last executing test programs: 55.727569078s ago: executing program 3 (id=812): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') fcntl$notify(r0, 0x402, 0x8000002f) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r1, &(0x7f0000001880)=[{&(0x7f0000000100)=""/146, 0x92}, {0x0}], 0x2, 0x0, 0xf15) 55.469789445s ago: executing program 3 (id=816): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x3ff, 0x2, &(0x7f0000000040)="8183", 0xa, 0x8, 0xc45, 0x8, 0xc336, 0x0, 0x7, 'syz0\x00'}) 55.24241454s ago: executing program 3 (id=820): unshare(0x6020400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x100, r0}, 0x0) 55.120368813s ago: executing program 3 (id=823): syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x2000000, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESHEX, @ANYRES8=0x0, @ANYRESDEC, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT=0x0], 0xfe, 0xc17, &(0x7f0000001dc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) 54.493867108s ago: executing program 3 (id=833): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='4294967295 2000000000 0\n', 0x18) 53.698436138s ago: executing program 3 (id=840): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000980)=ANY=[], 0x4, 0x291, &(0x7f0000000600)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bfd000/0x400000)=nil) 53.392430975s ago: executing program 32 (id=840): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000980)=ANY=[], 0x4, 0x291, &(0x7f0000000600)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bfd000/0x400000)=nil) 29.865700596s ago: executing program 4 (id=1159): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x401e, &(0x7f0000007a40)=ANY=[@ANYBLOB="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"], 0xfd, 0x5528, &(0x7f0000007b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000840) 28.44335331s ago: executing program 4 (id=1184): r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000300)='\x8f\xed\'[\t:1]:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='::1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 27.855915554s ago: executing program 4 (id=1197): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmmsg$sock(r0, &(0x7f0000001100)=[{{&(0x7f0000000000)=@ll={0x11, 0x7a746ec224325815, r2, 0x1, 0x8d, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=[@timestamping={{0x14, 0x1, 0x25, 0xffffffff}}], 0x18}}], 0x1, 0x4000) 27.783225536s ago: executing program 4 (id=1200): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1400c, &(0x7f00000004c0)={[{@debug}, {@data_journal}, {@norecovery}]}, 0x3, 0x498, &(0x7f0000000500)="$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") syz_mount_image$fuse(0x0, &(0x7f00000009c0)='./bus\x00', 0x3000440, 0x0, 0xff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) llistxattr(&(0x7f0000000b40)='./file0\x00', 0x0, 0xfffffdf3) 27.256245359s ago: executing program 4 (id=1217): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter={0x4, 0x800, 0x10000, 0x4, 0x6}}, {0x0, 0x3, 0x0, 0x0, @irqchip={0x54f, 0x3}}]}) 26.672440603s ago: executing program 4 (id=1234): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='1', 0x1) 26.526538737s ago: executing program 33 (id=1234): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='1', 0x1) 4.310479135s ago: executing program 5 (id=1532): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0x6, 0x21, 0x9, 0xdedb, 0xe, "00000000c89cefe0"}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) 3.789619368s ago: executing program 5 (id=1538): unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000c00)={{r0}}) 3.532081894s ago: executing program 5 (id=1542): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$eJzs3ctvW1kZAPDv3jycyWQmGZgFoAHKMFBQVTtxZ6LRbBhWI4RGQsySRSckThTFiaPYGZrQRbpkj0QlVrDiHwCJBVJX7JFYwI5NWSDxqEANEgsjX19nnIcbq03sNv79pCufe47t75xa9xzrc3NPACPrWkQcRMRkRHwcEbN5fZIf8X77aD3v8aO7y4eP7i4n0Wx+9M8ka2/VRddrWl7O33MqIr7/QcQPkxNB/xhR39vfWKpWKzt5VamxuV2q7+3fXN9cWqusVbbK5cWFxfl3b71TvqCR/vqo9LvffvHhHw6++eNWt2byuu5xXKT20CeO4rSMR8R3LyPYEIzl45l8mhc/1Yu4SGlEfCYi3syu/9kYyz7N445/TN+K/NIGAF5QzeZsNGe7zwGAqy7NcmBJWsxzATORpsViO4f3ekyn1Vq9cWO1tru10s6VzcVEurpercznucK5mEhW18crC1m5c16tlE+c34qI1yLip4WXsvPicq26MswvPgAwwl4+sf7/p9Be/wGAK67r1/zCMPsBAAyO/80HAKPH+g8Ao8f6DwCjx/oPAKPH+g8Ao8f6DwAj5Xsfftg6mof5/a9XPtnb3ah9cnOlUt8obu4uF5drO9vFtVptLbtnz+Z571et1bYX3o7dO6VGpd4o1ff2b2/Wdrcat7P7et+uTAxkVADAk7z25Qd/TiLi4L2XsiO67vd/7lr9xmX3DrhM6bA7AAzN2LA7AAzN6d2+gFEhHw90bdF7r6t66lThpPt9vX2a7xsKPEeuf/4Z8v/AC03+H0bX0+X/fZeHq0D+H0ZXs5nY8x8ARowcP5Cc0979+/98s+ukv9//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4EqayY4kLeZ7gc9EmhaLEa9ExFxMJKvr1cp8RLwaEX8qTBRa5wsRYd8gAHiRpX9L8v2/rs++NXOydbLw30L2GBE/+vlHP7uz1GjsLERMJv86qm/cz+vLw+g/AHCezjrdWcc7Hj+6u9w5Btmfv3+7vbloK+5hfrRbxmM8e5zKcg3T/07y87bW95WxC4h/cC8iPnfW+JMsNzKX73x6Mn4r9isDjZ8ei59mbe3H1r/FZy+gLzBqHrTmn/fPuv7SuJY9nn39T2Uz1LPrzH+Hp+a/9Gj+G+sx/13rN8bbv//OqcrmbLvtXsQXxiMOO2/eNf904ic94r/VZ/y/vPGlN3u1NX8RcT3OGn9yLFapsbldqu/t31zfXFqrrFW2yuXFhcX5d2+9Uy5lOepSJ1N92j/eu/Fqr/it8U/3iD91zvi/1uf4f/m/j3/wlSfE/8ZXz/78X39C/Naa+PU+4y9N/2aqV1sr/kqP8Z/3+d/oM/7Dv+6v9PlUAGAA6nv7G0vVamXnsgvp5YfICknEwQCG0y4UfvWTDwYV6xIL8Xx0Q+F5Kgx7ZgIu26cX/bB7AgAAAAAAAAAAAAAA9DKIPyca9hgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//2KH0wQ=") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x40086604, &(0x7f0000001f40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0xd500}, {0xffffffff, 0x0, 0x9, 0xa}]}) 2.651075136s ago: executing program 5 (id=1551): r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r0) keyctl$setperm(0x5, r1, 0x400001d) keyctl$search(0xa, r0, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) 2.161946248s ago: executing program 5 (id=1561): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f00000000c0)="080211000000cbc2ed4000018848", 0xe, 0x14, &(0x7f0000000700)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="080208486f57"}, 0x14) 1.955406263s ago: executing program 5 (id=1567): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x62d0, &(0x7f000001fb40)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1802a53, 0x0, 0xfa, 0x0, &(0x7f00000000c0)) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a8a439, &(0x7f000001dcc0)=ANY=[], 0xd, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 1.814965816s ago: executing program 0 (id=1572): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x62800, 0x0) ioctl(r0, 0xc138fd02, &(0x7f0000000000)="040000000000000000000000380100000000000000000000000000006ddd") 1.677531659s ago: executing program 0 (id=1577): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f00000000c0)="080211000000cbc2ed4000018848", 0xe, 0x14, &(0x7f0000000700)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="080208486f57"}, 0x14) 1.467615385s ago: executing program 0 (id=1581): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x6) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) 1.298513328s ago: executing program 0 (id=1584): syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0041e96a0f5e69f9a7f61c16124cb6d02711dffa581b9544ce66de31fff051ad15c004c6c6a100a59056ebb6bf9f1d33af"], 0x1, 0x156, &(0x7f00000003c0)="$eJzs271OwlAYxvHnAALiF4o6GAcTB12kfEQSN70UApUQixpxgTjoFXgN3pkXoIObkxgawEQ+mkjsifb/W/o2T0/6djjtu1QAIutUezIySvZPdtPZx5yx3RKAkPQGx48egOiJv9vuAIAdr2fSs6SXt7ua4smx+aCf3w/zWGo8f5B2EoPcpLX4fb54kg6G601m4vrMKF+amB/uD++/rBWtak1ZrWtDuUFeH63fnmMSAgAgOozyQfnMC2I6b3puYWq+4OfFqXnSz0sBeXlqnvLzfO3Kq89qE8AEsTn3fzxg/ycC9j8Ae9qd7kXV89wbCgoKilFh+80E4Lc5t61rp93pHjVb1YbbcC9LhcJJ5bhcrJQcf7J3Zs/3AP6ur4++7U4AAAAAAAAAAAAAAMBPbWrLdgsAAAAAQhLG70S2nxEAAAAAAAAAAAAAAAAAgP/mMwAA//9E/CIc") syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000580)='./bus\x00', 0x204b82f, 0x0, 0x0, 0x0, &(0x7f00000005c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000780)=ANY=[], 0x10448) 1.046238824s ago: executing program 2 (id=1589): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x4}, @AF_BRIDGE={0x4}]}]}, 0x2c}}, 0x0) 1.041623245s ago: executing program 0 (id=1590): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@newtfilter={0x38, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0xfffffffc}]}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@newtfilter={0x44, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'lo\x00'}]}}]}, 0x44}}, 0x0) 969.980956ms ago: executing program 6 (id=1591): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd06, &(0x7f0000002000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000300000000000006d") 966.184597ms ago: executing program 2 (id=1592): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={r0}) 872.133789ms ago: executing program 6 (id=1594): mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) mlock2(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0) 840.534469ms ago: executing program 1 (id=1595): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB], 0x34}}, 0x0) 832.0557ms ago: executing program 2 (id=1596): syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0xc2, &(0x7f0000000140)={[{@acl}, {@usrjquota_file, 0x4}, {@user_xattr}, {@commit={'commit', 0x3d, 0x7}}, {@usrjquota, 0x3d}]}, 0xff, 0x1115, &(0x7f0000002280)="$eJzs2D9rFEEYB+Df7B0Yq5NNvwhaWEhIODurFBGutbaRkMpUuSoiiN/FjyOp7EM+gEXAUhjZTdYTCUS5CxJ4Hpjd4Z13/pXvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK687D/bTdKOkSZJSbrubHGRpBvjj75MmpS8PlosD07mr5ZJJkN66Vs/q5+Wdu/JVjtv5+1e+2J7/2m7PH3/7u3x8dHJ9TIlXc4vN3+Rcn2eG22VzW8IAAAA90Rd2+zPJadj528q7vX3BwAAAG6z8QcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH9UZ6t+m+RHrTVNkpJ03dniIkn3Pw8IAAAArK2kyZvZTfEMzwArz/N1Vob42L6XPmc3n4f5D1aph00e3v3RAQAA4B6Z3ppRfqvHn2WaWuvHcexxptnZuer3v37g234yOT3I7q+a/NPwPb/8cDi2Uid3dB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cc7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAHwUAAD//wAQ3aw=") fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) 791.417181ms ago: executing program 6 (id=1597): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0xf4, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_CHAIN_USERDATA={0xd4, 0xc, "4d71c14fa46eabdd19f1eda67eb503312b5c0c2e1e44963d0ea41dcaa5410655abf3068c0bb635d959c723000f368af39d274e1a3144d0628bb659f455005e3a344c1b0b95b73fa39bd58fe5cf8c9827a8e9b66eb5ad5a0e3b9208921df9aea91e2aaf4f92450c31892bdec9afebc5726ee27f8f72fe7a51308b1ca00d28caf1b0532de9cd85eee39331f33e53d798874a285b588247a61315a4d91fdaa922b6c2f7bc51bd8ee5a5ed18aa1357928c10e34b57a4c46af516d9333e7eb7bb3649f58ffc4accdd311722698fda4bb3babb"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x1}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x4c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x10c, 0x2, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0xf8, 0x6, "bec3d318f46f99ab652999cb840e1976ffd0fa74ad736a317c75d466dd8f5f80a2aaa9a2266e6838267a799300b70f454c50b28d5f0c3f380ce5881d36be1230ba06a7806d5e6a013e959a25a3386c1731a1039490460cb87549c5b59f3121076193039c665a29486f1da661a236801189e9624c6504834e5ab1fabe0fb03f4a4e4b3ec777b20ae01699d663fae5cff191273ed445a52bc27be993790d357d04fa4209bce59ac006bccfef7743e55c6f63a06a6a468db5bde3a40df3afe32b5cfad224f8f9e52d13b05289e990f5889fd8bffbfe0b20c824935d3d07917a5132087cac4990a0a4c7b3f0d58ce759155fcdab4ac1"}]}, @NFT_MSG_DELFLOWTABLE={0xe8, 0x18, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'veth0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x20, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10001}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}, @NFT_MSG_DELCHAIN={0x60, 0x5, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6d55c3c5}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x91777a}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x428}, 0x1, 0x0, 0x0, 0x24044000}, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f00000005c0)=0x8) 777.345841ms ago: executing program 0 (id=1598): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e000000040000000400000010"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="61100c0000000000150003000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000050002000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000b7030000000000008500000033000000b70000000200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f00000006c0)="00112233445566778899aabb0800", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 711.993173ms ago: executing program 1 (id=1599): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x3c, 0x64, 0x0, 0x9, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x4, 0x2, 0x0, 0xe7, {[@md5sig={0x13, 0x12, "3243f39f27ea85559e96b6aa801aeaa2"}]}}}}}}}, 0x0) 687.455123ms ago: executing program 6 (id=1600): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000240)='./file1\x00', 0x2000084c, &(0x7f0000000540)=ANY=[], 0x81, 0x14fc, &(0x7f0000002a80)="$eJzs3AuUjlXbOPB97b1vxjTpaZLDsK993TxpsE2S5JCQQ5IkSZJTQtIkSUJiyClpSEKOk+QwhOQwjUnjfD7knDR5pUmSkJCw/0vv+356v97v6/3W2/+z1jfXb629Zl9zP9f1XPdcs+a572eteb7rOapei/q1mxGR+LfAX7+kCCFihBDDhBDXCSECIUSl+Erxl48XUJDy7z0J+3M9nH61O2BXE88/b+P55208/7yN55+38fzzNp5/3sbzz9t4/ozlZdvnFLueV95d/P5/Xsav//+H5Jaf/NXG8jf2+h+k8PzzNp5/3sbzz9t4/nkbzz9v4/n/31frvznG88/beP6M5WVX+/1nXld3Xe3fP8YYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjecM5f4UWQvx9f7X7YowxxhhjjDHG2J/H57/aHTDGGGOMMcYYY+z/PxBSKKFFIPKJ/CJGFBCx4hoRJ64VBcV1IiKuF/HiBlFI3CgKiyKiqCgmEkRxUUIYgcIKEqEoKUqJqLhJlBY3i0RRRpQV5YQT5UWSuEVUELeKiuI2UUncLiqLO0QVUVVUE9XFnaKGuEvUFLVEbXG3qCPqinqivrhHNBD3iobiPtFI3C8aiwdEE/GgaCoeEs3Ew6K5eES0EI+KluIx0Uq0Fm1EW9Hut/l98/+L+S+JvuJl0U/0FyligBgoXhGDxGAxRAwVw8SrYrh4TYwQr4tUMVKMEm+I0eJNMUa8JcaKcWK8eFtMEBPFJDFZTBFTRZp4R0wT74rp4j0xQ8wUs8RskS7miLnifTFPzBcLxAdiofhQLBKLxRKxVGSIj0SmWCayxMdiufhEZIsVYqVYJVaLNWKtWCfWiw1io9gkNostYqvYJraLT8UOsVPsErvFHrFX7BOfif3ic3FAfCFyxJf/w/yz/ym/FwgQIEGCBg35IB/EQAzEQizEQRwUhIIQgQjEQzwUgkJQGApDUSgKCZAAJaAEICAQEJSEkhCFKJSG0pAIiVAWyoIDB0mQBBXgVqgIFaESVILKUBmqQFWoCtWhOtSAGlATakJtqA11oA7Ug3pwD9wD90JDaAiNoBE0hsbQBJpAU2gKzaAZNIfm0AJaQEtoCa2gFbSBNtAO2kF7aA8doAN0gk7QGTpDF+gCyZAMXaErdINu0B26Qw/oAT2hJ/SC3tAbXoKX4GV4GfpDHTkABsJAGASDYAgMhaHwKgyH1+A1eB1SYSSMgjfgDXgTxsAZGAvjYDyMhxpyIkyCyUByKqRBGkyDaTAdpsMMmAkzYTakwxyYC3NhHsyH+fABLIQP4UNYDIthKWRABmTCMsiCLFgOZyEbVsBKWAWrYQ2shnWwHtbBRtgEG2ELbIFtsA0+hU9hJ+yE3bAb9sJe+Aw+g8/hc0iFHMiBg3AQDsEhOAyHIRdy4QgcgaNwFI7BMTgOx+EEnIRTcBJOw2k4A2fhHJyD83AeLsALCd8031tmQ6qQl2mpZT6ZT8bIGBkrY2WcjJMFZUEZkREZL+NlIVlIFpaFZVFZVCbIBFlClpAoUZIMZUlZUkZlVJaWpWWiTJRlZVnppJNJMklWkBVkRVlRVpK3y8ryDllFVpUdXXVZXdaQnVxNWUvWlrVlHVlX1pP1ZX3ZQDaQDWVD2Ug2ko1lY9lEPiibygEwBB6WlyfTQo6ElnIUtJKtZRvZVr4Jj8v2cgx0kB1lJ/mkHAdjoYts75LlM7KrnATd5HNyMjwve8ip0FO+KHvJ3rKPfEn2lR1cP9lfzoABcqCcDYPkYDlEDpXzoK68PLF68nWZKkfKUfINuRTelGPkW3KsHCfHy7flBDlRTpKT5RQ5VabJd+Q0+a6cLt+TM+RMOUvOlulyjpwr35fz5Hy5QH4gF8oP5SK5WC6RS2WG/EhmymUyS34sl8tPZLZcIVfKVXK1XCPXynVyvdwgN8pNcrPcIrfKbXK7/FTukDvlLrlb7pF75T75mdwvP5cH5BcyR34pD8q/yEPyK3lYfi1z5TfyiPxWHpXfyWPye3lc/iBPyJPylPxRnpY/yTPyrDwnf5bn5S/ygrwoL0kvhQIllVJaBSqfyq9iVAEVq65RcepaVVBdpyLqehWvblCF1I2qsCqiiqpiKkEVVyWUUaisIhWqkqqUiqqbVGl1s0pUZVRZVU45VV4lqVtUBXWrqqhuU5XU7aqyukNVUVVVNVVd3alqqLtUTVVL1VZ3qzqqrqqn6qt7VAN1r2qo7lON