355.185171][ T5666] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 355.196624][ T5666] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 355.217041][ T5666] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 355.227778][ T5666] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 355.237611][ T5666] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 355.248487][ T5666] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 355.257334][ T5666] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 355.264111][ T5672] Bluetooth: hci5: command tx timeout [ 355.274225][ T5666] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 355.286883][ T5665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.342329][ T5668] Bluetooth: hci3: command tx timeout [ 355.348239][ T5681] Bluetooth: hci2: command tx timeout [ 355.348305][ T4937] Bluetooth: hci1: command tx timeout [ 355.353902][ T5672] Bluetooth: hci4: command tx timeout [ 355.365300][ T5677] Bluetooth: hci0: command tx timeout [ 355.435869][ T5665] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.456423][ T5667] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 355.466659][ T5667] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 355.477386][ T5667] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 355.488888][ T5667] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 355.511306][ T5694] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.518897][ T5694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.530169][ T5667] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 355.540453][ T5667] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 355.549103][ T5667] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 355.560960][ T5667] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 355.610512][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.617658][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.648783][ T5664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.689397][ T5671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.747834][ T5663] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 355.758125][ T5663] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 355.767248][ T5663] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 355.778354][ T5663] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 355.787664][ T5664] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.808371][ T5663] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 355.819694][ T5663] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 355.829053][ T5663] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 355.839490][ T5663] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 355.855310][ T5694] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.862436][ T5694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.878852][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.885971][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.930292][ T5671] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.963837][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.971014][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.024355][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.031774][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.176355][ T5666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.294968][ T5667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.312280][ T5666] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.362187][ T5694] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.369347][ T5694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.435588][ T5694] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.442763][ T5694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.477793][ T5667] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.525744][ T4383] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.532909][ T4383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.575485][ T4383] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.582647][ T4383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.683293][ T5663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.785662][ T5663] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.859110][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.866335][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.922523][ T5696] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.929680][ T5696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.315553][ T5665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.352611][ T5677] Bluetooth: hci5: command tx timeout [ 357.422786][ T4937] Bluetooth: hci3: command tx timeout [ 357.423969][ T5668] Bluetooth: hci0: command tx timeout [ 357.428461][ T5677] Bluetooth: hci4: command tx timeout [ 357.433828][ T5681] Bluetooth: hci1: command tx timeout [ 357.433881][ T5672] Bluetooth: hci2: command tx timeout [ 357.546923][ T5665] veth0_vlan: entered promiscuous mode [ 357.630970][ T5665] veth1_vlan: entered promiscuous mode [ 357.804339][ T5665] veth0_macvtap: entered promiscuous mode [ 357.859140][ T5665] veth1_macvtap: entered promiscuous mode [ 357.922794][ T5664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.993729][ T5665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.033764][ T5665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.083030][ T5671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.131030][ T5694] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.164890][ T5694] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.208671][ T5694] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.242366][ T5694] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.322845][ T5666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.421370][ T5664] veth0_vlan: entered promiscuous mode [ 358.527026][ T5664] veth1_vlan: entered promiscuous mode [ 358.613040][ T5667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.718043][ T5663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.759607][ T5853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.793351][ T5853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.805834][ T5666] veth0_vlan: entered promiscuous mode [ 358.865838][ T5853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.878753][ T5666] veth1_vlan: entered promiscuous mode [ 358.885155][ T5853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.911198][ T5664] veth0_macvtap: entered promiscuous mode [ 358.954972][ T5664] veth1_macvtap: entered promiscuous mode [ 359.019346][ T5665] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 359.100299][ T5664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.113679][ T5666] veth0_macvtap: entered promiscuous mode [ 359.140390][ T5671] veth0_vlan: entered promiscuous mode [ 359.152683][ T5663] veth0_vlan: entered promiscuous mode [ 359.168112][ T5664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.196782][ T5666] veth1_macvtap: entered promiscuous mode [ 359.238166][ T5671] veth1_vlan: entered promiscuous mode [ 359.254231][ T5663] veth1_vlan: entered promiscuous mode [ 359.270153][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.280429][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.309901][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.325520][ T5904] loop3: detected capacity change from 0 to 4096 [ 359.335394][ T5904] EXT4-fs: inline encryption not supported [ 359.339691][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.366936][ T5666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.376885][ T5904] EXT4-fs (loop3): Test dummy encryption mode enabled [ 359.402589][ T5904] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0003] [ 359.414438][ T5904] System zones: 0-5 [ 359.439680][ T5666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.450267][ T5904] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.549759][ T5853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.648340][ T5853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.672668][ T5853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.728057][ T5853] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.760613][ T5671] veth0_macvtap: entered