last executing test programs: 2m46.863189092s ago: executing program 0 (id=1581): setns(0xc9, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x100}) r0 = socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x4, 0x1b}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 2m46.761765914s ago: executing program 0 (id=1583): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000003540)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x8}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000280)=' ', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) 2m46.681783596s ago: executing program 0 (id=1587): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0xffffff7d, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m46.547042289s ago: executing program 0 (id=1593): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000080)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {@auto_da_alloc}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x48d, &(0x7f0000000980)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@redirect_dir_nofollow}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) sendfile(r0, r0, 0x0, 0x2000007ff) 2m46.036037512s ago: executing program 0 (id=1600): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x123}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001bc0)='ns\x00') openat(r1, &(0x7f0000001c00)='./cgroup\x00', 0x440, 0xab42a38ae4807252) 2m45.509495985s ago: executing program 0 (id=1606): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) setuid(0xee01) syz_fuse_handle_req(r0, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x5040a, 0x7fff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m45.415490778s ago: executing program 32 (id=1606): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) setuid(0xee01) syz_fuse_handle_req(r0, &(0x7f0000008100)="58785f58471eb4b5b3ff3946acaad41068511507291e72541d949ffc8a54ff637ccef1fe8511899ea7f3c82cbc6539763a34f6760c1608c911801ca672e62708ba4fc023749076ff6a0daba0caa57000acbd9ecf5e97201f7f14e715bc8c089c3d65e92fd65dedb76d61715067ccf6dfec2b56a48f2b274b564d90c3d868f2bdc07b7e636ad78904bca826fa69b7783e7be2b8e7c997b99225467747875695f6d500cb82b479fe9486bb94e06f796f89906bbfccc964830f86986760ade90c3f7a9dde3172a5124c1889075ad30b5ee2a5f257a6ac790a8e89b247ccbc8d241b7b95f8fc649deffc1bc37d51a8c3dfae38ac968eb48695de38df941f9632ef9ad6779e41ccea8a3ff1cac4fa4b47a152a8f9a1bb0094f41580bbf60fa11cfaf2c535a12c866e9414ee9b58226fbdb0d221e1bdc50e3fa300351364f6350030383856f1f809aee19f337f3d3435ae6754916be1eec24643cec1bd1007ffa38418735988cc901603895f66bd6450d54f99e1246ded898499d2a447f899c00368ce1dd4a4f4cf9cdf7d4f8b38dcb98a598ac490f1086ec712b0cb94610abfdb25b0f6947b46e1dd628897ab68445568578049fa6140250a5d821d70f102fadc2fa273a6e486f250712ec847de3b02a121e19775311e8629045f3404bdfa3207aecdac43c3571b86a9423bd716aa67cb688f9ee4f2b14ea42c89f2766c78fd4ec41ab34eebb4256e885bd7e3abe4348772993bb630aa3397084bbc66cdad664d6a9d33767cc375a44dbc0b08931053a6780a796fd31e1d7c512599f9e010883a52c07ec0938ce1acb3fe3baac6af9fb7e9d7942662e41bd3626d240d5ed34ebcbcc0ccf1c3280c76fbf6cdfb04bdb2d3b4ec6a8961b1eb036b211eff6247b95039cc67d222f2ff122340c56d74b4fffa79a202144bb10ad766f1fd6b32abc3e09213da84b36698e5c67dbd76342baf2fdbd26e9563dadd01fce19d7ec025d05d0494e53229379d13c1cae48ec058cff0bc1ccdc94a74b11a9bc87c580bb6a3f45fe15d15d89bf6102dc1085bfe27b2ab462aaf642b8ceed519cf88b31e9e00fdc23e8f6967a72b4c38b2458656dbf26dd75586731bb519a97d0ff43f4358cd40c7ed371ae8a24f46e320d4c4c0a1b8c42f10908a1c283d8032d76f52d4509d78c2f3a0716c37bc0c786ce9174a88d468e88a6d154e4712778aecded0ca5de28e52c04e33672ecea5135438e908aa1bf00e65ba6dacc4bd018b7bb1c30aa5d9acc679220cb5e7207f1759bd7722d10469225aae24973031a21358532a63aab42f33b1f8f40d545fec7799703ba067592b34247fbc7375acdcb3883ace7d34cf33484f2cf662f3f0e18b5c475ae311fb20f6e6b85320b2bc37e56512dc27815b37bfd9f172be1a119197eb53b535c440fd7f24724e1d466309c0f8556965bd02d75c3dbe2baa0c6a515db07af1f77306577d0b38f0aa8cb188cf5523368951b8210f4bfc6afa0d058ad84656d27a46faef225e6268396ecb54a5182591bff3a86792db5454e238afe7c26eae85fd3c1c060760d89223bbdbe8966ae2558f47d799839cd959c974b69ad262cf8ab4fee554288e767ede9bc5d7f0cfba05966ef7858e41db363122680abe978345d45e4b52b73fe9f52ad26371a5b0539d88aa0c572aa01a41b079dde5a14e031ad903629d06c8d85ad82828c25a9ba7ce0fef2316eb011643e47feca7d280833f8b3008841fb2d88ea84df65b03aa5baaa29d6234ed5db8db461fc5df77aad38690277cd5dac1ed3c23c9f2778295578561f9a4d31159a826b4b62b2a867e6e8a9514edddaacad22106880e6633fb2f3b17c8d10bec633d6128489f7253b3e3e38e5942743ddd1547dfab27a152549f61891e3a5ad17f733b042f7ef915ad7423b9719fee9142407fe1d10ec8b64a21cd24fd39de4496ca3f394f07149bdbf1393181b5afee090ff40ee31d34a9c6a113e3823fac425fa85e212de1a9f7c4937ba64f3327961fccf85e6fa29be12de9589671d60d4658b1562ce7dedcde8ec79d265c13f5e197b66989c3f067d2801fcd78bb92b45e55fb4089a7cd3b179284af782ae0327ba56fc307a281772384448ee465dccefe41be8d75c8cd0eb5c0217d7ca706848f9b82500b77c2d838cbd536304556af87d3b6fb9183b5dc9cf2d0f7ecbb24d9f790151b9c6092dfb2c14decbe6448362cd7c13515f66a99c37b56134d12e8c7f1a5b75e14e47f84d8658f0b65ea91014e2e4fd361f03dbf8ca509d426ca1bba7e43ce918268393ff16b17d9e1bb49fb2b4f6eeb8b4b226c79303b19412a55b7ea7c8774ccebd8d66abe117a8be9a3c4faea730902136df57aff991b59dd71610ba4c8e1cded8287c21c56526f4fb6c502ea73ae310d56640990b3e695b278de6e1eebd51108cf7547c0e457e5fdf59691baf080dd3f5dc3c9a10bd4cc5e10ba42d4d3d9dc4f7ebe0bd2981a1d6fb06f7457dca1e56fac3f0fa7ca19ec2fb7940ee837e960d93a73bf085eaa2888fe3025aadd33cae85d63273be6ae3a92e35d78602d8e23b9460f04b7c0e0e710d10fdb0dd3fa9b880865603500d81dc7e968e8046569830b526e441f25f8b0af47d524aa80fd7dd9c3f72facec2032e2c06bc33c6b739c5368bf54e32b6acdca9d2d14276a8348ae92bfbd60f6aceecf98f3c6fe70747499b25667a96c52e21236421b27deafbc6b5e2b8a4ea2a0d3cd5ee1a10f3153b529b5c04a1961223a943842e17ee0cd114ce6983536400fc40