1P2qsXpANVEPqqbqIdVMPayaq0dUC/WoaqkeU61Ua9VGtVXt1OOqvXpCdVAdVSf1pOqsnlJd1NMqWT2juqpnVTf1nOqunlc91Auqp3pR9VK9VR91UV1SXvVT/VWKGqAGqlfUIDVYDVFD1TD1qhquXlMj1OsqVY1Uo9QbarR6U41Rb6mxapwar95WE9RENUlNVlPUVJWm3lHT1LtqunpPzVAz1Sw1W6WrOWrI3yot+Bfy3/0n+SN+ffZtarv6VO1QO9UutVvtUXvVPrVP7Vf71QF1QOWoHHVQHVSH1CF1WB1WuSpXHVFH1FF1VB1Tx9RxdVydUCfVz+pHdVr9pM6os+qs+lmdV+fVhb/9DIQGLbXSWgc6n86vY3QBHauv0XH6Wl1QX6cj+nodr2/QhfSNurAuoovqYjpBF9cltNGorSYd6pK6lI7qm3RpfbNO1GV0WV1OO11eJ+lb/u38P+qvnW6n2+v2uoPuoDvpTrqz7qy76C46WSfrrrqr7qa76e66u+6he+ieuqfupXvpPrqP7qv76n66n07RKXqgfkUP0oP1ED1UD9Ov6uF6uB6hR+hUnapH6VF6tB6tx+gxeqweq8fr8XqCnqAn6Ul6ip6i03Sanqan6el6up6hZ+hZepZO1+l6rp6r5+l5eoFeoBfqhXqRXqSX6CU6Q2foTJ2ps3SWXq6X62y9Qq/Qq/QqvUav0ev0Or1Bb9Cb9Ca9RW/R2Xq73q536B16l96l9+g9ep/ep/fr/fqAPqBzdI4+qA/qQ/qQPqwP61ydq4/oI/qoPqqP6WP6uD6uT+gT+pQ+pU/r0/qMPqPP6XP6vD6vL+gL+pK+dPmyL5CBDHSgg3xBviAmiAlig9ggLogLCgYFg0gQCeKD+KBQcGNQOCgSFA2KBQlB8aBEYAIMbEBBGJQMSgXR4KagdHBzkBiUCcoG5QIXlA+SgluCCsGtQcXgtqBScHtQObgjqBJUDaoF1YM7gxrBXUHNoFZQO7g7qBPUDeoF9YN7ggbBvUHD4L6gUXB/0Dh4IGgSPBg0DR4KmgUPB82DR4IWwaNBy+CxoFXQOmgTtA3a/an1vT9T5AnXz/Q3KWaAGWheMYPMYDPEDDXDzKtmuHnNjDCvm1Qz0owyb5jR5k0zxrxlxppxZrx520wwE80kM9lMMVNNmnnHTDPvmunmPTPDzDSzzGyTbuaYueZ9M8/MNwvMB2ah+dAsMovNErPUZJiPTKZZZrLMx2a5+cRkmxVmpVllVps1Zq1ZZ9abDWaj2WQ2my1mq9lmtptPzQ6z0+wyu80es9fsM5+Z/eZzc8B8YXLMl+ag+Ys5ZL4yh83XJtd8Y46Yb81R8505Zr43x80P5oQ5aU6ZH81p85M5Y86ac+Znc978Yi6Yi+aS8Zcv7i+/vKNGjfkwH8ZgDMZiLMZhHBbEghjBCMZjPBbCQlgYC2NRLIoJmIAlsAReRkhYEktiFKNYGktjIiZiWSyLDh0mYRJWwApYEStiJayElbEyVsEqWA2r4Z14J96Fd2EtrIV3491YF+tifayPDbABNsSG2AgbYWNsjE2wCTbFptgMm2FzbI4tsAW2xJbYClthG2yD7bAdtsf22AE7YCfshJ2xM3bBLpiMydgVu2I37IbdsTv2wB7YE3tiL+yFfbAP9sW+2A/7YQqm4EAciINwEA7BITgMh+FwHI4jcASmYiqOwlE4GkfjGByDY3Ecjse3cQJOxEk4GafgVEzDNJyG03A6TscZOANn4SxMx3Sci3NxHs7DBbgAF+JCXISLcAkuwQzMwEzMxCzMwuW4HLMxG1fiSlyNq3EtrsX1uB434kbcjJtxK27F7bgdd+AO3IW7cA/uwX24D/fjfjyABzAHc/AgHsRDeAgP42HMxVw8gkfwKB7FY3gMj+NxPIEn8BSewtN4Gs/gGTyH5/A8/oIX8CJeQo8xVopYe42Ns9fagvY6G2ML2N/GRW0xm2CL2xLW2MK2yD/EaK1NtGVsWVvOOlveJtlbfhdXsVVtNVvd3mlr2Ltszd/FDey9tqG9zzay99v69p5/iBvbB2wT+6htah+zzWxr29y2tS3so7alfcy2sq1tG9vWdrZP2S72aZtsn7Fd7bO/izPtMrvebrAb7Sa7335uz9mf7VH7nT1vf7H9bH87zL5qh9vX7Aj7uk21I38Xj7dv2wl2op1kJ9spdurv4ll2tk23c+xc+76dZ+f/Ls6wH9mFNssusovtErv01/hyT1n2Y7vcfmKz7Qq70q6yq+0au9au+49eV9ktdqvdZvfZz+wOu9PusrvtHrv31/jyeRywX9gc+6U9Yr+1h+xX9rA9ZnPtN7/Gl8/vmP3eHrc/2BP2pD1lf7Sn7U/2jD376/lfPvcf7UV7yXorCEiSIk0B5aP8FEMFKJauoTi6lgrSdRSh6ymebqBCdCMVpiJUlIpRAhWnEmQIyRJRSCWpFEXpJipNN1MilaGyVI4clackuoUq0K1UkW6jSnQ7VaY7qApVpWpUne6kGnQX1aRaVJvupjpUl+pRfbqHGtC91JDuo0Z0PzWmB6gJPUhN6SFqRg9Tc3qEWtCj1JIeo1bUmtpQW2pHj1N7eoI6UEfqRE9SZ3qKutDTlEzPUFd6lrrRc9Sdnqce9AL1pBepF/WmPvQS9aWXqR/1pxQaQAPpFRpEg2kIDaVh9CoNp9doBL1OqTSSRtEbNJrepDH0Fo2lcTSe3qYJNJEm0WSaQlMpjd6hafQuTaf3aAbNpFk0m9JpDs2l92kezacF9AEtpA9pES2mJbSUMugjyqRllEUf03L6hLJpBa2kVbSa1tBaWkfraQNtpE20mbbQVtpG2+lT2kE7aRftpj20l/bRZ7SfPqcD9AXl0Jd0kP5Ch+grOkxfUy59Q0foWzpK39Ex+p6O0w90gk7SKfqRTtNPdIbO0jn6mc7TL3SBLtIl8iRCCGWoQh0GYb4wfxgTFghjw2vCuPDasGB4XRgJrw/jwxvCQuGNYeGwSFg0LBYmhMXDEqEJMbQhhWFYMiwVRsObwtLhzWFiWCYsG5YLXVg+TApvCSuEt4YVw9vCSuHtYeXwjrBKWDV89P7q4Z1hjfCusGZYK6wd3h3WCeuG9cL64T1hg/DesGF4X9govD+sGD4QNgkfDJuGD4XNwofD5uEjYYvw0bBl+FjYKmwdtgnbhu3Cx8P24RNhh7Bj2Cl8MuwcPhV2CZ8Ok8Nnwq7hs394PCUcEA4MXwlfCb2/Ty2JLo1mRD+KZkaXRbOiH0eXRz+JZkdXRFdGV0VXR9dE10bXRddHN0Q3RjdFN0e3RLdGt0W9r59fOHDSKadd4PK5/C7GFXCx7hoX5651Bd11LuKud/HuBlfI3egKuyKuqCvmElxxV8IZh846cqEr6Uq5qLvJlXY3u0RXxpV15Zxz5V2Sa+vauXauvXvCdXAdXSf3pHvSPeWeck+7p90zrqt71nVzz7nu7nnXw73gXnAvul6ut+vjXnJ93cuun+vvUlyKG+gGukFukBvihrhhbpgb7oa7EW6ES3WpbpQb5Ua70W6MG+PGurFuvBvvJrgJbpKb5Ka4KS7Npblpbpqb7qa7GW6Gm+VmuXSX7ua6uW6em+cWuAVuYeJCt8gtckvcEpfhMlymy3RZLsstd8tdtst2K91Kt9qtdmvdWrferXcb3Ua32W12W91Wt91tdzvcDrfL7XJ73B63z+1z+91+d8AdcDkuxx10B90hd8gddl+7XPeNO+K+dUfdd+6Y+94ddz+4E+6kO+V+dKfdT+6MO+vOuZ/defeLu+AuukvOu7TIO5FpkXcj0yPvRWZEZkZmRWZH0iNzInMj70fmReZHFkQ+iCyMfBhZFFkcWRJZGsmIfBTJjCyLZEU+jiyPfBLJjqyIrIysiqyOrIl4X3xH6Ev6Uj7qb/Kl/c0+0ZfxZX0573x5n+Rv8RX8rb6iv81X8rf7yv4OX8VX9dX8Y76Vb+3b+La+nX/ct/dP+A6+o+/kn/Sd/VO+i3/aJ/tnfFf/rO/mn/Pd/fO+h3/B9/Qv+l6+t+/jX/J9/cu+n+/vU/wAP9C/4gf5wX6IH+qH+Vf9cP+aH+Ff96l+pB/l3/Cj/Zt+jH/Lj/Xj/Hj/tp/gJ/pJfrKf4qf6NP+On+bf9dP9e36Gn+ln+dk+3c/xc/37fp6f7xf4D/xC/6Ff5Bf7JX6pz/Af+Uy/zGf5j/1y/4nP9iv8Sr/Kr/Zr/Fq/zq/3G/xGv8lv9lv8Vr/Nb/ef+h1+p9/ld/s9fq/f5z/z+/3n/oD/wuf4L/1B/xd/yH/lD/uvfa7/xh/x3/qj/jt/zH/vj/sf/Al/0p/yP/rT/id/xp/15/zP/rz/xV/wF/0l/p81xhhjjLF/ifqD4wP+yffk39ZlA4UQ1+4slvufa24u/Nf9YJnQOSKEeKZ/z4f/vurUSdn698dmKxGUWiyEiFzJzyeuxCtEJ/GUSBYdRYV/2t9g2fs8/b5+Sspv6kdvFyL2Nzkx4kp8pf6t/0X9x58cn1k5PBf/39RfLERiqSs5BcSV+Er9iv9F/SLt/6D/Al+lCdHhNzlx4kp8pX6SeEI8K5L/4ZGMMcYYY4wxxthfDZbVuv/R/fPl+/MEfSUnv7gS/9H9OWOMMcYYY4wxxq6+53v3efrx5OSO3XnDG97w5j82V/svE2OMMcYYY+zPduWi/2p3whhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5V3/Gx8ndrXPkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLva/l8AAAD//zG6PD0=") creat(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe8) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 571.530226ms ago: executing program 1 (id=1601): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) unshare(0x2c020400) 409.95264ms ago: executing program 2 (id=1602): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bridge0/bridge/multicast_querier_interval\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='10', 0x2) 399.11333ms ago: executing program 1 (id=1603): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000021, 0x0, 0x6}]}) 270.964103ms ago: executing program 2 (id=1604): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000003bc0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x4f) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000740)="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", 0x980}], 0x1, 0x0, 0x0, 0x59884}, 0x20000859) 181.953446ms ago: executing program 6 (id=1605): mkdir(&(0x7f0000000000)='./ms\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./ms\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./ms/fs/ocfs2/cluster_stack\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='user', 0x4) 121.912777ms ago: executing program 1 (id=1606): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 98.283988ms ago: executing program 2 (id=1607): io_setup(0x5, &(0x7f0000000000)=0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0xfffffff5, "421ae3753785259286be000000000000004fdc9312f200fd4f00", 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 13.93949ms ago: executing program 6 (id=1608): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x800}, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 0s ago: executing program 1 (id=1609): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x80, 0x8}, 0xc) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) kernel console output (not intermixed with test programs): 4201] attempt to access beyond end of device [ 96.738875][ T4201] loop4: rw=2049, want=45104, limit=40427 [ 96.920902][ T5268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.392'. [ 96.992320][ T453] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 97.784939][ T5277] loop0: detected capacity change from 0 to 32768 [ 97.885409][ T5277] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 97.988029][ T5293] loop4: detected capacity change from 0 to 32768 [ 98.021805][ T5293] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.389 (5293) [ 98.076940][ T5293] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 98.091770][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 98.121729][ T5293] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 98.178195][ T5293] BTRFS info (device loop4): use zstd compression, level 3 [ 98.218347][ T5293] BTRFS info (device loop4): using free space tree [ 98.240538][ T5293] BTRFS info (device loop4): has skinny extents [ 98.553853][ T5293] BTRFS info (device loop4): enabling ssd optimizations [ 98.630746][ T26] kauditd_printk_skb: 40 callbacks suppressed [ 98.630761][ T26] audit: type=1800 audit(1792153451.627:56): pid=5293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.389" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 98.777823][ T5359] netlink: 'syz.3.417': attribute type 11 has an invalid length. [ 98.883292][ T5364] loop1: detected capacity change from 0 to 64 [ 98.979086][ T5364] hfs: get root inode failed [ 99.295583][ T5384] netlink: 24 bytes leftover after parsing attributes in process `syz.1.426'. [ 99.320577][ T5340] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 99.331846][ T5340] netdevsim netdevsim2 netdevsim0: Failed to get key data for SA table [ 99.421587][ T4265] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.463290][ T5400] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 99.568819][ T5413] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 99.654408][ T5421] loop3: detected capacity change from 0 to 1024 [ 99.661679][ T4265] usb 1-1: Using ep0 maxpacket: 8 [ 99.786361][ T4265] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 99.826509][ T5430] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 99.851363][ T4265] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 99.869789][ T4265] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 99.900946][ T4265] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.941924][ T4265] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 99.959362][ T4265] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.974277][ T5435] loop2: detected capacity change from 0 to 256 [ 100.010532][ T5435] exfat: Deprecated parameter 'utf8' [ 100.037394][ T5435] exfat: Deprecated parameter 'utf8' [ 100.043531][ T5435] exfat: Deprecated parameter 'namecase' [ 100.051353][ T5435] exfat: Deprecated parameter 'namecase' [ 100.058103][ T5435] exfat: Deprecated parameter 'namecase' [ 100.099676][ T5435] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0xa30f3a9b, utbl_chksum : 0xe619d30d) [ 100.231772][ T4265] usb 1-1: GET_CAPABILITIES returned 0 [ 100.237348][ T4265] usbtmc 1-1:16.0: can't read capabilities [ 100.380079][ T26] audit: type=1807 audit(1792153453.377:57): action=measure uid>1000 res=1 [ 100.383383][ T5456] ima: policy update completed [ 100.405392][ T26] audit: type=1802 audit(1792153453.407:58): pid=5456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.1.449" res=1 errno=0 [ 100.453514][ T5460] loop3: detected capacity change from 0 to 512 [ 100.490402][ T4265] usb 1-1: USB disconnect, device number 3 [ 100.507109][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.551693][ T5460] EXT4-fs (loop3): 1 truncate cleaned up [ 100.557657][ T5460] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 100.830277][ T5475] loop3: detected capacity change from 0 to 512 [ 100.874905][ T5475] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 100.896938][ T5461] loop2: detected capacity change from 0 to 32768 [ 100.916659][ T5475] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.454: invalid indirect mapped block 1023410176 (level 0) [ 100.942522][ T13] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 100.956522][ T5475] EXT4-fs (loop3): Remounting filesystem read-only [ 100.966548][ T5475] EXT4-fs error (device loop3): mb_free_blocks:1889: group 0, inode 11: block 237:freeing already freed block (bit 236); block bitmap corrupt. [ 100.973672][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.992923][ T5475] EXT4-fs (loop3): Remounting filesystem read-only [ 101.000237][ T5475] EXT4-fs (loop3): 1 truncate cleaned up [ 101.006043][ T5475] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000007,jqfmt=vfsold,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 101.076617][ T13] usb 5-1: config 0 descriptor?? [ 101.086846][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 101.133796][ T5486] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2812: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 101.142884][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 101.159498][ T13] cp210x 5-1:0.0: cp210x converter detected [ 101.194935][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x3e6d instead [ 101.223321][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x0747 instead [ 101.313665][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 101.348737][ T5288] hid-generic 0005:16C0:05DF.0002: item fetching failed at offset 0/1 [ 101.368772][ T5288] hid-generic: probe of 0005:16C0:05DF.0002 failed with error -22 [ 101.381252][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 101.397690][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 101.408457][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 101.419652][ T5496] loop2: detected capacity change from 0 to 16 [ 101.428582][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 101.446855][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 101.458793][ T5475] jffs2: Further such events for this erase block will not be printed [ 101.472326][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 101.509571][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 101.530058][ T5499] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 101.557008][ T5496] erofs: (device loop2): mounted with root inode @ nid 36. [ 101.567090][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x3e6d instead [ 101.607246][ T13] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 101.621694][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x0747 instead [ 101.651633][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 101.690473][ T13] usb 5-1: cp210x converter now attached to ttyUSB0 [ 101.707845][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 101.732957][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 101.775215][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 101.807870][ T5507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'. [ 101.821965][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 101.855219][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 101.875927][ T5475] jffs2: Further such events for this erase block will not be printed [ 101.885385][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 101.897963][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 101.909108][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x3e6d instead [ 101.920235][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x0747 instead [ 101.931230][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 101.945727][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 101.956522][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x3e6d instead [ 101.967247][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x0747 instead [ 101.981131][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 101.993080][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 102.003843][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x3e6d instead [ 102.014644][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x0747 instead [ 102.025419][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 102.026647][ T13] usb 5-1: USB disconnect, device number 2 [ 