promiscuous mode [ 359.823427][ T5842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.834344][ T5842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.496638][ T5671] veth1_macvtap: entered promiscuous mode [ 360.527043][ T5671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.534759][ T5663] veth0_macvtap: entered promiscuous mode [ 360.556876][ T5667] veth0_vlan: entered promiscuous mode [ 360.595730][ T5853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.625541][ T5853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.635441][ T5671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.649841][ T5663] veth1_macvtap: entered promiscuous mode [ 360.693892][ T5667] veth1_vlan: entered promiscuous mode [ 360.709460][ T5665] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.730263][ T5842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.739587][ T5842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.771721][ T5696] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.798345][ T5696] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.850165][ T5696] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.916851][ T5696] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.952803][ T5663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.998532][ T4383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.027678][ T4383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.057414][ T5667] veth0_macvtap: entered promiscuous mode [ 361.068799][ T5667] veth1_macvtap: entered promiscuous mode [ 361.186677][ T5663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.867305][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.920290][ T5667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.989313][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.007758][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.123369][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.156887][ T5667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.172022][ T5916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 363.246500][ T5694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.271505][ T5694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.299557][ T5694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.299863][ T5842] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.320941][ T5694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.346352][ T5842] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.412310][ T5842] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.467366][ T5842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.491783][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.520471][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.577158][ T4383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.602931][ T4383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.930770][ T5842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.956596][ T5842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.116578][ T5694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.133522][ T5694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.220681][ T5935] netlink: 1012 bytes leftover after parsing attributes in process `syz.2.12'. [ 364.436021][ T5938] tipc: Started in network mode [ 364.448443][ T5938] tipc: Node identity 2e7532f59c49, cluster identity 4711 [ 364.459608][ T5938] tipc: Enabled bearer , priority 0 [ 364.734721][ T5939] syzkaller0: entered promiscuous mode [ 364.761239][ T5939] syzkaller0: entered allmulticast mode [ 364.790463][ T5939] tipc: Resetting bearer [ 366.181905][ T5937] tipc: Resetting bearer [ 366.427525][ T5965] loop2: detected capacity change from 0 to 128 [ 366.540035][ T5971] loop0: detected capacity change from 0 to 128 [ 366.606869][ T5965] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 366.701700][ T5965] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 367.042598][ T5979] syz.4.21 uses obsolete (PF_INET,SOCK_PACKET) [ 367.132921][ T5965] fscrypt: Adiantum using implementation "adiantum(xchacha12-lib,aes-lib)" [ 367.392548][ T5990] TCP: TCP_TX_DELAY enabled [ 368.066292][ T5937] tipc: Disabling bearer [ 368.091182][ T800] tipc: Node number set to 2990289653 [ 368.113687][ T5960] tipc: Enabling of bearer rejected, failed to enable media [ 368.143894][ T5995] loop5: detected capacity change from 0 to 128 [ 368.152021][ T5995] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 368.170309][ T5995] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 368.410387][ T5666] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 368.614238][ T5998] syzkaller1: entered promiscuous mode [ 368.655133][ T5998] syzkaller1: entered allmulticast mode [ 368.810411][ T6009] loop4: detected capacity change from 0 to 128 [ 368.896277][ T6009] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 368.941332][ T6009] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 369.461016][ T6018] fscrypt (loop4, inode 12): Unsupported encryption flags (0x08) [ 370.964827][ T12] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 371.024889][ T5667] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 371.943211][ T6041] loop2: detected capacity change from 0 to 16 [ 371.967933][ T6041] erofs: Unknown parameter 'ãé' [ 372.860030][ T6050] atomic_op ffff888020bc1198 conn xmit_atomic 0000000000000000 [ 373.686914][ T6063] loop1: detected capacity change from 0 to 4096 [ 373.736553][ T6063] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 373.878917][ T6063] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 373.907150][ T6063] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 374.367376][ T5842] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 374.422592][ T5664] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 374.441245][ T5664] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 374.464237][ T5664] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 374.490379][ T5842] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 374.736127][ T6058] loop2: detected capacity change from 0 to 32768 [ 374.855122][ T6058] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.43 (6058) [ 374.916231][ T6064] loop0: detected capacity change from 0 to 32768 [ 374.965229][ T6064] btrfs: Deprecated parameter 'usebackuproot' [ 374.999526][ T6064] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 375.059153][ T6064] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.47 (6064) [ 375.362520][ T6058] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 375.723921][ T6058] BTRFS info (device loop2): using sha256 checksum algorithm [ 376.106787][ T6064] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 376.184868][ T6064] BTRFS info (device loop0): using crc32c checksum algorithm [ 376.330041][ T6114] loop3: detected capacity change from 0 to 16 [ 376.398790][ T6114] erofs: Unknown parameter 'ãé' [ 376.447936][ T6119] loop1: detected capacity change from 0 to 512 [ 376.593769][ T6066] loop4: detected capacity change from 0 to 40427 [ 376.655185][ T6066] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 376.689643][ T6066] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 376.721627][ T6119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.737531][ T6066] F2FS-fs (loop4): invalid crc value [ 376.757083][ T6064] BTRFS error (device loop0): open_ctree failed: -4 [ 376.778265][ T6066] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-4) [ 376.828995][ T6129] atomic_op ffff88803587e998 conn xmit_atomic 0000000000000000 [ 376.946176][ T6058] BTRFS error (device loop2): open_ctree failed: -4 [ 377.745442][ T5664] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.903981][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.913560][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.939562][ T6140] loop5: detected capacity change from 0 to 512 [ 377.995773][ T6139] Bluetooth: MGMT ver 1.23 [ 378.012120][ T6140] EXT4-fs: Ignoring removed orlov option [ 378.030358][ T6142] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 378.077193][ T6140] EXT4-fs (loop5): Test dummy encryption mode enabled [ 378.130012][ T6140] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 378.206051][ T6140] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 378.294487][ T6140] EXT4-fs (loop5): 1 truncate cleaned up [ 378.311491][ T6140] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.520659][ T6140] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 378.690288][ T5671] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.906675][ T6150] loop0: detected capacity change from 0 to 8192 [ 379.127701][ T6157] loop2: detected capacity change from 0 to 16 [ 379.252063][ T6157] erofs (device loop2): mounted with root inode @ nid 36. [ 379.329373][ T6157] syz.2.64: attempt to access beyond end of device [ 379.329373][ T6157] loop2: rw=0, sector=1936876908, nr_sectors = 1 limit=16 [ 379.475715][ T6157] syz.2.64: attempt to access beyond end of device [ 379.475715][ T6157] loop2: rw=0, sector=3955228672, nr_sectors = 1 limit=16 [ 379.782154][ T6160] syz.2.64: attempt to access beyond end of device [ 379.782154][ T6160] loop2: rw=0, sector=1936876908, nr_sectors = 1 limit=16 [ 379.890969][ T6160] syz.2.64: attempt to access beyond end of device [ 379.890969][ T6160] loop2: rw=0, sector=3955228672, nr_sectors = 1 limit=16 [ 380.350893][ T6149] loop3: detected capacity change from 0 to 32768 [ 380.378083][ T6149] ======================================================= [ 380.378083][ T6149] WARNING: The mand mount option has been deprecated and [ 380.378083][ T6149] and is ignored by this kernel. Remove the mand [ 380.378083][ T6149] option from the mount to silence this warning. [ 380.378083][ T6149] ======================================================= [ 380.584529][ T6149] JBD2: Ignoring recovery information on journal [ 380.761678][ T6154] loop5: detected capacity change from 0 to 32768 [ 380.792750][ T6154] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.63 (6154) [ 380.828397][ T6149] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 380.884534][ T6154] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 380.930763][ T6154] BTRFS info (device loop5): using blake2b checksum algorithm [ 380.961144][ T6154] BTRFS error (device loop5): superblock checksum mismatch [ 381.002087][ T6154] BTRFS error (device loop5): open_ctree failed: -22 [ 381.255836][ T6182] process 'syz.0.70' launched './file0' with NULL argv: empty string added [ 381.465663][ T6168] loop1: detected capacity change from 0 to 32768 [ 381.488449][ T5665] ocfs2: Unmounting device (7,3) on (node local) [ 381.619048][ T6168] JBD2: Ignoring recovery information on journal [ 381.627774][ T6170] loop4: detected capacity change from 0 to 32768 [ 381.790035][ T6170] debugfs: 'B1DE653C00004D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 381.858999][ T6170] JBD2: Ignoring recovery information on journal [ 381.936067][ T6168] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 382.048519][ T6170] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 382.278164][ T6193] loop0: detected capacity change from 0 to 16 [ 382.987371][ T6193] erofs (device loop0): mounted with root inode @ nid 36. [ 383.028022][ T6192] syz.0.72: attempt to access beyond end of device [ 383.028022][ T6192] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 383.050914][ T6192] syz.0.72: attempt to access beyond end of device [ 383.050914][ T6192] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 383.068676][ T6192] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 383.080062][ T6192] erofs (device loop0): read error -117 @ 1 of nid 89 [ 383.091030][ T30] audit: type=1800 audit(1777620405.595:2): pid=6192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.72" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 383.156297][ T6195] OCFS2: ERROR (device loop1): ocfs2_validate_gd_parent: Group descriptor #32 has bit count of 1024 [ 383.182511][ T6195] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 383.258982][ T6195] OCFS2: File system is now read-only. [ 383.276476][ T6195] (syz.1.67,6195,1):ocfs2_search_chain:1913 ERROR: status = -30 [ 383.310317][ T6195] (syz.1.67,6195,1):ocfs2_search_chain:2036 ERROR: status = -30 [ 383.360648][ T6195] (syz.1.67,6195,1):ocfs2_claim_suballoc_bits:2123 ERROR: status = -30 [ 383.416084][ T6195] (syz.1.67,6195,1):ocfs2_claim_suballoc_bits:2176 ERROR: status = -30 [ 383.430406][ T6201] loop3: detected capacity change from 0 to 8 [ 383.456170][ T6195] (syz.1.67,6195,1):__ocfs2_claim_clusters:2557 ERROR: status = -30 [ 383.510933][ T6195] (syz.1.67,6195,1):__ocfs2_claim_clusters:2565 ERROR: status = -30 [ 383.532341][ T5667] ocfs2: Unmounting device (7,4) on (node local) [ 383.551553][ T6195] (syz.1.67,6195,1):ocfs2_block_group_alloc_contig:531 ERROR: status = -30 [ 383.583939][ T6195] (syz.1.67,6195,1):ocfs2_block_group_alloc:805 ERROR: status = -30 [ 383.591096][ T6201] SQUASHFS error: Failed to read block 0x6de: -5 [ 383.612848][ T6195] (syz.1.67,6195,1):ocfs2_block_group_alloc:858 ERROR: status = -30 [ 383.629261][ T6201] SQUASHFS error: Unable to read metadata cache entry [6dc] [ 383.640149][ T6195] (syz.1.67,6195,1):ocfs2_reserve_suballoc_bits:933 ERROR: status = -30 [ 383.678353][ T6201] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 383.679361][ T6195] (syz.1.67,6195,1):ocfs2_reserve_suballoc_bits:950 ERROR: status = -30 [ 383.716881][ T6195] (syz.1.67,6195,1):ocfs2_reserve_new_metadata_blocks:1090 ERROR: status = -30 [ 383.744775][ T6195] (syz.1.67,6195,1):ocfs2_reserve_new_metadata_blocks:1113 ERROR: status = -30 [ 383.758859][ T6195] (syz.1.67,6195,1):ocfs2_init_xattr_set_ctxt:3311 ERROR: status = -30 [ 383.789807][ T6195] (syz.1.67,6195,1):ocfs2_xattr_set:3668 ERROR: status = -30 [ 383.888323][ T6212] loop5: detected capacity change from 0 to 2048 [ 383.991226][ T5664] ocfs2: Unmounting device (7,1) on (node local) [ 384.072835][ T6215] loop3: detected capacity change from 0 to 164 [ 384.297123][ T6215] rock: directory entry would overflow storage [ 384.344467][ T6215] rock: sig=0x4f50, size=4, remaining=3 [ 384.384725][ T6215] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 384.609103][ T6219] loop5: detected capacity change from 0 to 256 [ 384.647825][ T6219] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 384.720929][ T30] audit: type=1800 audit(1777620407.215:3): pid=6219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.81" name="file1" dev="loop5" ino=1048614 res=0 errno=0 [ 384.788534][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.83'. [ 384.797323][ T6224] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264) [ 384.808065][ T6224] FAT-fs (loop5): Filesystem has been set read-only [ 384.821688][ T30] audit: type=1800 audit(1777620407.225:4): pid=6219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.81" name="file1" dev="loop5" ino=1048614 res=0 errno=0 [ 384.874103][ T6224] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 384.947430][ T6224] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 384.964748][ T6223] netlink: 16 bytes leftover after parsing attributes in process `syz.4.83'. [ 386.618129][ T6248] capability: warning: `syz.5.91' uses 32-bit capabilities (legacy support in use) [ 387.051309][ T6258] loop4: detected capacity change from 0 to 2048 [ 387.151032][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 387.194081][ T6261] netlink: 16 bytes leftover after parsing attributes in process `syz.1.98'. [ 388.490790][ T6279] loop3: detected capacity change from 0 to 256 [ 388.558251][ T6279] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 388.630485][ T30] audit: type=1800 audit(1777620411.135:5): pid=6279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.104" name="file1" dev="loop3" ino=1048616 res=0 errno=0 [ 388.712691][ T6282] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779264) [ 388.730552][ T30] audit: type=1800 audit(1777620411.165:6): pid=6279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.104" name="file1" dev="loop3" ino=1048616 res=0 errno=0 [ 388.780730][ T6282] FAT-fs (loop3): Filesystem has been set read-only [ 388.840709][ T6282] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 388.886590][ T6282] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 388.964445][ T6289] netlink: 20 bytes leftover after parsing attributes in process `syz.2.107'. [ 389.112889][ T6289] bond0: (slave bond_slave_0): Releasing backup interface [ 389.223581][ T6289] bond_slave_0: entered promiscuous mode [ 389.240263][ T6289] bond_slave_0: entered allmulticast mode [ 389.967574][ T6304] loop5: detected capacity change from 0 to 512 [ 390.287545][ T6304] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.111: inode has both inline data and extents flags [ 390.300940][ T6304] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 390.301656][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 390.317719][ C0] EXT4-fs (loop5): initial error at time 1777620412: ext4_orphan_get:1397: inode 15 [ 390.327161][ C0] EXT4-fs (loop5): last error at time 1777620412: ext4_orphan_get:1397: inode 15 [ 390.345097][ T6304] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.111: couldn't read orphan inode 15 (err -117) [ 390.357090][ T6304] loop5: lost filesystem error report for type 5 error -117 [ 390.371380][ T6304] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.486114][ T6305] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 390.492779][ T6305] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 390.503190][ T6305] vhci_hcd vhci_hcd.0: Device attached [ 391.166313][ T6306] vhci_hcd: connection closed [ 391.462700][ T57] vhci_hcd vhci_hcd.5: stop threads [ 391.708064][ T57] vhci_hcd vhci_hcd.5: release socket [ 391.773805][ T57] vhci_hcd vhci_hcd.5: disconnect device [ 393.096336][ T5671] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.373796][ T6333] loop3: detected capacity change from 0 to 2048 [ 393.935120][ T6349] loop2: detected capacity change from 0 to 128 [ 394.662493][ T6349] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 394.794016][ T6349] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 395.796821][ T5666] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 395.832978][ T6370] loop3: detected capacity change from 0 to 1024 [ 395.877425][ T6370] EXT4-fs: Ignoring removed bh option [ 395.888637][ T6373] netlink: 332 bytes leftover after parsing attributes in process `syz.1.130'. [ 395.925501][ T6370] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 395.941677][ T6373] netlink: 160 bytes leftover after parsing attributes in process `syz.1.130'. [ 396.068028][ T6370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.222678][ T6370] EXT4-fs error (device loop3): ext4_find_dest_de:2049: inode #12: block 7: comm syz.3.129: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 396.287125][ T6370] EXT4-fs (loop3): Remounting filesystem read-only [ 396.515062][ T5665] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.580291][ T6368] loop0: detected capacity change from 0 to 32768 [ 396.623099][ T6368] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.128 (6368) [ 396.717380][ T6368] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 396.775780][ T6368] BTRFS info (device loop0): using sha256 checksum algorithm [ 397.025082][ T6368] BTRFS info (device loop0): enabling ssd optimizations [ 397.078781][ T6368] BTRFS info (device loop0): turning on async discard [ 397.102075][ T6368] BTRFS info (device loop0): enabling free space tree [ 397.216443][ T6416] tipc: Enabling of bearer rejected, failed to enable media [ 398.193996][ T5901] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 398.398829][ T5901] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.490698][ T5901] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 399.291541][ T5901] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 399.302693][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.374347][ T5901] usb 2-1: config 0 descriptor?? [ 399.454327][ T5663] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 399.501990][ T6438] loop4: detected capacity change from 0 to 16 [ 399.505371][ T5901] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 399.558817][ T5901] dvb-usb: bulk message failed: -22 (3/0) [ 399.601680][ T6438] erofs (device loop4): mounted with root inode @ nid 36. [ 399.622778][ T6418] netlink: 'syz.1.138': attribute type 1 has an invalid length. [ 399.829256][ T5901] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 399.906599][ T5901] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 399.945397][ T5901] usb 2-1: media controller created [ 399.986391][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 400.107432][ T5901] dvb-usb: bulk message failed: -22 (6/0) [ 400.157115][ T5901] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 400.262573][ T5901] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 400.416212][ T5901] dvb-usb: schedule remote query interval to 150 msecs. [ 400.456230][ T5901] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 400.613707][ T5901] dvb-usb: bulk message failed: -22 (1/0) [ 400.642395][ T5901] dvb-usb: error while querying for an remote control event. [ 400.813387][ T5902] usb 2-1: USB disconnect, device number 2 [ 400.921304][ T6460] loop4: detected capacity change from 0 to 4096 [ 400.980861][ T6460] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 401.101883][ T6460] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 401.120863][ T5902] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 401.339527][ T6460] ntfs3(loop4): ino=21, The size of extended attributes must not exceed 64KiB [ 401.401153][ T6476] Zero length message leads to an empty skb [ 402.132344][ T6485] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 402.241496][ T6485] loop4: detected capacity change from 0 to 1024 [ 402.255908][ T6485] EXT4-fs: Ignoring removed mblk_io_submit option [ 402.861565][ T4937] Bluetooth: hci6: command 0x1003 tx timeout [ 402.862618][ T5677] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 402.896852][ T6485] EXT4-fs: Mount option(s) incompatible with ext3 [ 405.840438][ T6517] loop5: detected capacity change from 0 to 164 [ 405.890074][ T6517] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 405.951576][ T6517] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 405.972022][ T6512] loop0: detected capacity change from 0 to 4096 [ 405.996605][ T6520] netlink: 52 bytes leftover after parsing attributes in process `syz.4.163'. [ 406.020560][ T6517] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 406.076119][ T6520] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.083935][ T6520] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.428464][ T6492] loop3: detected capacity change from 0 to 32768 [ 410.083647][ T6545] loop0: detected capacity change from 0 to 16 [ 410.133701][ T6545] erofs: Unknown parameter 'ãé' [ 410.898046][ T6548] syz.1.170 (6548): drop_caches: 2 [ 411.828796][ T6558] atomic_op ffff88807d5f5998 conn xmit_atomic 0000000000000000 [ 412.356874][ T6573] loop0: detected capacity change from 0 to 64 [ 412.501189][ T6579] loop1: detected capacity change from 0 to 256 [ 412.681078][ T6579] FAT-fs (loop1): Directory bread(block 64) failed [ 412.714696][ T6579] FAT-fs (loop1): Directory bread(block 65) failed [ 412.754006][ T6587] loop3: detected capacity change from 0 to 128 [ 412.760053][ T6579] FAT-fs (loop1): Directory bread(block 66) failed [ 412.903981][ T6587] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 412.931602][ T6579] FAT-fs (loop1): Directory bread(block 67) failed [ 412.990947][ T6579] FAT-fs (loop1): Directory bread(block 68) failed [ 413.013538][ T6579] FAT-fs (loop1): Directory bread(block 69) failed [ 413.020156][ T6579] FAT-fs (loop1): Directory bread(block 70) failed [ 413.027490][ T6579] FAT-fs (loop1): Directory bread(block 71) failed [ 413.037546][ T6587] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 413.050005][ T6579] FAT-fs (loop1): Directory bread(block 72) failed [ 413.069888][ T6579] FAT-fs (loop1): Directory bread(block 73) failed [ 413.934618][ T6579] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 414.334700][ T6600] loop0: detected capacity change from 0 to 256 [ 416.179364][ T6624] loop3: detected capacity change from 0 to 512 [ 416.263613][ T6626] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 416.270166][ T6626] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 416.278234][ T6626] vhci_hcd vhci_hcd.0: Device attached [ 416.862890][ T6624] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.189: inode has both inline data and extents flags [ 416.876228][ T6624] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 416.881476][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 416.897106][ C0] EXT4-fs (loop3): initial error at time 1777620439: ext4_orphan_get:1397: inode 15 [ 416.906561][ C0] EXT4-fs (loop3): last error at time 1777620439: ext4_orphan_get:1397: inode 15 [ 416.938799][ T6624] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.189: couldn't read orphan inode 15 (err -117) [ 416.951362][ T6624] loop3: lost filesystem error report for type 5 error -117 [ 416.986252][ T6624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.051869][ T6631] netlink: 20 bytes leftover after parsing attributes in process `syz.0.191'. [ 417.584340][ T5646] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 417.884710][ T6638] loop0: detected capacity change from 0 to 16 [ 417.912468][ T6638] erofs: Unknown parameter 'ãé' [ 418.964991][ T6627] vhci_hcd: connection reset by peer [ 419.612598][ T4383] vhci_hcd vhci_hcd.3: stop threads [ 420.798179][ T4383] vhci_hcd vhci_hcd.3: release socket [ 420.808186][ T4383] vhci_hcd vhci_hcd.3: disconnect device [ 420.963203][ T5665] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.488654][ T6668] loop3: detected capacity change from 0 to 512 [ 421.575042][ T6668] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 422.376583][ T6668] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.200: iget: bad i_size value: 38620345925642 [ 422.425287][ T6677] loop5: detected capacity change from 0 to 16 [ 422.425880][ T6668] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 422.440228][ T6677] erofs: Unknown parameter 'ãé' [ 422.458345][ T6668] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.200: couldn't read orphan inode 15 (err -117) [ 422.470297][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 422.470335][ C0] EXT4-fs (loop3): initial error at time 1777620444: ext4_orphan_get:1397: inode 15 [ 422.470387][ C0] EXT4-fs (loop3): last error at time 1777620444: ext4_orphan_get:1397: inode 15 [ 422.498184][ T6668] loop3: lost filesystem error report for type 5 error -117 [ 422.511706][ T6679] loop2: detected capacity change from 0 to 512 [ 422.613256][ T6668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.649682][ T6679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.692329][ T5646] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 422.760152][ T6679] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.890657][ T6685] atomic_op ffff88807b7d5198 conn xmit_atomic 0000000000000000 [ 423.506260][ T5666] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.541527][ T6676] EXT4-fs error (device loop3): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 423.597701][ T6657] loop1: detected capacity change from 0 to 32768 [ 423.658518][ T5665] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.189734][ T6699] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 424.196298][ T6699] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 424.205960][ T6699] vhci_hcd vhci_hcd.0: Device attached [ 424.264638][ T6699] loop4: detected capacity change from 0 to 512 [ 424.591611][ T5791] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 424.668816][ T6657] read_mapping_page failed! [ 424.674928][ T6699] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.210: inode has both inline data and extents flags [ 424.688833][ T6699] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 424.691453][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 424.707028][ C0] EXT4-fs (loop4): initial error at time 1777620447: ext4_orphan_get:1397: inode 15 [ 424.716489][ C0] EXT4-fs (loop4): last error at time 1777620447: ext4_orphan_get:1397: inode 15 [ 424.726321][ T6699] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.210: couldn't read orphan inode 15 (err -117) [ 424.739454][ T6699] loop4: lost filesystem error report for type 5 error -117 [ 424.837632][ T6699] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.999952][ T6657] diRead: read_metapage failed [ 425.919436][ T6700] vhci_hcd: connection reset by peer [ 425.967004][ T5853] vhci_hcd vhci_hcd.4: stop threads [ 426.046545][ T5853] vhci_hcd vhci_hcd.4: release socket [ 426.196848][ T5853] vhci_hcd vhci_hcd.4: disconnect device [ 426.718139][ T6718] loop1: detected capacity change from 0 to 16 [ 426.760273][ T6718] erofs: Unknown parameter 'ãé' [ 427.244663][ T6724] atomic_op ffff8880367d8198 conn xmit_atomic 0000000000000000 [ 427.296493][ T5667] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.241332][ T6736] loop5: detected capacity change from 0 to 16 [ 428.294881][ T6736] erofs: Unknown parameter 'ãé' [ 429.336151][ T6736] atomic_op ffff88805255a198 conn xmit_atomic 0000000000000000 [ 429.717434][ T6753] loop2: detected capacity change from 0 to 64 [ 429.991838][ T5791] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 430.776907][ T6770] loop0: detected capacity change from 0 to 4096 [ 430.807114][ T6770] ntfs3(loop0): failed to replay log file. Can't mount rw! [ 432.099519][ T6756] loop1: detected capacity change from 0 to 32768 [ 432.180550][ T6799] loop0: detected capacity change from 0 to 256 [ 432.187505][ T6756] JBD2: Ignoring recovery information on journal [ 432.214233][ T6802] loop5: detected capacity change from 0 to 64 [ 432.292529][ T6756] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 432.359999][ T6799] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 432.634629][ T6771] loop4: detected capacity change from 0 to 40427 [ 432.648215][ T6771] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 432.648258][ T6771] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 432.668491][ T6771] F2FS-fs (loop4): invalid crc value [ 433.188854][ T6814] loop2: detected capacity change from 0 to 1024 [ 433.238679][ T6814] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 433.265755][ T6814] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 433.293031][ T6814] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 433.324231][ T6814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.374425][ T5664] ocfs2: Unmounting device (7,1) on (node local) [ 433.449174][ T6814] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 433.664921][ T5666] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.780244][ T6771] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 435.458805][ T6841] loop0: detected capacity change from 0 to 736 [ 436.840588][ T6865] loop2: detected capacity change from 0 to 4096 [ 436.962680][ T6865] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 436.970550][ T6865] ntfs3(loop2): Failed to load $Extend (-22). [ 436.977566][ T6865] ntfs3(loop2): Failed to initialize $Extend. [ 437.216858][ T5666] ntfs3(loop2): ino=9, ntfs_sync_fs failed, -22. [ 438.820090][ T5901] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 438.848706][ T6859] loop0: detected capacity change from 0 to 32768 [ 438.887716][ T6859] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.256 (6859) [ 438.900626][ T5901] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 438.952476][ T6859] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 438.990346][ T6859] BTRFS info (device loop0): using xxhash64 checksum algorithm [ 439.178570][ T6899] fido_id[6899]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 439.197762][ T6859] BTRFS info (device loop0): enabling ssd optimizations [ 439.217901][ T6859] BTRFS info (device loop0): turning on flush-on-commit [ 439.226201][ T6859] BTRFS info (device loop0): turning on async discard [ 439.233063][ T6859] BTRFS info (device loop0): enabling free space tree [ 439.251484][ T6859] BTRFS info (device loop0): force zlib compression, level 3 [ 439.275363][ T6859] BTRFS info (device loop0): max_inline set to 4096 [ 439.343898][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.351555][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.420802][ T6919] loop2: detected capacity change from 0 to 1024 [ 439.499230][ T6922] atomic_op ffff88806a6ed198 conn xmit_atomic 0000000000000000 [ 439.557199][ T6919] hfsplus: failed to load extents file [ 439.565570][ T5663] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 