102.036705][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 102.060006][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x3e6d instead [ 102.070856][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x0747 instead [ 102.086046][ T13] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 102.099602][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 102.116408][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 102.130904][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x3e6d instead [ 102.148164][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x0747 instead [ 102.173677][ T13] cp210x 5-1:0.0: device disconnected [ 102.180128][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 102.206344][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 102.229490][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x3e6d instead [ 102.254894][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x0747 instead [ 102.279141][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 102.300094][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 102.311045][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x3e6d instead [ 102.324680][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x0747 instead [ 102.345449][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 102.376716][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 102.404536][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x3e6d instead [ 102.422383][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x0747 instead [ 102.436092][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 102.447020][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 102.457874][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x3e6d instead [ 102.468751][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x0747 instead [ 102.479636][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 102.491875][ T5515] loop2: detected capacity change from 0 to 22 [ 102.516328][ T5502] loop0: detected capacity change from 0 to 32768 [ 102.531720][ T5515] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 102.541791][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 102.556800][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x3e6d instead [ 102.572640][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x0747 instead [ 102.591837][ T5515] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 102.596629][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 102.677314][ T5502] JBD2: Ignoring recovery information on journal [ 102.712461][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 102.725551][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x3e6d instead [ 102.743789][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x0747 instead [ 102.758084][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 102.771240][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 102.782115][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x3e6d instead [ 102.792836][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x0747 instead [ 102.803613][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 102.817643][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 102.828408][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x3e6d instead [ 102.839140][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x0747 instead [ 102.857416][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 102.873939][ T5502] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 102.892527][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 102.924142][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x3e6d instead [ 102.959733][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x0747 instead [ 102.988299][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 103.007250][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 103.053854][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x3e6d instead [ 103.089335][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x0747 instead [ 103.113625][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 103.131989][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 103.149588][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x3e6d instead [ 103.169873][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x0747 instead [ 103.184948][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 103.215286][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 103.239285][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 103.285193][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x3e6d instead [ 103.301587][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x0747 instead [ 103.313749][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 103.326865][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 103.337872][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x3e6d instead [ 103.363904][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x0747 instead [ 103.405427][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 103.424983][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 103.445961][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x3e6d instead [ 103.467057][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x0747 instead [ 103.497303][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 103.537164][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 103.560996][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x3e6d instead [ 103.577229][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x0747 instead [ 103.588271][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 103.606157][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 103.619692][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x3e6d instead [ 103.638024][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x0747 instead [ 103.655513][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 103.694397][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 103.756411][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x3e6d instead [ 103.807691][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x0747 instead [ 103.831262][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 103.856233][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 103.890678][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x3e6d instead [ 103.920732][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x0747 instead [ 103.970789][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 103.977532][ T5532] loop2: detected capacity change from 0 to 32768 [ 104.012617][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 104.039285][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x3e6d instead [ 104.061500][ T5553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'. [ 104.079467][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x0747 instead [ 104.094316][ T5553] device erspan0 entered promiscuous mode [ 104.122426][ T5532] XFS (loop2): Mounting V5 Filesystem [ 104.161600][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 104.172588][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 104.198763][ T5551] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 104.204990][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x3e6d instead [ 104.220218][ T5551] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 104.228598][ T5551] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 104.237902][ T5551] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 104.249371][ T5551] page dumped because: unmovable page [ 104.255739][ T5551] page_owner info is not present (never set?) [ 104.275112][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x0747 instead [ 104.299793][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 104.319489][ T5532] XFS (loop2): Ending clean mount [ 104.340988][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 104.359771][ T5566] program syz.0.496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.372220][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x3e6d instead [ 104.382870][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x0747 instead [ 104.394015][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 104.404953][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 104.428526][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x3e6d instead [ 104.466836][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x0747 instead [ 104.499466][ T5568] loop1: detected capacity change from 0 to 1024 [ 104.525459][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 104.547242][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 104.613094][ T5568] hfsplus: invalid length 32517 has been corrected to 255 [ 104.636189][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x3e6d instead [ 104.656649][ T4190] XFS (loop2): Unmounting Filesystem [ 104.672419][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x0747 instead [ 104.749325][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 104.785646][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 104.808487][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x3e6d instead [ 104.836871][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x0747 instead [ 104.858011][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 104.883721][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 104.896845][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x3e6d instead [ 104.909032][ T5475] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x0747 instead [ 104.919825][ T5475] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 104.929220][ T5475] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 104.956976][ T4312] hfsplus: b-tree write err: -5, ino 4 [ 105.000886][ T4312] hfsplus: b-tree write err: -5, ino 2 [ 105.171185][ T5590] loop1: detected capacity change from 0 to 1024 [ 105.268386][ T5601] loop2: detected capacity change from 0 to 128 [ 105.290114][ T5598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.501'. [ 105.295550][ T5601] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 105.330865][ T5590] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.348565][ T5601] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 105.374567][ T5590] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.389656][ T5605] netlink: 'syz.3.502': attribute type 29 has an invalid length. [ 105.398150][ T5605] netlink: 'syz.3.502': attribute type 29 has an invalid length. [ 105.409292][ T5605] netlink: 'syz.3.502': attribute type 29 has an invalid length. [ 105.417282][ T5602] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 105.434146][ T5605] netlink: 'syz.3.502': attribute type 29 has an invalid length. [ 105.443897][ T5606] loop4: detected capacity change from 0 to 256 [ 105.540031][ T5609] mmap: syz.0.505 (5609) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 105.600418][ T5612] loop3: detected capacity change from 0 to 1024 [ 105.631482][ T1279] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 105.697435][ T5616] loop4: detected capacity change from 0 to 1024 [ 105.708854][ T5616] EXT4-fs (loop4): Ignoring removed oldalloc option [ 105.773592][ T5612] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.801001][ T5612] overlayfs: missing 'lowerdir' [ 105.817512][ T5623] loop2: detected capacity change from 0 to 256 [ 105.862439][ T5623] exfat: Deprecated parameter 'utf8' [ 105.878537][ T5623] exfat: Deprecated parameter 'utf8' [ 105.888197][ T5616] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000600006,nodelalloc,quota,oldalloc,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,min_batch_time=0x0000000000000005,errors=remount-ro,. Quota mode: writeback. [ 105.945149][ T5616] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 167772185 free clusters [ 105.961458][ T5416] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 105.974824][ T5616] EXT4-fs (loop4): Remounting filesystem read-only [ 106.005042][ T5623] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 106.122096][ T5632] MPTCP: kernel_bind error, err=-99 [ 106.259988][ T5640] netlink: 116 bytes leftover after parsing attributes in process `syz.2.516'. [ 106.321700][ T5416] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 106.344958][ T5416] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 106.361467][ T5416] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.405863][ T5416] usb 1-1: config 0 descriptor?? [ 106.411648][ T13] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.678589][ T5664] netlink: 'syz.2.528': attribute type 10 has an invalid length. [ 106.698106][ T5664] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.707525][ T5664] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.756524][ T5664] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.763885][ T5664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.772818][ T5664] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.779995][ T5664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.816563][ T5664] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 106.830091][ T5667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.528'. [ 106.839856][ T13] usb 2-1: config 1 has an invalid interface number: 248 but max is 1 [ 106.848307][ T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.859307][ T13] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 106.869346][ T5667] device bridge_slave_1 left promiscuous mode [ 106.880420][ T13] usb 2-1: config 1 has no interface number 2 [ 106.888726][ T5667] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.896494][ T13] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 106.909489][ T13] usb 2-1: config 1 interface 248 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 106.923258][ T13] usb 2-1: config 1 interface 248 has no altsetting 0 [ 106.926173][ T5416] logitech 0003:046D:C24F.0003: unbalanced delimiter at end of report description [ 106.953289][ T5416] logitech 0003:046D:C24F.0003: parse failed [ 106.959410][ T5416] logitech: probe of 0003:046D:C24F.0003 failed with error -22 [ 106.983274][ T5667] device bridge_slave_0 left promiscuous mode [ 106.991720][ T5667] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.048492][ T5667] bond0: (slave bridge0): Releasing backup interface [ 107.105789][ T13] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 107.121209][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.134734][ T5676] program syz.4.532 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.144088][ T13] usb 2-1: Product: syz [ 107.144112][ T13] usb 2-1: Manufacturer: syz [ 107.144136][ T13] usb 2-1: SerialNumber: syz [ 107.170106][ T5416] usb 1-1: USB disconnect, device number 4 [ 107.206769][ T13] usb 2-1: selecting invalid altsetting 1 [ 107.280644][ T5683] netlink: 'syz.4.535': attribute type 11 has an invalid length. [ 107.329313][ T5685] netlink: 'syz.2.536': attribute type 1 has an invalid length. [ 107.337670][ T5685] netlink: 100 