439.959923][ T6935] loop2: detected capacity change from 0 to 64 [ 440.405712][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.284'. [ 442.051745][ T6959] capability: warning: `syz.4.288' uses deprecated v2 capabilities in a way that may be insecure [ 442.313633][ T6970] netlink: 32 bytes leftover after parsing attributes in process `syz.2.291'. [ 442.467205][ T6976] loop3: detected capacity change from 0 to 16 [ 442.493813][ T6976] erofs: Unknown parameter 'ãé' [ 443.108551][ T6986] atomic_op ffff888077cbe198 conn xmit_atomic 0000000000000000 [ 445.869134][ T7006] binder: BINDER_SET_CONTEXT_MGR already set [ 445.950591][ T7006] binder: 7004:7006 ioctl 4018620d 200000004a80 returned -16 [ 446.119153][ T7003] loop1: detected capacity change from 0 to 4096 [ 446.129718][ T7003] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 446.198356][ T7003] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 446.219918][ T7003] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 446.510779][ T5694] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 446.538066][ T5664] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 446.569960][ T5664] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 446.581540][ T5664] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 446.627377][ T12] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 446.679278][ T7024] loop4: detected capacity change from 0 to 4096 [ 446.724012][ T7024] EXT4-fs: inline encryption not supported [ 446.761131][ T7024] EXT4-fs (loop4): Test dummy encryption mode enabled [ 446.809676][ T7024] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0003] [ 446.850141][ T7024] System zones: 0-5 [ 446.927829][ T7024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.978515][ T7034] loop1: detected capacity change from 0 to 16 [ 447.016832][ T7034] erofs: Unknown parameter 'ãé' [ 447.611040][ T7039] atomic_op ffff8880521aa998 conn xmit_atomic 0000000000000000 [ 449.643193][ T5667] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.051052][ T7051] loop1: detected capacity change from 0 to 512 [ 450.087794][ T7051] ext2: Unknown parameter 'permit_directio' [ 451.043408][ T7055] loop1: detected capacity change from 0 to 128 [ 451.130363][ T7055] syz.1.318: attempt to access beyond end of device [ 451.130363][ T7055] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 451.182516][ T7055] syz.1.318: attempt to access beyond end of device [ 451.182516][ T7055] loop1: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 451.274774][ T7055] syz.1.318: attempt to access beyond end of device [ 451.274774][ T7055] loop1: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 451.298389][ T7061] loop4: detected capacity change from 0 to 1024 [ 451.352234][ T7055] Buffer I/O error on dev loop1, logical block 71, lost async page write [ 451.726846][ T7047] loop0: detected capacity change from 0 to 32768 [ 451.758679][ T7047] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.316 (7047) [ 451.814945][ T7047] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 451.854821][ T7074] loop2: detected capacity change from 0 to 64 [ 451.865458][ T7047] BTRFS info (device loop0): using sha256 checksum algorithm [ 451.875199][ T7076] loop4: detected capacity change from 0 to 16 [ 451.893544][ T7076] erofs: Unknown parameter 'ãé' [ 452.130732][ T7047] BTRFS info (device loop0): enabling ssd optimizations [ 452.202516][ T7047] BTRFS info (device loop0): turning on async discard [ 452.246647][ T7047] BTRFS info (device loop0): enabling free space tree [ 452.272730][ T7094] loop5: detected capacity change from 0 to 128 [ 452.370395][ T7097] atomic_op ffff88807d2b9998 conn xmit_atomic 0000000000000000 [ 452.601673][ T7094] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 452.751240][ T7094] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 453.027636][ T5663] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 453.317545][ T7105] loop4: detected capacity change from 0 to 164 [ 453.358244][ T7105] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 454.299332][ T7113] Driver unsupported XDP return value 0 on prog (id 23) dev N/A, expect packet loss! [ 454.593638][ T7123] netlink: 20 bytes leftover after parsing attributes in process `syz.4.340'. [ 454.807259][ T7124] loop0: detected capacity change from 0 to 512 [ 454.828674][ T7124] ext2: Unknown parameter 'permit_directio' [ 455.753069][ T7134] loop4: detected capacity change from 0 to 8 [ 456.353356][ T7146] syzkaller0: entered promiscuous mode [ 456.378738][ T7150] loop5: detected capacity change from 0 to 164 [ 456.385403][ T7146] syzkaller0: entered allmulticast mode [ 456.425785][ T7150] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 457.865331][ T7162] ipip0: entered promiscuous mode [ 457.873911][ T7162] ipip0: entered allmulticast mode [ 458.100737][ T7178] loop1: detected capacity change from 0 to 8 [ 459.384824][ T7195] loop2: detected capacity change from 0 to 512 [ 459.504876][ T7195] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.562516][ T7205] loop5: detected capacity change from 0 to 164 [ 459.575129][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.372'. [ 459.582774][ T7195] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.624295][ T7205] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 459.705501][ T7205] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 459.845386][ T7213] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 459.966471][ T5666] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.067577][ T7216] loop5: detected capacity change from 0 to 8 [ 460.479560][ T7207] loop0: detected capacity change from 0 to 32768 [ 460.544202][ T7207] JBD2: Ignoring recovery information on journal [ 460.795822][ T7240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.382'. [ 460.928894][ T7207] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 462.121093][ T7258] loop4: detected capacity change from 0 to 164 [ 462.144961][ T7258] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 462.163895][ T5663] ocfs2: Unmounting device (7,0) on (node local) [ 462.181901][ T7258] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 463.873468][ T7289] syz.4.399 (7289): attempted to duplicate a private mapping with mremap. This is not supported. [ 464.004613][ T7289] netlink: 'syz.4.399': attribute type 1 has an invalid length. [ 464.177379][ T7302] loop4: detected capacity change from 0 to 4096 [ 464.222105][ T7304] Cannot find del_set index 0 as target [ 464.349862][ T7304] netlink: 14 bytes leftover after parsing attributes in process `syz.3.404'. [ 464.461796][ T5677] Bluetooth: hci5: command tx timeout [ 464.997172][ T7252] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 467.846114][ T7351] nftables ruleset with unbound chain [ 468.176259][ T7330] loop2: detected capacity change from 0 to 32768 [ 468.236109][ T7330] JBD2: Ignoring recovery information on journal [ 468.268927][ T7330] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 468.324315][ T7330] JBD2: bad block at offset 32 [ 468.356848][ T7363] fuse: Bad value for 'fd' [ 468.404167][ T7330] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 468.611090][ T7330] (syz.2.411,7330,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 468.837592][ T7374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.407400][ T7374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.452882][ T5666] ocfs2: Unmounting device (7,2) on (node local) [ 469.467693][ T7381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.650115][ T7373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.012343][ T7385] warning: `syz.1.430' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 470.743945][ T7396] Bluetooth: hci0: unsupported parameter 255 [ 470.768873][ T7400] netlink: 12 bytes leftover after parsing attributes in process `syz.5.435'. [ 470.770954][ T7396] Bluetooth: hci0: unsupported parameter 255 [ 470.835683][ T7400] bond1: entered promiscuous mode [ 470.841202][ T7400] 8021q: adding VLAN 0 to HW filter on device bond1 [ 470.947773][ T7407] loop3: detected capacity change from 0 to 128 [ 470.975487][ T7400] 8021q: adding VLAN 0 to HW filter on device bond1 [ 470.982859][ T7400] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 471.005117][ T7400] bond1: (slave sit1): Error -95 calling set_mac_address [ 471.006645][ T7407] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 471.058163][ T7407] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 472.138256][ T5798] IPVS: starting estimator thread 0... [ 472.145775][ T5677] Bluetooth: hci0: command 0x0406 tx timeout [ 472.152177][ T5687] Bluetooth: hci4: command 0x0406 tx timeout [ 472.162352][ T5687] Bluetooth: hci1: command 0x0406 tx timeout [ 472.173175][ T5677] Bluetooth: hci2: command 0x0406 tx timeout [ 472.222531][ T5681] Bluetooth: hci3: command 0x0406 tx timeout [ 472.602363][ T7442] IPVS: using max 22 ests per chain, 52800 per kthread [ 475.115013][ T7494] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 475.124020][ T7494] IPv6: NLM_F_CREATE should be set when creating new route [ 475.131241][ T7494] IPv6: NLM_F_CREATE should be set when creating new route [ 475.260549][ T7501] netlink: 'syz.2.459': attribute type 1 has an invalid length. [ 475.297551][ T7501] netlink: 216 bytes leftover after parsing attributes in process `syz.2.459'. [ 475.657257][ T7513] Bluetooth: hci0: unsupported parameter 255 [ 475.676918][ T7513] Bluetooth: hci0: unsupported parameter 255 [ 476.195132][ T7521] netlink: 312 bytes leftover after parsing attributes in process `syz.1.465'. [ 476.933884][ T7545] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 477.031940][ T7545] bond2: (slave lo): Enslaving as an active interface with an up link [ 477.078415][ T7545] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 477.343014][ T7560] syzkaller0: entered promiscuous mode [ 477.371514][ T7560] syzkaller0: entered allmulticast mode [ 478.552777][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.483'. [ 479.275416][ T7602] loop3: detected capacity change from 0 to 16 [ 479.303578][ T7602] erofs: Unknown parameter 'ãé' [ 479.720243][ T7618] atomic_op ffff88802a826998 conn xmit_atomic 0000000000000000 [ 482.266832][ T7662] syzkaller1: entered promiscuous mode [ 482.294446][ T7662] syzkaller1: entered allmulticast mode [ 482.346943][ T7671] loop2: detected capacity change from 0 to 16 [ 482.413897][ T7671] erofs: Unknown parameter 'ãé' [ 482.848203][ T7676] atomic_op ffff888035418198 conn xmit_atomic 0000000000000000 [ 485.319190][ T7723] loop2: detected capacity change from 0 to 16 [ 485.339284][ T7723] erofs: Unknown parameter 'ãé' [ 485.736383][ T7732] atomic_op ffff888053763998 conn xmit_atomic 0000000000000000 [ 486.412506][ T7734] netlink: 52 bytes leftover after parsing attributes in process `syz.3.527'. [ 486.908681][ T7695] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 487.314275][ T7750] syzkaller0: entered promiscuous mode [ 487.330140][ T7750] syzkaller0: entered allmulticast mode [ 487.942144][ T7784] netlink: 52 bytes leftover after parsing attributes in process `syz.5.542'. [ 488.958094][ T7761] netlink: 76 bytes leftover after parsing attributes in process `syz.1.537'. [ 489.439201][ T7805] bond0: entered promiscuous mode [ 489.471040][ T7805] bond_slave_0: entered promiscuous mode [ 489.481668][ T7805] bond_slave_1: entered promiscuous mode [ 489.492961][ T7805] batadv0: entered promiscuous mode [ 489.513957][ T7805] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 489.527709][ T7805] bond0: left promiscuous mode [ 489.534697][ T7805] bond_slave_0: left promiscuous mode [ 489.540723][ T7805] bond_slave_1: left promiscuous mode [ 489.547950][ T7805] batadv0: left promiscuous mode [ 490.216049][ T7847] loop3: detected capacity change from 0 to 512 [ 490.249357][ T7847] ext2: Unknown parameter 'permit_directio' [ 491.112574][ T7854] netlink: 76 bytes leftover after parsing attributes in process `syz.4.559'. [ 492.017024][ T7863] syzkaller0: entered promiscuous mode [ 492.022620][ T7863] syzkaller0: entered allmulticast mode [ 492.364214][ T7810] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 492.461576][ T4937] Bluetooth: hci5: link tx timeout [ 492.468588][ T4937] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 492.609249][ T7873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.566'. [ 492.659817][ T7873] bond1: entered promiscuous mode [ 492.665767][ T7873] 8021q: adding VLAN 0 to HW filter on device bond1 [ 492.770630][ T7873] 8021q: adding VLAN 0 to HW filter on device bond1 [ 492.792776][ T7873] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 492.828860][ T7873] bond1: (slave sit1): Error -95 calling set_mac_address [ 493.172795][ T7877] syzkaller0: entered promiscuous mode [ 493.190717][ T7877] syzkaller0: entered allmulticast mode [ 494.542226][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 495.798806][ T7950] loop4: detected capacity change from 0 to 16 [ 495.838449][ T7950] erofs: Unknown parameter 'ãé' [ 496.301131][ T7962] atomic_op ffff88806ac7e198 conn xmit_atomic 0000000000000000 [ 497.113349][ T7975] loop0: detected capacity change from 0 to 256 [ 497.653994][ T7954] loop3: detected capacity change from 0 to 32768 [ 497.716650][ T7954] JBD2: Ignoring recovery information on journal [ 497.736685][ T7954] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 497.759039][ T7954] JBD2: bad block at offset 32 [ 497.791352][ T7954] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 497.856872][ T7954] (syz.3.587,7954,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 498.193204][ T5665] ocfs2: Unmounting device (7,3) on (node local) [ 498.628182][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.610'. [ 498.659390][ T8011] netlink: 76 bytes leftover after parsing attributes in process `syz.2.609'. [ 499.131614][ T8019] syzkaller0: entered promiscuous mode [ 499.157013][ T8019] syzkaller0: entered allmulticast mode [ 499.302852][ T8029] netlink: 312 bytes leftover after parsing attributes in process `syz.4.612'. [ 500.467751][ T8048] loop2: detected capacity change from 0 to 32768 [ 500.500836][ T8048] JBD2: Ignoring recovery information on journal [ 500.524582][ T8048] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 500.535360][ T8048] JBD2: bad block at offset 32 [ 500.557183][ T8048] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 500.600975][ T8048] (syz.2.619,8048,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 500.711108][ T5666] ocfs2: Unmounting device (7,2) on (node local) [ 500.788252][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.124897][ T8076] syzkaller0: entered promiscuous mode [ 502.131041][ T8076] syzkaller0: entered allmulticast mode [ 502.163273][ T8021] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 502.420540][ T8078] syzkaller0: entered promiscuous mode [ 502.448857][ T8081] loop5: detected capacity change from 0 to 256 [ 502.456003][ T8078] syzkaller0: entered allmulticast mode [ 502.571200][ T8081] FAT-fs (loop5): Directory bread(block 64) failed [ 502.616180][ T8081] FAT-fs (loop5): Directory bread(block 65) failed [ 502.660850][ T8081] FAT-fs (loop5): Directory bread(block 66) failed [ 502.702621][ T8081] FAT-fs (loop5): Directory bread(block 67) failed [ 502.712994][ T8081] FAT-fs (loop5): Directory bread(block 68) failed [ 502.727017][ T8081] FAT-fs (loop5): Directory bread(block 69) failed [ 502.742498][ T8081] FAT-fs (loop5): Directory bread(block 70) failed [ 502.757002][ T8081] FAT-fs (loop5): Directory bread(block 71) failed [ 502.771599][ T8081] FAT-fs (loop5): Directory bread(block 72) failed [ 502.787175][ T8081] FAT-fs (loop5): Directory bread(block 73) failed [ 502.866155][ T8093] loop4: detected capacity change from 0 to 512 [ 503.575787][ T8115] loop0: detected capacity change from 0 to 256 [ 503.649734][ T8115] syz.0.644: attempt to access beyond end of device [ 503.649734][ T8115] loop0: rw=524288, sector=256, nr_sectors = 20 limit=256 [ 503.705867][ T8124] netlink: 312 bytes leftover after parsing attributes in process `syz.5.645'. [ 503.731702][ T8115] syz.0.644: attempt to access beyond end of device [ 503.731702][ T8115] loop0: rw=0, sector=256, nr_sectors = 8 limit=256 [ 503.789996][ T30] audit: type=1800 audit(1777620526.295:7): pid=8115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.644" name="file2" dev="loop0" ino=1048622 