bytes leftover after parsing attributes in process `syz.2.536'. [ 107.347553][ T5685] nbd: illegal input index -1 [ 107.464240][ T5691] loop2: detected capacity change from 0 to 128 [ 107.518971][ T5691] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 107.571198][ T5691] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.632798][ T13] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 107.638983][ T13] cdc_ncm 2-1:1.0: bind() failure [ 107.657748][ T13] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 107.681067][ T13] cdc_ncm 2-1:1.1: bind() failure [ 107.950814][ T13] usb 2-1: USB disconnect, device number 3 [ 108.041627][ T5416] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 108.108512][ T5717] loop4: detected capacity change from 0 to 32768 [ 108.141568][ T5418] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 108.208619][ T5717] XFS (loop4): Mounting V5 Filesystem [ 108.249635][ T5717] XFS (loop4): Ending clean mount [ 108.276016][ T5717] XFS (loop4): Quotacheck needed: Please wait. [ 108.281697][ T5416] usb 1-1: Using ep0 maxpacket: 16 [ 108.359178][ T5717] XFS (loop4): Quotacheck: Done. [ 108.403941][ T5416] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 108.415624][ T4201] XFS (loop4): Unmounting Filesystem [ 108.501845][ T5418] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.581756][ T5416] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 108.591008][ T5416] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.599668][ T5416] usb 1-1: Product: syz [ 108.604207][ T5416] usb 1-1: Manufacturer: syz [ 108.608846][ T5416] usb 1-1: SerialNumber: syz [ 108.616051][ T5416] usb 1-1: config 0 descriptor?? [ 108.631881][ T5418] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 108.656920][ T5416] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 108.668856][ T5418] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 108.692102][ T5418] usb 4-1: Product: syz [ 108.697853][ T5416] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 108.709458][ T5418] usb 4-1: Manufacturer: syz [ 108.776595][ T5418] usb 4-1: selecting invalid altsetting 1 [ 108.795750][ T5418] dvb_ttusb_budget: ttusb_init_controller: error [ 108.803661][ T5736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.554'. [ 108.813881][ T5418] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 108.867412][ T5738] bonding: duÒ&B. is being created... [ 108.954252][ T5418] DVB: Unable to find symbol cx22700_attach() [ 108.978714][ T5715] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 109.077120][ T5418] DVB: Unable to find symbol tda10046_attach() [ 109.092642][ T5418] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 109.150299][ T5418] usb 4-1: USB disconnect, device number 3 [ 109.219364][ T5743] loop4: detected capacity change from 0 to 32768 [ 109.289799][ T5743] JBD2: Ignoring recovery information on journal [ 109.292724][ T5416] em28xx 1-1:0.0: chip ID is em2750 [ 109.367367][ T5743] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 109.431168][ T5743] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (3298534883402, expected 74) [ 109.452463][ T5743] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 109.462432][ T5743] OCFS2: File system is now read-only. [ 109.468546][ T5743] (syz.4.559,5743,0):ocfs2_search_chain:1783 ERROR: status = -30 [ 109.476373][ T5743] (syz.4.559,5743,0):ocfs2_search_chain:1893 ERROR: status = -30 [ 109.484174][ T5743] (syz.4.559,5743,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 109.492712][ T5743] (syz.4.559,5743,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 109.501087][ T5743] (syz.4.559,5743,0):ocfs2_claim_new_inode:2248 ERROR: status = -30 [ 109.509242][ T5743] (syz.4.559,5743,0):ocfs2_claim_new_inode:2263 ERROR: status = -30 [ 109.517328][ T5743] (syz.4.559,5743,0):ocfs2_mknod_locked:641 ERROR: status = -30 [ 109.525104][ T5743] (syz.4.559,5743,0):ocfs2_symlink:1943 ERROR: status = -30 [ 109.535557][ T5743] (syz.4.559,5743,0):ocfs2_symlink:2067 ERROR: status = -30 [ 109.611978][ T4201] ocfs2: Unmounting device (7,4) on (node local) [ 109.655035][ T5416] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 109.681973][ T5416] em28xx 1-1:0.0: board has no eeprom [ 109.709974][ T5749] netlink: 72 bytes leftover after parsing attributes in process `syz.3.561'. [ 109.733489][ T5749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.561'. [ 109.828947][ T5416] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 109.829773][ T5734] loop1: detected capacity change from 0 to 65536 [ 109.858416][ T5416] em28xx 1-1:0.0: dvb set to bulk mode. [ 109.939146][ T5416] usb 1-1: USB disconnect, device number 5 [ 109.950926][ T5734] XFS (loop1): Mounting V5 Filesystem [ 109.956352][ T5761] netlink: 'syz.3.565': attribute type 15 has an invalid length. [ 109.967706][ T5416] em28xx 1-1:0.0: Disconnecting em28xx [ 109.976862][ T5409] em28xx 1-1:0.0: Binding DVB extension [ 109.988946][ T5761] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 31488 - 0 [ 109.998572][ T5761] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 31488 - 0 [ 110.007512][ T5761] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 31488 - 0 [ 110.016433][ T5761] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 31488 - 0 [ 110.127547][ T5761] device vxlan0 entered promiscuous mode [ 110.175001][ T5734] XFS (loop1): Ending clean mount [ 110.186433][ T5409] em28xx 1-1:0.0: Registering input extension [ 110.208079][ T5416] em28xx 1-1:0.0: Closing input extension [ 110.253276][ T5416] em28xx 1-1:0.0: Freeing device [ 110.289356][ T5734] XFS (loop1): Quotacheck needed: Please wait. [ 110.378830][ T5782] genirq: Flags mismatch irq 1. 00000000 (comedi_parport) vs. 00000080 (i8042) [ 110.426031][ T5734] XFS (loop1): Quotacheck: Done. [ 110.499474][ T5786] capability: warning: `syz.0.573' uses 32-bit capabilities (legacy support in use) [ 110.523615][ T4195] XFS (loop1): Unmounting Filesystem [ 110.599992][ T5789] netlink: 48 bytes leftover after parsing attributes in process `syz.4.574'. [ 110.622895][ T5791] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 110.672414][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.679912][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.692896][ T26] audit: type=1400 audit(1792153463.697:59): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=5792 comm="syz.0.577" name="p" offset=69 [ 110.713025][ C0] vkms_vblank_simulate: vblank timer overrun [ 110.956714][ T5795] loop4: detected capacity change from 0 to 8192 [ 111.000831][ T5795] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 111.216803][ T5806] loop3: detected capacity change from 0 to 1024 [ 111.302027][ T5805] loop4: detected capacity change from 0 to 2048 [ 111.346619][ T5777] loop2: detected capacity change from 0 to 32768 [ 111.415322][ T5807] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.490132][ T5805] NILFS error (device loop4): nilfs_readdir: zero-length directory entry [ 111.565228][ T5805] Remounting filesystem read-only [ 111.838252][ T5820] loop1: detected capacity change from 0 to 512 [ 111.949195][ T5820] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 112.060699][ T5820] EXT4-fs (loop1): 1 truncate cleaned up [ 112.076087][ T5820] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,noquota,,errors=continue. Quota mode: none. [ 112.387757][ T5839] loop1: detected capacity change from 0 to 256 [ 112.522226][ T5845] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 112.554855][ T5845] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 112.593806][ T5845] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 112.600359][ T5845] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 112.670678][ T5845] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 112.740100][ T5845] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 112.817041][ T5845] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 112.875331][ T5845] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 112.915312][ T5862] tipc: Started in network mode [ 112.927349][ T5845] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 112.944308][ T5863] loop4: detected capacity change from 0 to 512 [ 112.951251][ T5862] tipc: Node identity ac14140f, cluster identity 4711 [ 112.992565][ T5862] tipc: New replicast peer: 255.255.255.255 [ 113.001711][ T5845] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 113.033575][ T5845] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 113.068111][ T5862] tipc: Enabled bearer , priority 10 [ 113.100807][ T5828] loop3: detected capacity change from 0 to 40427 [ 113.116954][ T5828] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 113.149605][ T5828] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 113.209951][ T5828] F2FS-fs (loop3): invalid crc value [ 113.281500][ T5828] F2FS-fs (loop3): Found nat_bits in checkpoint [ 113.350916][ T5875] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 113.451556][ T5828] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 113.466097][ T5828] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 113.864656][ T1111] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 114.064852][ T5288] tipc: Node number set to 2886997007 [ 114.241747][ T1111] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 114.277251][ T1111] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 114.300344][ T1111] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 114.324436][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.365363][ T5889] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 114.472948][ T5891] set_capacity_and_notify: 1 callbacks suppressed [ 114.472965][ T5891] loop0: detected capacity change from 0 to 32768 [ 114.734162][ T1111] usb 2-1: USB disconnect, device number 4 [ 114.760102][ T5891] XFS (loop0): Mounting V5 Filesystem [ 114.973188][ T5891] XFS (loop0): Ending clean mount [ 114.987178][ T5928] input: syz1 as /devices/virtual/input/input7 [ 115.016510][ T5891] XFS (loop0): Quotacheck needed: Please wait. [ 115.196385][ T5891] XFS (loop0): Quotacheck: Done. [ 115.411998][ T4186] XFS (loop0): Unmounting Filesystem [ 115.716809][ T5967] loop3: detected capacity change from 0 to 64 [ 115.837986][ T5969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.645'. [ 115.855639][ T5971] loop4: detected capacity change from 0 to 512 [ 116.118582][ T5971] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #15: comm syz.4.646: iget: bad i_size value: 38620345925642 [ 116.264924][ T5971] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.646: couldn't read orphan inode 15 (err -117) [ 116.311507][ T5971] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,grpjquota=,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 116.351576][ T5288] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 116.472325][ T453] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm kworker/u4:3: bg 0: block 5: invalid block bitmap [ 116.524073][ T453] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 131075 with max blocks 1 with error 28 [ 116.570953][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.638'. [ 116.592687][ T453] EXT4-fs (loop4): This should not happen!! Data will be lost [ 116.592687][ T453] [ 116.644135][ T453] EXT4-fs (loop4): Total free blocks count 0 [ 116.650208][ T453] EXT4-fs (loop4): Free/Dirty block details [ 116.681672][ T453] EXT4-fs (loop4): free_blocks=0 [ 116.686744][ T453] EXT4-fs (loop4): dirty_blocks=1 [ 116.701017][ T453] EXT4-fs (loop4): Block reservation details [ 116.707203][ T453] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 116.957309][ T5288] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 116.976790][ T5288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.004383][ T5288] usb 2-1: Product: syz [ 117.008611][ T5288] usb 2-1: Manufacturer: syz [ 117.021522][ T5288] usb 2-1: SerialNumber: syz [ 117.030640][ T5986] loop3: detected capacity change from 0 to 32768 [ 117.049408][ T5288] usb 2-1: config 0 descriptor?? [ 117.177543][ T6001] loop0: detected capacity change from 0 to 1024 [ 117.190674][ T5986] XFS (loop3): Mounting V5 Filesystem [ 117.251007][ T5993] loop2: detected capacity change from 0 to 32768 [ 117.308645][ T5993] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.656 (5993) [ 117.343782][ T5288] usb 2-1: USB disconnect, device number 5 [ 117.357919][ T5993] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 117.435955][ T5993] BTRFS info (device loop2): using free space tree [ 117.463044][ T5986] XFS (loop3): Ending clean mount [ 117.473554][ T5993] BTRFS info (device loop2): has skinny extents [ 117.489887][ T5986] XFS (loop3): Quotacheck needed: Please wait. [ 117.745083][ T5986] XFS (loop3): Quotacheck: Done. [ 117.820972][ T5993] BTRFS info (device loop2): enabling ssd optimizations [ 118.160991][ T4192] XFS (loop3): Unmounting Filesystem [ 118.515329][ T6051] block nbd0: server does not support multiple connections per device. [ 118.578645][ T6051] block nbd0: shutting down sockets [ 118.931455][ T6061] loop3: detected capacity change from 0 to 512 [ 118.956628][ T6064] ip_tables: iptables: counters copy to user failed while replacing table [ 119.050833][ T6061] FAT-fs (loop3): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿ01777777777777777777777" or missing value [ 119.326091][ T6073] loop2: detected capacity change from 0 to 512 [ 119.351750][ T5304] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 119.376953][ T6073] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 119.404577][ T6046] loop0: detected capacity change from 0 to 32768 [ 119.494057][ T6046] XFS (loop0): Mounting V5 Filesystem [ 119.721692][ T5304] usb 4-1: not running at top speed; connect to a high speed hub [ 119.741518][ T6046] XFS (loop0): Ending clean mount [ 119.750006][ T6046] XFS (loop0): Quotacheck needed: Please wait. [ 119.865448][ T6046] XFS (loop0): Quotacheck: Done. [ 119.956011][ T6095] loop4: detected capacity change from 0 to 512 [ 120.023344][ T5304] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 120.046264][ T4186] XFS (loop0): Unmounting Filesystem [ 120.063500][ T6095] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,grpjquota=,sysvgroups,grpjquota=,. Quota mode: writeback. [ 120.085187][ T5304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.093626][ T5304] usb 4-1: Product: syz [ 120.098027][ T6095] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.132120][ T5304] usb 4-1: Manufacturer: syz [ 120.136806][ T5304] usb 4-1: SerialNumber: syz [ 120.226215][ T5304] keyspan 4-1:1.0: Keyspan 4 port adapter converter detected [ 120.259514][ T6104] netlink: 16 bytes leftover after parsing attributes in process `syz.2.688'. [ 120.304404][ T5304] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 120.349978][ T5304] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 120.392231][ T5304] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 120.442847][ C0] usb 4-1: malformed indat packet [ 120.458039][ T5304] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 120.467995][ C0] usb 4-1: malformed indat packet [ 120.491654][ C0] usb 4-1: malformed indat packet [ 120.512407][ C0] usb 4-1: malformed indat packet [ 120.542226][ C0] usb 4-1: malformed indat packet [ 120.562702][ C0] usb 4-1: malformed indat packet [ 120.583313][ C0] usb 4-1: malformed indat packet [ 120.601543][ C0] usb 4-1: malformed indat packet [ 120.741769][ T4264] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 120.779138][ T6108] loop2: detected capacity change from 0 to 4096 [ 120.822742][ T6108] ntfs3: loop2: ino=3, Correct links count -> 2. [ 120.847946][ T5304] usb 4-1: USB disconnect, device number 4 [ 120.876796][ T5304] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 120.922119][ T5304] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 120.980941][ T5304] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 121.011859][ T4264] usb 5-1: Using ep0 maxpacket: 32 [ 121.047301][ T5304] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 121.084656][ T5304] keyspan 4-1:1.0: device disconnected [ 121.153189][ T4264] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.171447][ T4264] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 121.201641][ T4264] usb 5-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 121.221467][ T4264] usb 5-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 121.236388][ T6114] loop1: detected capacity change from 0 to 512 [ 121.252733][ T4264] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 121.269472][ T4264] usb 5-1: config 1 interface 1 has no altsetting 0 [ 121.330117][ T6114] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.691: missing EA_INODE flag [ 121.354332][ T6114] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.691: error while reading EA inode 2 err=-117 [ 121.414848][ T6114] EXT4-fs (loop1): 1 orphan inode deleted [ 121.420697][ T6114] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 121.511777][ T4264] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 121.531130][ T4264] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.571074][ T4264] usb 5-1: Product: syz [ 121.597103][ T4264] usb 5-1: Manufacturer: syz [ 121.607253][ T4264] usb 5-1: SerialNumber: syz [ 121.820961][ T6110] loop0: detected capacity change from 0 to 32768 [ 121.908685][ T4264] usb 5-1: selecting invalid altsetting 0 [ 121.950412][ T6110] XFS (loop0): Mounting V5 Filesystem [ 121.995376][ T26] audit: type=1326 audit(1792153474.997:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6143 comm="syz.2.700" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd184abc559 code=0x7ffc0000 [ 122.091006][ T26] audit: type=1326 audit(1792153475.047:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6143 comm="syz.2.700" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd184abc559 code=0x7ffc0000 [ 122.121867][ T4264] usb 5-1: 1:1: cannot get freq (v2/v3): err -32 [ 122.149425][ T6110] XFS (loop0): Ending clean mount [ 122.166890][ T6146] netlink: 'syz.2.701': attribute type 6 has an invalid length. [ 122.186904][ T26] audit: type=1326 audit(1792153475.047:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6143 comm="syz.2.700" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd184abc559 code=0x7ffc0000 [ 122.286652][ T26] audit: type=1326 audit(1792153475.047:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6143 comm="syz.2.700" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd184abc559 code=0x7ffc0000 [ 122.329005][ T4186] XFS (loop0): Unmounting Filesystem [ 122.350481][ T26] audit: type=1326 audit(1792153475.047:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6143 comm="syz.2.700" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd184a7cd8e code=0x7ffc0000 [ 122.401708][ T4264] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 122.446986][ T26] audit: type=1326 audit(1792153475.047:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6143 comm="syz.2.700" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd184abc559 code=0x7ffc0000 [ 122.507740][ T6131] loop3: detected capacity change from 0 to 32768 [ 122.520307][ T26] audit: type=1326 audit(1792153475.047:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6143 comm="syz.2.700" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd184abc559 code=0x7ffc0000 [ 122.550807][ T26] audit: type=1326 audit(1792153475.047:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6143 comm="syz.2.700" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd184abc559 code=0x7ffc0000 [ 122.580076][ T4264] usb 5-1: USB disconnect, device number 3 [ 122.606933][ T26] audit: type=1326 audit(1792153475.047:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6143 comm="syz.2.700" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd184abc559 code=0x7ffc0000 [ 122.640783][ T26] audit: type=1326 audit(1792153475.047:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6143 comm="syz.2.700" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd184abc559 code=0x7ffc0000 [ 122.921591][ T6131] ea_get: invalid extended attribute [ 122.927577][ T6131] ffff88805fc15000: f0 f1 7c 63 10 00 00 00 00 10 00 00 07 00 00 00 ..|c............ [ 122.951002][ T6131] ffff88805fc15010: 04 00 00 00 2c 07 ....,. [ 123.096151][ T5906] udevd[5906]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.315522][ T6172] loop4: detected capacity change from 0 to 512 [ 123.350101][ T6172] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 123.440241][ T6152] loop2: detected capacity change from 0 to 32768 [ 123.450598][ T6172] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.713: invalid indirect mapped block 9 (level 0) [ 123.558913][ T6152] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 123.565466][ T6172] EXT4-fs (loop4): 1 truncate cleaned up [ 123.608138][ T4190] ocfs2: Unmounting device (7,2) on (node local) [ 123.631735][ T6172] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: none. [ 123.749000][ T6196] loop1: detected capacity change from 0 to 256 [ 124.135858][ T6210] netlink: 24 bytes leftover after parsing attributes in process `syz.2.730'. [ 124.296949][ T5304] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 124.381201][ T6223] loop0: detected capacity change from 0 to 1024 [ 124.490463][ T6192] loop3: detected capacity change from 0 to 32768 [ 124.540418][ T6227] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 124.562328][ T6192] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 124.581627][ T5304] usb 5-1: Using ep0 maxpacket: 8 [ 124.588977][ T6192] JBD2: Ignoring recovery information on journal [ 124.772406][ T6235] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 124.964221][ T6192] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 125.005780][ T6240] rose0: tun_chr_ioctl cmd 1074025672 [ 125.011370][ T6240] rose0: ignored: set checksum enabled [ 125.119562][ T4192] ocfs2: Unmounting device (7,3) on (node local) [ 125.545215][ T6233] loop1: detected capacity change from 0 to 131072 [ 125.570476][ T5304] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 125.581788][ T5304] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 125.592562][ T5304] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 125.603505][ T5304] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.617853][ T5304] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 125.636301][ T5304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.692112][ T6233] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 125.698911][ T6233] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 125.720779][ T6233] F2FS-fs (loop1): invalid crc value [ 125.763683][ T6233] F2FS-fs (loop1): Found nat_bits in checkpoint [ 125.827839][ T6233] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 125.835084][ T6233] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 125.932519][ T5304] usb 5-1: GET_CAPABILITIES returned 0 [ 125.941350][ T5304] usbtmc 5-1:16.0: can't read capabilities [ 125.961493][ T4262] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 126.185923][ T4264] usb 5-1: USB disconnect, device number 4 [ 126.304886][ T6278] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.760'. [ 126.368889][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.762'. [ 126.401758][ T4262] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 126.415967][ T4262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.438825][ T4262] usb 3-1: config 0 descriptor?? [ 126.502842][ T4262] cp210x 3-1:0.0: cp210x converter detected [ 126.686226][ T6297] loop1: detected capacity change from 0 to 22 [ 126.762413][ T6297] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 126.781507][ T6297] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 126.931925][ T4262] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 127.008506][ T4262] usb 3-1: cp210x converter now attached to ttyUSB0 [ 127.155397][ T6302] loop0: detected capacity change from 0 to 8192 [ 127.231144][ T6302] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 127.244653][ T4262] usb 3-1: USB disconnect, device number 3 [ 127.270931][ T4262] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 127.308676][ T6302] REISERFS (device loop0): using ordered data mode [ 127.328730][ T6302] reiserfs: using flush barriers [ 127.355032][ T4262] cp210x 3-1:0.0: device disconnected [ 127.360712][ T6302] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 127.441016][ T6302] REISERFS (device loop0): checking transaction log (loop0) [ 127.730999][ T6302] REISERFS (device loop0): Using tea hash to sort names [ 127.754055][ T6302] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 128.124950][ T6361] loop4: detected capacity change from 0 to 512 [ 128.246141][ T6361] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 128.289066][ T6361] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.328512][ T6361] EXT4-fs (loop4): shut down requested (0) [ 128.397319][ T6365] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 31488 - 0 [ 128.428173][ T6365] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.469805][ T6379] device-mapper: ioctl: name not supplied when creating device [ 128.500641][ T6377] netlink: 'syz.0.798': attribute type 10 has an invalid length. [ 128.522153][ T6377] device syz_tun entered promiscuous mode [ 128.582477][ T6377] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 128.658358][ T6384] loop3: detected capacity change from 0 to 8 [ 128.690700][ T6387] loop4: detected capacity change from 0 to 512 [ 128.727282][ T6387] EXT4-fs (loop4): inline encryption not supported [ 128.755486][ T6387] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.807: inode #1: comm syz.4.807: iget: illegal inode # [ 128.852362][ T6384] SQUASHFS error: Unable to read inode 0xa7 [ 128.897096][ T6387] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.807: error while reading EA inode 1 err=-117 [ 128.943110][ T6387] EXT4-fs (loop4): 1 orphan inode deleted [ 129.009563][ T6387] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,grpjquota=,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,inlinecrypt,,errors=continue. Quota mode: none. [ 129.192234][ T6412] EXT4-fs error (device loop4): ext4_lookup:1864: inode #2: comm syz.4.807: deleted inode referenced: 15 [ 129.335180][ T6418] i2c i2c-0: new_device: Instantiated device isp1301 at 0x02 [ 129.395836][ T5409] hid-generic 0005:0C45:0008.0004: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 129.461033][ T6424] loop1: detected capacity change from 0 to 512 [ 129.585848][ T6424] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 129.656946][ T6424] EXT4-fs (loop1): 1 truncate cleaned up [ 129.677509][ T6433] loop3: detected capacity change from 0 to 2048 [ 129.689545][ T6424] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodioread_nolock,nolazytime,,errors=continue. Quota mode: none. [ 129.789043][ T6433] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 129.814394][ T6433] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.936105][ T6433] overlayfs: upper fs needs to support d_type. [ 129.966935][ T6433] overlayfs: cleanup of 'work/#1' failed (-2) [ 129.984195][ T6433] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 130.000440][ T6433] overlayfs: failed to set xattr on upper [ 130.047049][ T6433] overlayfs: ...falling back to index=off,metacopy=off. [ 130.229156][ T4192] UDF-fs: error (device loop3): udf_read_inode: (ino 1347) failed !bh [ 130.265913][ T4192] UDF-fs: error (device loop3): udf_read_inode: (ino 1347) failed !bh [ 130.348864][ T6453] loop0: detected capacity change from 0 to 4096 [ 130.371001][ T6460] loop4: detected capacity change from 0 to 512 [ 130.448151][ T6453] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 130.545875][ T6460] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 130.632871][ T6470] loop1: detected capacity change from 0 to 256 [ 130.740391][ T6470] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 131.156528][ T6453] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 131.189418][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0 [ 131.234295][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.300444][ T6492] input: syz1 as /devices/virtual/input/input8 [ 131.336351][ T6493] loop1: detected capacity change from 0 to 512 [ 131.494679][ T1284] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 131.522600][ T4186] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 131.529417][ T4186] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 131.562049][ T4186] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 131.602692][ T154] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 131.609365][ T4186] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 131.626574][ T4186] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 131.717494][ T6503] loop1: detected capacity change from 0 to 512 [ 131.839520][ T6503] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 131.886548][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0 [ 131.915826][ T6503] System zones: 1-12 [ 131.952360][ T6503] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.848: missing EA_INODE flag [ 131.970068][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.998380][ T6513] loop4: detected capacity change from 0 to 2048 [ 132.033656][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 31488 - 0 [ 132.060774][ T6503] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.848: error while reading EA inode 12 err=-117 [ 132.061248][ T6517] loop0: detected capacity change from 0 to 1024 [ 132.077627][ T6503] EXT4-fs (loop1): 1 orphan inode deleted [ 132.096713][ T6513] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 132.120752][ T6503] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 132.121894][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.152685][ T6513] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.191718][ T6517] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 132.207357][ T6520] block2mtd: too many arguments [ 132.264180][ T6510] rxe_eth0 speed is unknown, defaulting to 1000 [ 132.276559][ T6503] fscrypt (loop1, inode 15): Direct key flag not allowed with different contents and filenames modes [ 132.300601][ T6517] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,dioread_nolock,nombcache,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,init_itable,nogrpid,nodelalloc,grpjquota=,,errors=continue. Quota mode: none. [ 132.664715][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.671114][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.698975][ T6539] ip_tables: iptables: counters copy to user failed while replacing table [ 132.783116][ T6541] netlink: 'syz.0.858': attribute type 1 has an invalid length. [ 132.820230][ T6541] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 132.834688][ T6541] IPv6: NLM_F_CREATE should be set when creating new route [ 132.842014][ T6541] IPv6: NLM_F_CREATE should be set when creating new route [ 132.886430][ T6548] loop4: detected capacity change from 0 to 64 [ 133.495261][ T6510] chnl_net:caif_netlink_parms(): no params data found [ 133.854731][ T6510] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.862036][ T6510] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.870606][ T6510] device bridge_slave_0 entered promiscuous mode [ 133.911867][ T6510] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.919019][ T6510] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.928757][ T6510] device bridge_slave_1 entered promiscuous mode [ 133.957574][ T6510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.991892][ T6510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.011689][ T4265] Bluetooth: hci2: command 0x0409 tx timeout [ 134.034729][ T6552] loop1: detected capacity change from 0 to 32768 [ 134.087212][ T6552] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.861 (6552) [ 134.167384][ T6552] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 134.191130][ T6552] BTRFS info (device loop1): force clearing of disk cache [ 134.199320][ T6552] BTRFS info (device loop1): metadata ratio 0 [ 134.234265][ T6552] BTRFS info (device loop1): enabling ssd optimizations [ 134.261861][ T6552] BTRFS info (device loop1): using spread ssd allocation scheme [ 134.269782][ T6552] BTRFS info (device loop1): using free space tree [ 134.277894][ T6552] BTRFS info (device loop1): has skinny extents [ 134.370403][ T6510] team0: Port device team_slave_0 added [ 134.408991][ T6510] team0: Port device team_slave_1 added [ 134.570024][ T6510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.673182][ T6552] BTRFS info (device loop1): clearing free space tree [ 134.688476][ T6510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.715782][ T6552] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 134.731740][ T5416] Bluetooth: hci0: command 0x0c20 tx timeout [ 134.767039][ T6552] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 134.829207][ T6510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.847033][ T6552] BTRFS info (device loop1): creating free space tree [ 134.877739][ T6552] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 134.913617][ T6552] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 134.913627][ T6510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.947710][ T6510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.044831][ T6510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.071552][ T6635] tipc: Started in network mode [ 135.076480][ T6635] tipc: Node identity 7f000001, cluster identity 4711 [ 135.091792][ T6635] tipc: New replicast peer: 0.0.0.0 [ 135.099913][ T6635] tipc: Enabled bearer , priority 10 [ 135.380005][ T6616] loop4: detected capacity change from 0 to 32768 [ 135.424220][ T1111] Process accounting resumed [ 135.447552][ T6616] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.873 (6616) [ 135.506206][ T6510] device hsr_slave_0 entered promiscuous mode [ 135.547721][ T6510] device hsr_slave_1 entered promiscuous mode [ 135.548556][ T6616] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 135.572625][ T6510] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.611874][ T6510] Cannot create hsr debugfs directory [ 135.631499][ T6616] BTRFS info (device loop4): using free space tree [ 135.638089][ T6616] BTRFS info (device loop4): has skinny extents [ 135.737303][ T6651] loop0: detected capacity change from 0 to 1764 [ 135.923339][ T144] device hsr_slave_0 left promiscuous mode [ 135.951031][ T144] device hsr_slave_1 left promiscuous mode [ 135.996587][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.007367][ T6616] BTRFS info (device loop4): enabling ssd optimizations [ 136.031228][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.076648][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.084663][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.092874][ T5416] Bluetooth: hci2: command 0x041b tx timeout [ 136.108985][ T144] device bridge_slave_1 left promiscuous mode [ 136.118060][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.140231][ T6677] ptp ptp0: only physical clock in use now [ 136.152862][ T144] device bridge_slave_0 left promiscuous mode [ 136.167623][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.252002][ T6679] loop0: detected capacity change from 0 to 2048 [ 136.280067][ T6679] NILFS (loop0): invalid segment: Magic number mismatch [ 136.295611][ T6679] NILFS (loop0): trying rollback from an earlier position [ 136.318162][ T144] device veth1_macvtap left promiscuous mode [ 136.338146][ T144] device veth0_macvtap left promiscuous mode [ 136.361094][ T144] device veth1_vlan left promiscuous mode [ 136.396445][ T6679] NILFS (loop0): recovery complete [ 136.440106][ T144] device veth0_vlan left promiscuous mode [ 136.454541][ T6682] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.167187][ T144] team0 (unregistering): Port device team_slave_1 removed [ 137.189634][ T144] team0 (unregistering): Port device team_slave_0 removed [ 137.215884][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.248586][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.374491][ T6699] loop4: detected capacity change from 0 to 40427 [ 137.412647][ T144] bond0 (unregistering): Released all slaves [ 137.457705][ T6699] F2FS-fs (loop4): invalid crc value [ 137.493948][ T6699] F2FS-fs (loop4): Found nat_bits in checkpoint [ 137.528674][ T1111] tipc: Node number set to 2130706433 [ 137.750204][ T6709] netlink: 'syz.2.894': attribute type 12 has an invalid length. [ 137.801632][ T6709] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.894'. [ 137.837466][ T6699] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 138.094283][ T6510] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 138.150878][ T4201] attempt to access beyond end of device [ 138.150878][ T4201] loop4: rw=2049, want=45104, limit=40427 [ 138.171590][ T5394] Bluetooth: hci2: command 0x040f tx timeout [ 138.182721][ T6510] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 138.212971][ T6510] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 138.248592][ T6734] autofs4:pid:6734:autofs_fill_super: pipe file descriptor does not contain proper ops [ 138.261813][ T6510] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 138.373949][ T6737] device team_slave_0 entered promiscuous mode [ 138.380702][ T6737] device team_slave_1 entered promiscuous mode [ 138.391026][ T6737] device macvlan2 entered promiscuous mode [ 138.410147][ T6737] device team0 entered promiscuous mode [ 138.432907][ T6737] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 138.652566][ T6740] loop0: detected capacity change from 0 to 4096 [ 138.672377][ T6510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.784520][ T6510] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.822060][ T6740] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 138.857189][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.872853][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.946614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.002382][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.053952][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.061148][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.113211][ T6757] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.910'. [ 139.136652][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.173201][ T1279] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 139.184790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.194663][ T4186] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 139.200973][ T4186] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 139.208033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.254822][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.261918][ T4186] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 139.268263][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.305057][ T6763] kAFS: Invalid Command on /proc/fs/afs/cells file [ 139.316952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.326276][ T1284] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 139.352454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.358649][ T4186] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 139.412105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.468404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.505116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.546429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.586388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.618828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.659409][ T6510] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.674333][ T4261] Process accounting resumed [ 139.689498][ T6510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.719132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.732892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.760556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.889954][ T6791] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 140.067966][ T6800] loop0: detected capacity change from 0 to 2048 [ 140.159118][ T6800] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.253249][ T4261] Bluetooth: hci2: command 0x0419 tx timeout [ 140.261575][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.292164][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.358727][ T6510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.884140][ T6839] netlink: 'syz.0.935': attribute type 1 has an invalid length. [ 140.911044][ T6842] loop1: detected capacity change from 0 to 512 [ 141.055075][ T6842] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 141.113732][ T6850] netlink: 16 bytes leftover after parsing attributes in process `syz.0.937'. [ 141.125162][ T6842] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.936: corrupted in-inode xattr [ 141.164197][ T6852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.938'. [ 141.173680][ T6842] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.936: couldn't read orphan inode 15 (err -117) [ 141.187754][ T6852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.938'. [ 141.197160][ T6842] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,max_dir_size_kb=0x0000000000000005,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 141.244169][ T6852] Zero length message leads to an empty skb [ 141.325151][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 141.362739][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.404243][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.432558][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.463215][ T6510] device veth0_vlan entered promiscuous mode [ 141.480998][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.511360][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.566782][ T6510] device veth1_vlan entered promiscuous mode [ 141.661315][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 141.685022][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 141.715148][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.749761][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.775403][ T6868] loop1: detected capacity change from 0 to 1024 [ 141.785787][ T6510] device veth0_macvtap entered promiscuous mode [ 141.824471][ T6868] EXT4-fs (loop1): Ignoring removed oldalloc option [ 141.846423][ T6510] device veth1_macvtap entered promiscuous mode [ 141.852960][ T6868] EXT4-fs (loop1): Ignoring removed oldalloc option [ 141.859633][ T6868] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 141.983229][ T6868] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,bsddf,nodioread_nolock,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 142.003060][ T6510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.087964][ T6510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.146481][ T6510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.196416][ T6510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.244201][ T6510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.290833][ T6510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.336308][ T6510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.382427][ T6510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.464415][ T6510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.512123][ T6510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.576636][ T6890] Set syz1 is full, maxelem 0 reached [ 142.591618][ T6510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.641442][ T6510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.679520][ T6510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.720079][ T6510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.771471][ T6510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.781345][ T6510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.831435][ T6510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.862306][ T6895] loop4: detected capacity change from 0 to 4096 [ 142.873203][ T6510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.911518][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 142.919824][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 142.960066][ T6895] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 142.983128][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 143.000903][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.040458][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.092789][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.144352][ T6510] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.173769][ T6510] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.214413][ T6510] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.261447][ T6510] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.285249][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 