res=0 errno=0 [ 503.793750][ T8128] loop2: detected capacity change from 0 to 128 [ 503.896860][ T8128] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 503.952435][ T8128] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 504.667578][ T8152] syzkaller0: entered promiscuous mode [ 504.686164][ T8152] syzkaller0: entered allmulticast mode [ 505.207871][ T8174] loop6: detected capacity change from 0 to 8 [ 505.288581][ T8174] loop6: detected capacity change from 8 to 7 [ 505.353684][ T8180] loop6: detected capacity change from 7 to 0 [ 505.357096][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 505.370565][ T8174] ldm_validate_partition_table(): Disk read failed. [ 505.390575][ T8174] Dev loop6: unable to read RDB block 0 [ 505.421127][ T8174] loop6: unable to read partition table [ 505.435637][ T30] audit: type=1326 audit(1777620527.935:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz.2.674" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85959cdd9 code=0x7ffc0000 [ 505.451751][ T8174] loop6: partition table beyond EOD, [ 505.473404][ T30] audit: type=1326 audit(1777620527.945:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz.2.674" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85959cdd9 code=0x7ffc0000 [ 505.503675][ T8174] truncated [ 505.503700][ T8174] loop_reread_partitions: partition scan of loop6 (ÛuêƒG Ÿ­Ü±.:ˆÊåë0„Çñ™Àü¿Ð [ 505.503700][ T8174] å’ 0b 90 45 31 f6 e9 f5 f9 ff ff e8 48 dd 3d 00 90 0f 0b 90 e9 43 [ 505.861365][ T8188] RSP: 0018:ffffc9000583fce8 EFLAGS: 00010093 [ 505.867437][ T8188] RAX: 0000000000000000 RBX: ffff888037babd80 RCX: ffffffff81ca7f1b [ 505.875405][ T8188] RDX: ffff888037babd80 RSI: ffffffff81ca8d07 RDI: ffff888037babd80 [ 505.883370][ T8188] RBP: 0000000000000080 R08: 0000000000000007 R09: 0000000000000040 [ 505.891336][ T8188] R10: 0000000000000080 R11: 0000000000000000 R12: 1ffff92000b07fa0 [ 505.899320][ T8188] R13: dffffc0000000000 R14: 0000000000000080 R15: ffff88807e3c8000 [ 505.907295][ T8188] FS: 0000000000000000(0000) GS:ffff888124377000(0000) knlGS:0000000000000000 [ 505.916224][ T8188] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 505.922810][ T8188] CR2: 00007fe8595ea4c0 CR3: 0000000055010000 CR4: 0000000000350ef0 [ 505.930778][ T8188] Call Trace: [ 505.934046][ T8188] [ 505.936972][ T8188] ? __pfx_do_notify_parent+0x10/0x10 [ 505.942354][ T8188] ? do_raw_spin_lock+0x128/0x260 [ 505.947416][ T8188] ? srso_alias_return_thunk+0x5/0xfbef5 [ 505.953067][ T8188] ? lockdep_hardirqs_on+0x78/0x100 [ 505.958278][ T8188] ? _raw_write_lock_irq+0x45/0x50 [ 505.963398][ T8188] ? srso_alias_return_thunk+0x5/0xfbef5 [ 505.969046][ T8188] do_exit+0x1b05/0x2a60 [ 505.973293][ T8188] ? common_nsleep+0xa1/0xd0 [ 505.977897][ T8188] ? srso_alias_return_thunk+0x5/0xfbef5 [ 505.983536][ T8188] ? __pfx_do_exit+0x10/0x10 [ 505.988138][ T8188] __x64_sys_exit+0x42/0x50 [ 505.992641][ T8188] x64_sys_call+0x152e/0x1530 [ 505.997333][ T8188] do_syscall_64+0x10b/0xf80 [ 506.001933][ T8188] ? irqentry_exit+0x117/0x790 [ 506.006708][ T8188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.012601][ T8188] RIP: 0033:0x7f631839cdd9 [ 506.017014][ T8188] Code: Unable to access opcode bytes at 0x7f631839cdaf. [ 506.024031][ T8188] RSP: 002b:00007f631926ffd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 506.032446][ T8188] RAX: ffffffffffffffda RBX: 00007f6318615fa0 RCX: 00007f631839cdd9 [ 506.040412][ T8188] RDX: 00007f63192709c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 506.048377][ T8188] RBP: 00007f6318432d69 R08: 0000000000000000 R09: 0000000000000000 [ 506.056342][ T8188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.064306][ T8188] R13: 00007f6318616038 R14: 00007f6318615fa0 R15: 00007ffc7cef0cd8 [ 506.072314][ T8188] [ 506.075325][ T8188] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 506.082594][ T8188] CPU: 0 UID: 0 PID: 8188 Comm: syz.4.673 Not tainted syzkaller #0 PREEMPT(full) [ 506.091814][ T8188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 506.101863][ T8188] Call Trace: [ 506.105133][ T8188] [ 506.108055][ T8188] dump_stack_lvl+0x100/0x190 [ 506.112737][ T8188] vpanic+0x552/0x970 [ 506.116719][ T8188] ? __pfx_vpanic+0x10/0x10 [ 506.121257][ T8188] panic+0xd1/0xe0 [ 506.124985][ T8188] ? __pfx_panic+0x10/0x10 [ 506.129415][ T8188] ? check_panic_on_warn+0x1f/0x90 [ 506.134535][ T8188] check_panic_on_warn.cold+0x19/0x34 [ 506.139911][ T8188] ? do_notify_parent+0xea8/0x10b0 [ 506.145028][ T8188] __warn.cold+0x191/0x328 [ 506.149451][ T8188] __report_bug+0x296/0x3d0 [ 506.153958][ T8188] ? do_notify_parent+0xea8/0x10b0 [ 506.159081][ T8188] ? __pfx___report_bug+0x10/0x10 [ 506.164113][ T8188] ? exit_fs+0x12c/0x180 [ 506.168369][ T8188] ? srso_alias_return_thunk+0x5/0xfbef5 [ 506.174006][ T8188] ? kasan_save_stack+0x3f/0x50 [ 506.178866][ T8188] ? kasan_save_stack+0x30/0x50 [ 506.183724][ T8188] ? kasan_save_track+0x14/0x30 [ 506.188581][ T8188] ? kasan_save_free_info+0x3b/0x70 [ 506.193781][ T8188] ? __kasan_slab_free+0x5f/0x80 [ 506.198733][ T8188] ? kmem_cache_free+0x127/0x6c0 [ 506.203673][ T8188] ? exit_fs+0x12c/0x180 [ 506.207929][ T8188] ? do_exit+0x17c4/0x2a60 [ 506.212341][ T8188] ? __x64_sys_exit+0x42/0x50 [ 506.217016][ T8188] ? x64_sys_call+0x152e/0x1530 [ 506.221889][ T8188] ? do_syscall_64+0x10b/0xf80 [ 506.226660][ T8188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.232734][ T8188] ? do_notify_parent+0xea8/0x10b0 [ 506.237855][ T8188] report_bug+0xb2/0x220 [ 506.242104][ T8188] ? do_notify_parent+0xea8/0x10b0 [ 506.247224][ T8188] handle_bug+0x16a/0x2a0 [ 506.251595][ T8188] exc_invalid_op+0x17/0x50 [ 506.256115][ T8188] asm_exc_invalid_op+0x1a/0x20 [ 506.260962][ T8188] RIP: 0010:do_notify_parent+0xea8/0x10b0 [ 506.266689][ T8188] Code: f4 ff ff e8 7a dd 3d 00 41 c1 ff 08 c7 84 24 90 00 00 00 01 00 00 00 44 89 bc 24 a0 00 00 00 e9 92 f8 ff ff e8 59 dd 3d 00 90 <0f> 0b 90 45 31 f6 e9 f5 f9 ff ff e8 48 dd 3d 00 90 0f 0b 90 e9 43 [ 506.286302][ T8188] RSP: 0018:ffffc9000583fce8 EFLAGS: 00010093 [ 506.292370][ T8188] RAX: 0000000000000000 RBX: ffff888037babd80 RCX: ffffffff81ca7f1b [ 506.300338][ T8188] RDX: ffff888037babd80 RSI: ffffffff81ca8d07 RDI: ffff888037babd80 [ 506.308307][ T8188] RBP: 0000000000000080 R08: 0000000000000007 R09: 0000000000000040 [ 506.316298][ T8188] R10: 0000000000000080 R11: 0000000000000000 R12: 1ffff92000b07fa0 [ 506.324265][ T8188] R13: dffffc0000000000 R14: 0000000000000080 R15: ffff88807e3c8000 [ 506.332248][ T8188] ? do_notify_parent+0xbb/0x10b0 [ 506.337283][ T8188] ? do_notify_parent+0xea7/0x10b0 [ 506.342410][ T8188] ? do_notify_parent+0xea7/0x10b0 [ 506.347534][ T8188] ? __pfx_do_notify_parent+0x10/0x10 [ 506.352910][ T8188] ? do_raw_spin_lock+0x128/0x260 [ 506.357954][ T8188] ? srso_alias_return_thunk+0x5/0xfbef5 [ 506.363599][ T8188] ? lockdep_hardirqs_on+0x78/0x100 [ 506.368804][ T8188] ? _raw_write_lock_irq+0x45/0x50 [ 506.373917][ T8188] ? srso_alias_return_thunk+0x5/0xfbef5 [ 506.379564][ T8188] do_exit+0x1b05/0x2a60 [ 506.383804][ T8188] ? common_nsleep+0xa1/0xd0 [ 506.388424][ T8188] ? srso_alias_return_thunk+0x5/0xfbef5 [ 506.394063][ T8188] ? __pfx_do_exit+0x10/0x10 [ 506.398663][ T8188] __x64_sys_exit+0x42/0x50 [ 506.403170][ T8188] x64_sys_call+0x152e/0x1530 [ 506.407859][ T8188] do_syscall_64+0x10b/0xf80 [ 506.412456][ T8188] ? irqentry_exit+0x117/0x790 [ 506.417231][ T8188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.423126][ T8188] RIP: 0033:0x7f631839cdd9 [ 506.427537][ T8188] Code: Unable to access opcode bytes at 0x7f631839cdaf. [ 506.434543][ T8188] RSP: 002b:00007f631926ffd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 506.442964][ T8188] RAX: ffffffffffffffda RBX: 00007f6318615fa0 RCX: 00007f631839cdd9 [ 506.450931][ T8188] RDX: 00007f63192709c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 506.458894][ T8188] RBP: 00007f6318432d69 R08: 0000000000000000 R09: 0000000000000000 [ 506.466880][ T8188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.474848][ T8188] R13: 00007f6318616038 R14: 00007f6318615fa0 R15: 00007ffc7cef0cd8 [ 506.482836][ T8188] [ 506.486604][ T8188] Kernel Offset: disabled [ 506.490923][ T8188] Rebooting in 86400 seconds..