143.285266][ T26] audit: type=1400 audit(1792153496.287:74): apparmor="STATUS" operation="profile_load" info="parent does not exist" error=-2 profile="unconfined" name="//o" pid=6908 comm="syz.1.955" [ 143.639907][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.684945][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.735061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 143.857851][ T4287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.872749][ T4287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.938669][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 144.267026][ T6937] netlink: 'syz.5.964': attribute type 1 has an invalid length. [ 144.283459][ T6934] kAFS: Invalid Command on /proc/fs/afs/cells file [ 144.312951][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.5.964'. [ 144.553000][ T6954] loop1: detected capacity change from 0 to 16 [ 144.614810][ T6954] erofs: (device loop1): mounted with root inode @ nid 36. [ 145.245028][ T6983] macsec0: mtu greater than device maximum [ 145.361491][ T5304] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 145.628956][ T6968] loop4: detected capacity change from 0 to 32768 [ 145.699719][ T6968] [ 145.699719][ T6968] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 145.699719][ T6968] [ 145.791688][ T5304] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 145.814927][ T6968] ERROR: (device loop4): diWrite: ixpxd invalid [ 145.814927][ T6968] [ 145.821178][ T5304] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.865147][ T5304] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 145.903773][ T5304] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.915074][ T6968] ERROR: (device loop4): txCommit: [ 145.915074][ T6968] [ 145.971934][ T6968] ERROR: (device loop4): diRead: i_ino != di_number [ 145.971934][ T6968] [ 146.085744][ T4201] [ 146.085744][ T4201] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.085744][ T4201] [ 146.102053][ T5304] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 146.134143][ T5304] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 146.145953][ T4201] [ 146.145953][ T4201] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.145953][ T4201] [ 146.161426][ T5304] usb 6-1: Product: syz [ 146.175022][ T5304] usb 6-1: Manufacturer: syz [ 146.180635][ T7009] netlink: 28 bytes leftover after parsing attributes in process `syz.1.988'. [ 146.223170][ T7009] netlink: 28 bytes leftover after parsing attributes in process `syz.1.988'. [ 146.262803][ T5304] cdc_wdm 6-1:1.0: skipping garbage [ 146.269380][ T5304] cdc_wdm 6-1:1.0: skipping garbage [ 146.293126][ T5304] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 146.315295][ T5304] cdc_wdm 6-1:1.0: Unknown control protocol [ 146.702322][ T5395] usb 6-1: USB disconnect, device number 2 [ 146.796729][ T7030] loop4: detected capacity change from 0 to 128 [ 147.342776][ T7056] loop5: detected capacity change from 0 to 256 [ 147.547457][ T4264] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 147.803183][ T7078] loop5: detected capacity change from 0 to 1024 [ 148.051858][ T4264] usb 5-1: unable to get BOS descriptor or descriptor too short [ 148.147656][ T4264] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 67, changing to 7 [ 148.168882][ T4264] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 148.424463][ T7118] netlink: 'syz.2.1025': attribute type 2 has an invalid length. [ 148.441202][ T7121] loop1: detected capacity change from 0 to 256 [ 148.451739][ T4264] usb 5-1: string descriptor 0 read error: -22 [ 148.462021][ T4264] usb 5-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 148.471129][ T4264] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.531073][ T7121] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4fc69fa9, utbl_chksum : 0xe619d30d) [ 148.684932][ T7130] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 148.843031][ T4264] usb 5-1: unit 1 not found! [ 148.928379][ T7142] loop5: detected capacity change from 0 to 512 [ 149.001700][ T4264] usb 5-1: USB disconnect, device number 5 [ 149.021907][ T7142] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 149.155358][ T7142] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 149.248804][ T7142] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1035: bg 0: block 248: padding at end of block bitmap is not set [ 149.270548][ T7142] Quota error (device loop5): write_blk: dquota write failed [ 149.280458][ T7142] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 149.294096][ T7142] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.1035: Failed to acquire dquot type 1 [ 149.333941][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.382387][ T7142] EXT4-fs (loop5): 1 truncate cleaned up [ 149.388114][ T7142] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 149.645526][ T144] Quota error (device loop5): remove_tree: Getting block too big (0 >= 6) [ 149.686047][ T144] EXT4-fs error (device loop5): ext4_release_dquot:6272: comm kworker/u4:1: Failed to release dquot type 1 [ 149.977211][ T7194] print_req_error: 10 callbacks suppressed [ 149.977230][ T7194] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 150.003482][ T7195] vivid-000: disconnect [ 150.020077][ T7194] SQUASHFS error: Failed to read block 0x0: -5 [ 150.028711][ T7195] vivid-000: reconnect [ 150.169832][ T7206] loop0: detected capacity change from 0 to 256 [ 150.818146][ T7221] loop5: detected capacity change from 0 to 32768 [ 150.857174][ T7251] netlink: 'syz.4.1081': attribute type 1 has an invalid length. [ 150.892770][ T7221] [ 150.892770][ T7221] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 150.892770][ T7221] [ 150.925435][ T7253] loop1: detected capacity change from 0 to 8 [ 150.965534][ T7221] ERROR: (device loop5): diWrite: ixpxd invalid [ 150.965534][ T7221] [ 151.017114][ T7221] ERROR: (device loop5): txCommit: [ 151.017114][ T7221] [ 151.050215][ T7221] ERROR: (device loop5): diRead: i_ino != di_number [ 151.050215][ T7221] [ 151.152386][ T7261] sctp: [Deprecated]: syz.1.1084 (pid 7261) Use of int in max_burst socket option. [ 151.152386][ T7261] Use struct sctp_assoc_value instead [ 151.164352][ T6510] [ 151.164352][ T6510] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.164352][ T6510] [ 151.184800][ T6510] [ 151.184800][ T6510] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.184800][ T6510] [ 151.366388][ T7272] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.373740][ T7272] IPv6: NLM_F_CREATE should be set when creating new route [ 151.381139][ T7272] IPv6: NLM_F_CREATE should be set when creating new route [ 151.470182][ T7276] block2mtd: device name too long [ 151.480561][ T7278] loop0: detected capacity change from 0 to 64 [ 151.608647][ T7278] attempt to access beyond end of device [ 151.608647][ T7278] loop0: rw=0, want=1026, limit=64 [ 151.642175][ T7278] buffer_io_error: 10 callbacks suppressed [ 151.642195][ T7278] Buffer I/O error on dev loop0, logical block 512, async page read [ 151.666972][ T7278] attempt to access beyond end of device [ 151.666972][ T7278] loop0: rw=0, want=113154, limit=64 [ 151.703518][ T7278] Buffer I/O error on dev loop0, logical block 56576, async page read [ 152.046131][ T7300] loop5: detected capacity change from 0 to 1024 [ 152.057206][ T7270] loop4: detected capacity change from 0 to 32768 [ 152.085916][ T7302] program syz.0.1104 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.154829][ T7270] XFS (loop4): Mounting V5 Filesystem [ 152.225036][ T7300] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,. Quota mode: none. [ 152.241819][ T7300] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.262254][ T7270] XFS (loop4): Ending clean mount [ 152.340616][ T4201] XFS (loop4): Unmounting Filesystem [ 152.363381][ T7317] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 152.578402][ T7321] loop0: detected capacity change from 0 to 256 [ 152.608376][ T7323] ieee802154 phy0 wpan0: encryption failed: -22 [ 152.626221][ T7321] exfat: Deprecated parameter 'utf8' [ 152.702181][ T7321] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 153.391136][ T7370] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 153.751280][ T7395] loop5: detected capacity change from 0 to 1024 [ 153.831312][ T7361] loop1: detected capacity change from 0 to 32768 [ 153.938816][ T26] audit: type=1400 audit(1792153506.937:75): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=7399 comm="syz.4.1146" name="unknown" offset=16 [ 153.978209][ T7361] XFS (loop1): Mounting V5 Filesystem [ 154.134002][ T7361] XFS (loop1): Ending clean mount [ 154.293873][ T4195] XFS (loop1): Unmounting Filesystem [ 154.630093][ T7425] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1154'. [ 154.837208][ T7414] loop5: detected capacity change from 0 to 32768 [ 154.979454][ T7414] XFS (loop5): Mounting V5 Filesystem [ 155.024424][ T7452] program syz.0.1162 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.161519][ T7414] XFS (loop5): Ending clean mount [ 155.181890][ T7414] XFS (loop5): Quotacheck needed: Please wait. [ 155.331838][ T7414] XFS (loop5): Quotacheck: Done. [ 155.474931][ T7440] loop4: detected capacity change from 0 to 40427 [ 155.503080][ T7440] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 155.531262][ T7440] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 155.562058][ T7440] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x6 [ 155.570120][ T6510] XFS (loop5): Unmounting Filesystem [ 155.590225][ T7440] F2FS-fs (loop4): invalid crc value [ 155.600719][ T7440] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 155.739132][ T7440] F2FS-fs (loop4): Start checkpoint disabled! [ 155.866357][ T7486] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.873730][ T7440] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 155.942348][ T7440] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 155.954404][ T7491] loop1: detected capacity change from 0 to 1024 [ 156.073459][ T7491] attempt to access beyond end of device [ 156.073459][ T7491] loop1: rw=2057, want=65536, limit=1024 [ 156.115257][ T7491] attempt to access beyond end of device [ 156.115257][ T7491] loop1: rw=1, want=2310, limit=1024 [ 156.139001][ T7491] attempt to access beyond end of device [ 156.139001][ T7491] loop1: rw=1, want=4358, limit=1024 [ 156.171965][ T7491] attempt to access beyond end of device [ 156.171965][ T7491] loop1: rw=1, want=6406, limit=1024 [ 156.194794][ T7491] attempt to access beyond end of device [ 156.194794][ T7491] loop1: rw=1, want=8454, limit=1024 [ 156.225311][ T7491] attempt to access beyond end of device [ 156.225311][ T7491] loop1: rw=1, want=10502, limit=1024 [ 156.249525][ T7491] attempt to access beyond end of device [ 156.249525][ T7491] loop1: rw=1, want=12550, limit=1024 [ 156.276230][ T7491] attempt to access beyond end of device [ 156.276230][ T7491] loop1: rw=1, want=14598, limit=1024 [ 156.479361][ T7511] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1188'. [ 156.584354][ T7516] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1189'. [ 156.903738][ T7543] loop4: detected capacity change from 0 to 512 [ 156.944543][ T7543] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 157.004456][ T7543] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 157.038459][ T7543] System zones: 1-12 [ 157.077909][ T7543] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.1200: bad orphan inode 131072 [ 157.097256][ T7543] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,data=journal,norecovery,,errors=continue. Quota mode: none. [ 157.202142][ T7543] overlayfs: upper fs needs to support d_type. [ 157.414348][ T4201] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /263/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 157.719832][ T7590] bond0: unable to remove nonexistent ARP target 192.168.1.1 [ 157.737011][ T7590] bond0: option arp_ip_target: invalid value (-192.168.1.1}÷¢º1Þ3 /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 328.517883][ T27] task:syz-executor state:D stack:22256 pid: 4174 ppid: 4173 flags:0x00004002 [ 328.527268][ T27] Call Trace: [ 328.530580][ T27] [ 328.533648][ T27] __schedule+0x11c3/0x4350 [ 328.538205][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 328.544485][ T27] ? lock_chain_count+0x20/0x20 [ 328.549387][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 328.554810][ T27] ? release_firmware_map_entry+0x190/0x190 [ 328.560732][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 328.566724][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 328.572005][ T27] schedule+0x11b/0x1e0 [ 328.576197][ T27] io_schedule+0x7c/0xd0 [ 328.580472][ T27] bit_wait_io+0xd/0xc0 [ 328.584777][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 328.590304][ T27] ? bit_wait+0xc0/0xc0 [ 328.594734][ T27] ? __wait_on_bit+0x170/0x170 [ 328.599560][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 328.605350][ T27] ? bit_waitqueue+0x30/0x30 [ 328.610001][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 328.615343][ T27] do_get_write_access+0x134/0xe40 [ 328.620503][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 328.626812][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 328.634023][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 328.640234][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 328.645866][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 328.651550][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 328.657062][ T27] ext4_dirty_inode+0xbf/0x100 [ 328.661920][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 328.667771][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 328.672907][ T27] generic_update_time+0x1cd/0x1f0 [ 328.678082][ T27] file_update_time+0x3c0/0x440 [ 328.683101][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 328.688271][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 328.693410][ T27] ? wp_page_shared+0x15b/0x6c0 [ 328.698333][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 328.704749][ T27] ? __lock_acquire+0x7d40/0x7d40 [ 328.710320][ T27] do_page_mkwrite+0x168/0x3c0 [ 328.715207][ T27] wp_page_shared+0x163/0x6c0 [ 328.719945][ T27] handle_mm_fault+0x1fbd/0x4440 [ 328.725014][ T27] ? get_page+0xe0/0xe0 [ 328.729232][ T27] ? vmacache_find+0x52a/0x590 [ 328.735863][ T27] ? find_vma+0xd2/0x230 [ 328.740194][ T27] do_user_addr_fault+0x494/0xc90 [ 328.747551][ T27] exc_page_fault+0x60/0x100 [ 328.752554][ T27] asm_exc_page_fault+0x22/0x30 [ 328.757479][ T27] RIP: 0033:0x7f452ed97ae2 [ 328.762286][ T27] RSP: 002b:00007fffd4a01200 EFLAGS: 00010202 [ 328.768414][ T27] RAX: 00007f452ce33000 RBX: 000055557fcda400 RCX: 0000000000000006 [ 328.776499][ T27] RDX: 0000000000003f90 RSI: 000055557fce0010 RDI: 0000000000000040 [ 328.784582][ T27] RBP: 00007fffd4a01700 R08: 000055557fce0258 R09: 0000000000000087 [ 328.792665][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffd4a01540 [ 328.800684][ T27] R13: 00007fffd4a01330 R14: 585858582e7a7973 R15: 00007fffd4a01280 [ 328.809248][ T27] [ 328.812633][ T27] INFO: task syz.5.1567:8671 blocked for more than 143 seconds. [ 328.820355][ T27] Not tainted syzkaller #0 [ 328.825549][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 328.834450][ T27] task:syz.5.1567 state:D stack:27664 pid: 8671 ppid: 6510 flags:0x00004004 [ 328.845247][ T27] Call Trace: [ 328.848577][ T27] [ 328.853816][ T27] __schedule+0x11c3/0x4350 [ 328.858777][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 328.864971][ T27] ? lock_chain_count+0x20/0x20 [ 328.869882][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 328.875276][ T27] ? release_firmware_map_entry+0x190/0x190 [ 328.881223][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 328.887235][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 328.892962][ T27] schedule+0x11b/0x1e0 [ 328.897164][ T27] io_schedule+0x7c/0xd0 [ 328.901496][ T27] bit_wait_io+0xd/0xc0 [ 328.905700][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 328.911825][ T27] ? bit_wait+0xc0/0xc0 [ 328.916054][ T27] ? __wait_on_bit+0x170/0x170 [ 328.920854][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 328.926004][ T27] ? bit_waitqueue+0x30/0x30 [ 328.930638][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 328.935964][ T27] do_get_write_access+0x134/0xe40 [ 328.941220][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 328.947369][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 328.955143][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 328.963924][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 328.969271][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 328.974975][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 328.980485][ T27] ext4_dirty_inode+0xbf/0x100 [ 328.985441][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 328.991488][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 328.996568][ T27] generic_update_time+0x1cd/0x1f0 [ 329.001837][ T27] file_update_time+0x3c0/0x440 [ 329.006729][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 329.011943][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 329.017619][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 329.023493][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 329.029794][ T27] ? count_memcg_event_mm+0x324/0x370 [ 329.035398][ T27] ? remove_device_exclusive_entry+0xac0/0xac0 [ 329.041657][ T27] ? verify_lock_unused+0x140/0x140 [ 329.046915][ T27] do_page_mkwrite+0x168/0x3c0 [ 329.052026][ T27] handle_mm_fault+0x1e47/0x4440 [ 329.057022][ T27] ? get_page+0xe0/0xe0 [ 329.061199][ T27] ? vmacache_find+0x238/0x590 [ 329.066479][ T27] ? find_vma+0xd2/0x230 [ 329.070791][ T27] do_user_addr_fault+0x494/0xc90 [ 329.076542][ T27] exc_page_fault+0x60/0x100 [ 329.081194][ T27] ? clear_bhb_loop+0x30/0x80 [ 329.086031][ T27] asm_exc_page_fault+0x22/0x30 [ 329.090931][ T27] RIP: 0033:0x7f6818715ba9 [ 329.095480][ T27] RSP: 002b:00007ffc5cb16120 EFLAGS: 00010202 [ 329.101666][ T27] RAX: 0000001b32b16000 RBX: ffffffff83a9ac4a RCX: 0000001b32b15ff8 [ 329.109677][ T27] RDX: 0000001b32524220 RSI: 0000000000000008 RDI: 00007f68195f8720 [ 329.118232][ T27] RBP: 000000000000010d R08: 00007f6818ab3000 R09: 00007f6818ab5000 [ 329.126395][ T27] R10: 0000000083a9ac4e R11: 0000000000000002 R12: 00007f6818ac9038 [ 329.134597][ T27] R13: 000000000000029d R14: ffffffff83a9a07f R15: 00007f68195f8720 [ 329.142697][ T27] ? tomoyo_compare_number_union+0x8f/0xd0 [ 329.148565][ T27] ? tomoyo_path_number_perm+0x5ca/0x6b0 [ 329.154348][ T27] [ 329.157441][ T27] INFO: task syz.6.1608:8768 blocked for more than 144 seconds. [ 329.165316][ T27] Not tainted syzkaller #0 [ 329.170290][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 329.179387][ T27] task:syz.6.1608 state:D stack:27408 pid: 8768 ppid: 7642 flags:0x00004004 [ 329.189362][ T27] Call Trace: [ 329.192983][ T27] [ 329.195963][ T27] __schedule+0x11c3/0x4350 [ 329.200532][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 329.207078][ T27] ? lock_chain_count+0x20/0x20 [ 329.213164][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 329.219797][ T27] ? release_firmware_map_entry+0x190/0x190 [ 329.229043][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 329.235109][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 329.240382][ T27] schedule+0x11b/0x1e0 [ 329.244649][ T27] io_schedule+0x7c/0xd0 [ 329.248930][ T27] bit_wait_io+0xd/0xc0 [ 329.253179][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 329.258697][ T27] ? bit_wait+0xc0/0xc0 [ 329.263136][ T27] ? __wait_on_bit+0x170/0x170 [ 329.267941][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 329.273056][ T27] ? bit_waitqueue+0x30/0x30 [ 329.277689][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 329.283826][ T27] do_get_write_access+0x134/0xe40 [ 329.289003][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 329.296646][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 329.306257][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 329.312612][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 329.317962][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 329.325380][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 329.330899][ T27] ext4_dirty_inode+0xbf/0x100 [ 329.335828][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 329.341822][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 329.346914][ T27] generic_update_time+0x1cd/0x1f0 [ 329.352129][ T27] file_update_time+0x3c0/0x440 [ 329.357061][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 329.362403][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 329.367500][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 329.373933][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 329.380238][ T27] ? count_memcg_event_mm+0x324/0x370 [ 329.385794][ T27] ? remove_device_exclusive_entry+0xac0/0xac0 [ 329.392184][ T27] ? verify_lock_unused+0x140/0x140 [ 329.397433][ T27] do_page_mkwrite+0x168/0x3c0 [ 329.402342][ T27] handle_mm_fault+0x1e47/0x4440 [ 329.407335][ T27] ? get_page+0xe0/0xe0 [ 329.412978][ T27] ? vmacache_find+0x4e3/0x590 [ 329.417793][ T27] ? vmacache_update+0xa0/0x100 [ 329.423204][ T27] ? find_vma+0x1df/0x230 [ 329.427625][ T27] do_user_addr_fault+0x494/0xc90 [ 329.432995][ T27] exc_page_fault+0x60/0x100 [ 329.437627][ T27] asm_exc_page_fault+0x22/0x30 [ 329.442907][ T27] RIP: 0033:0x7f1bd7891332 [ 329.447353][ T27] RSP: 002b:00007ffe864e84c0 EFLAGS: 00010202 [ 329.454334][ T27] RAX: 0000000000001008 RBX: 00007f1bd8773720 RCX: 0000000000000000 [ 329.462658][ T27] RDX: 0000001b31323000 RSI: 0000000000000008 RDI: 00007f1bd8773720 [ 329.470677][ T27] RBP: 0000000000000278 R08: 00007f1bd7c2e000 R09: 00007f1bd7c44128 [ 329.478763][ T27] R10: 0000000000000003 R11: 0000000000000002 R12: ffffffff81d6aece [ 329.486927][ T27] R13: 00007f1bd7c44128 R14: 00000000000000eb R15: fffffffffffff000 [ 329.495016][ T27] ? prepend_path+0x1e/0xb80 [ 329.499644][ T27] [ 329.502851][ T27] [ 329.502851][ T27] Showing all locks held in the system: [ 329.510587][ T27] 6 locks held by kworker/u4:0/9: [ 329.515913][ T27] #0: ffff8880199f2138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 329.528402][ T27] #1: ffffc90000ce7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 329.540486][ T27] #2: ffff88802db740e0 (&type->s_umount_key#32){++++}-{3:3}, at: trylock_super+0x1c/0xf0 [ 329.551008][ T27] #3: ffff88802db76c58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x213/0x2d40 [ 329.561723][ T27] #4: ffff88802db78990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 329.571615][ T27] #5: ffff8880748b7020 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x8c4/0x1a50 [ 329.581513][ T27] 1 lock held by khungtaskd/27: [ 329.586402][ T27] #0: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 329.595855][ T27] 2 locks held by getty/3944: [ 329.600568][ T27] #0: ffff88802c0eb098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 329.610478][ T27] #1: ffffc900021ce2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50 [ 329.621175][ T27] 3 locks held by syz-executor/4174: [ 329.629798][ T27] #0: ffff88807a548f28 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 329.641493][ T27] #1: ffff88802db74558 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 329.651608][ T27] #2: ffff88802db78990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 329.661465][ T27] 3 locks held by syz.5.1567/8671: [ 329.666629][ T27] #0: ffff888076413228 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 329.676576][ T27] #1: ffff88802db74558 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 329.686451][ T27] #2: ffff88802db78990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 329.696281][ T27] 3 locks held by syz.6.1608/8768: [ 329.701471][ T27] #0: ffff888077576328 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 329.711478][ T27] #1: ffff88802db74558 (sb_pagefaults){++++}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 329.722166][ T27] #2: ffff88802db78990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 329.733065][ T27] [ 329.735443][ T27] ============================================= [ 329.735443][ T27] [ 329.744362][ T27] NMI backtrace for cpu 1 [ 329.748736][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 329.755981][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 329.766141][ T27] Call Trace: [ 329.769442][ T27] [ 329.772386][ T27] dump_stack_lvl+0x188/0x250 [ 329.777076][ T27] ? show_regs_print_info+0x20/0x20 [ 329.782296][ T27] ? load_image+0x410/0x410 [ 329.786796][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 329.792185][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 329.797362][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 329.802368][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 329.808548][ T27] ? _printk+0xda/0x130 [ 329.812844][ T27] ? load_image+0x410/0x410 [ 329.817388][ T27] ? load_image+0x410/0x410 [ 329.821913][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 329.828005][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 329.833999][ T27] watchdog+0xe1b/0xe60 [ 329.838189][ T27] kthread+0x42e/0x520 [ 329.842268][ T27] ? hungtask_pm_notify+0x40/0x40 [ 329.847323][ T27] ? kthread_blkcg+0xd0/0xd0 [ 329.851951][ T27] ret_from_fork+0x1f/0x30 [ 329.856406][ T27] [ 329.860182][ T27] Sending NMI from CPU 1 to CPUs 0: [ 329.865613][ C0] NMI backtrace for cpu 0 [ 329.865624][ C0] CPU: 0 PID: 3540 Comm: syslogd Not tainted syzkaller #0 [ 329.865641][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 329.865651][ C0] RIP: 0010:check_preemption_disabled+0x0/0x110 [ 329.865672][ C0] Code: 00 00 48 c7 c7 20 eb 32 8a e8 2c 01 00 00 65 ff 0d 31 2d 41 76 5b c3 00 00 cc 48 c7 c7 e0 4a 7a 8a 48 c7 c6 20 4b 7a 8a eb 00 <55> 41 57 41 56 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 [ 329.865686][ C0] RSP: 0018:ffffc900021d7798 EFLAGS: 00000046 [ 329.865700][ C0] RAX: 0000000000000001 RBX: ffff88807dc98000 RCX: ffffffff815daa54 [ 329.865713][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b3e00 RDI: ffffffff8a7a4b40 [ 329.865725][ C0] RBP: ffffc900021d7848 R08: ffffffff91015177 R09: 1ffffffff2202a2e [ 329.865738][ C0] R10: dffffc0000000000 R11: fffffbfff2202a2f R12: ffff88807dc98b38 [ 329.865751][ C0] R13: 0000000000000001 R14: 1ffff1100fb9315d R15: ffff88807dc98b18 [ 329.865762][ C0] FS: 00007f5f99b2cc80(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 329.865777][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 329.865789][ C0] CR2: 00005579ad108660 CR3: 000000002c378000 CR4: 00000000003506f0 [ 329.865803][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 329.865813][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 329.865823][ C0] Call Trace: [ 329.865828][ C0] [ 329.865833][ C0] lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 329.865863][ C0] ? lock_chain_count+0x20/0x20 [ 329.865885][ C0] trace_hardirqs_on+0x67/0x80 [ 329.865903][ C0] kasan_quarantine_put+0xd4/0x210 [ 329.865920][ C0] slab_free_freelist_hook+0xec/0x170 [ 329.865939][ C0] ? skb_release_data+0x667/0x830 [ 329.865957][ C0] kfree+0xef/0x2a0 [ 329.865973][ C0] skb_release_data+0x667/0x830 [ 329.865992][ C0] ? skb_release_head_state+0x1e7/0x240 [ 329.866010][ C0] consume_skb+0xa2/0x100 [ 329.866028][ C0] skb_free_datagram+0x25/0xe0 [ 329.866044][ C0] __unix_dgram_recvmsg+0x9dc/0xd50 [ 329.866065][ C0] ? unix_unhash+0x10/0x10 [ 329.866082][ C0] ? aa_af_perm+0x340/0x340 [ 329.866100][ C0] ? aa_file_perm+0x38b/0xe80 [ 329.866119][ C0] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 329.866138][ C0] ? security_socket_recvmsg+0x85/0xb0 [ 329.866157][ C0] ? unix_dgram_recvmsg+0xb2/0xd0 [ 329.866176][ C0] sock_read_iter+0x2c2/0x380 [ 329.866195][ C0] ? kernel_sock_ip_overhead+0x590/0x590 [ 329.866218][ C0] ? memset+0x1e/0x40 [ 329.866231][ C0] ? iov_iter_init+0xb4/0x170 [ 329.866249][ C0] vfs_read+0x75e/0xd50 [ 329.866268][ C0] ? kernel_read+0x1e0/0x1e0 [ 329.866290][ C0] ? __fdget_pos+0x1e2/0x370 [ 329.866307][ C0] ksys_read+0x153/0x260 [ 329.866323][ C0] ? vfs_write+0xd70/0xd70 [ 329.866339][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 329.866360][ C0] do_syscall_64+0x4c/0xa0 [ 329.866376][ C0] ? clear_bhb_loop+0x30/0x80 [ 329.866395][ C0] ? clear_bhb_loop+0x30/0x80 [ 329.866413][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 329.866431][ C0] RIP: 0033:0x7f5f99c7c407 [ 329.866444][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 329.866458][ C0] RSP: 002b:00007ffef0a33120 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 329.866474][ C0] RAX: ffffffffffffffda RBX: 00007f5f99b2cc80 RCX: 00007f5f99c7c407 [ 329.866486][ C0] RDX: 00000000000000ff RSI: 000055fd0c142950 RDI: 0000000000000000 [ 329.866496][ C0] RBP: 000055fd0c142910 R08: 0000000000000000 R09: 0000000000000000 [ 329.866506][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 000055fd0c14299a [ 329.866517][ C0] R13: 0000000000000000 R14: 000055fd0c142950 R15: 000055fcde8ebd98 [ 329.866534][ C0] [ 329.869959][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 330.245764][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 330.252984][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 330.263039][ T27] Call Trace: [ 330.266337][ T27] [ 330.269378][ T27] dump_stack_lvl+0x188/0x250 [ 330.274077][ T27] ? show_regs_print_info+0x20/0x20 [ 330.279394][ T27] ? load_image+0x410/0x410 [ 330.283940][ T27] panic+0x2f8/0x850 [ 330.287861][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 330.293517][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 330.298029][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 330.304214][ T27] watchdog+0xe5a/0xe60 [ 330.308394][ T27] kthread+0x42e/0x520 [ 330.312460][ T27] ? hungtask_pm_notify+0x40/0x40 [ 330.317482][ T27] ? kthread_blkcg+0xd0/0xd0 [ 330.322081][ T27] ret_from_fork+0x1f/0x30 [ 330.326545][ T27] [ 330.329712][ T27] Kernel Offset: disabled [ 330.334061][ T27] Rebooting in 86400 seconds..