f3d4708436954803fd60caf2b5ed7e4ce90bc75385e2424191c6a5038fa15d99aade49fa1affe63fb73078a6bb4ee560b0b521aeb33f507bdf876829f4d3f695197468e41503a10870a8e6df800608ac33dfdecc03f64d03fb6180287a684063c7edfc8db1366f6bb502fe446085f6acc4741b273a0b736f0f55da28967390bc7434db54ad0da9d1d002ceaa5c3e53efa95e7aaa792db32501a072e669da29fb734d771a6fa8c753fb2fcc204e31d668992473e7937fcf751bc79b125db1725f2a495bd2a4207e4db8d44810a4db5113705c5cb8733866ade3375d1bdbcb965cbd927e7d285f2933bf037911959088b64cfac0ff1e39244f2e9416653ed87ec564eb686af1062354a8bd7034c1022cb0d0b6996762ef4a0a3ab4f3deb459f023a867a38fcad2a10fcf0872862b386ff7c5ea7ce13abb112d1f0ed0723870eccc76d16f7e3cc00e28945bb93d9f2bd8e2017993102f0824867ec141f20df951202a2ab1cd796516ca0b4fdd9e6de8b82fcd30f9ab85cf0a5547e1ad1ef1ad5be7a878a16864d7c06b4ae002f3ba485a9bb36b8a591ecb64a4a5c0fd3b4beb015f58ea4cfe190f3b46cc4d9108d10c52a9de859814edac575d2a3d937a9b31db049e70aa76c085ab63d61c1317205c228f7027fa39125de8fec40ed7982e36a7cfa9fedca30f0b692bd4c7794f6b56d69ada1fed168cf03cc57321fe37e3a8cea4bd093e87b657fe5acb13d2591bebb52898362ddf0335810c70a4838faf8fff16301d16707eaa38e52f913f8aa3e27b2387ca1a217ac69966e287ad5cb0286535d5d00b7006661dbc7923a066945c1a2040a4e95d7b0de4dc8217bf1d4e9b6cccc671fdd9a5770c21e749b407df8c463a3bf17e47bfcba6a890a0435d3fbb7252fe072b149b7bfeb185b088686dd70e0c9cda275497b553aff2b319f7d7b0ed64002c5f9f6ccfc3d55d8c908d314487452f37a650f4561326a84c660b6111702a87db03595b5d080c60288203f091de9f78b997e47233f4bab9b044a98ab118a6c45b7ca746cc2fb90182a923d67216412e24a955c0c2307acc47bdd319955249d8412a5ccf444437f53f524c69ba0167c920f0c1f775cd1a225636200a9e4adf61f418d20f717339d0c8c5386af0936f628cc589a8d5581c1c8cad0b564a3f38b606473280a3fa586a5ba932fd38eeb23096df29a92ab54c409f88ef4f03217f0bb90fea539e629d8a025c802f6b5c3d735fe950c8ff7136e6db287851dfbffea1ef81491a50cb75a103367e85afa3484d6af865dfbca91dc05632b0d94aa384ee0c585424a5ddf80babe0b913b0a2eedda34c7ea7814642a69f8eae868274b16fe0f52fb60b201e6685dad3f419413d5b8186992855a25ffe0d4773a14c7977181a120cbc42af4f9acca3fee1d54ccc125ea49b62ab60c58a0ecdf50ee7c16f3b6b12b254fc08fcc85d409eef7c3f30cf705617f926a17e6588a9fd7e34be9fd863a7b157a2d9a336356d568c2d2dbaf76c2d2b2ff8703748b860e36f02b04d6e4f2fd49511f12ce395dc18622cd51948a32cc432cd797d8a68838cebbbdd9bcb6f2e85719785706012e894cb043bb9a53998131fd4aae3321d81fc001e718c4a99c0580af1d4a0c81665cc5adcf337c8bc00fc0fb3c7be0d5e5ff6a6fae5891858eafedbed69223170ccc71ce36ae439d769c3520972601fbab93f54808d6950cb7cf1e5a3b32d8c6a975e3adccca0b2ee28a4eb5ca3b0ceb9d31a8f767c3f4486a62215171738007675a55abf5916513f7eb9b21ff291f2b4b48bbfcf394cf861fe016b3680be422a8bff49963ce096d1bc17186822b1392e68b1a05fa6c70bd2d9a164f12301a6e78caa8f4cd43749704829f54c5d93637aeef80794d3f206741363e74fa181c9f1dc47557553de620794f096c59ccd74a178f5adb466ad5a62fffc1886f56ebceca4ed46ed2396bcbc31160b4eb1b7d69642e33315e3adbdbe1b9794931e7babf745ecfca37dd4190013793d530df12d6521bc069a05a94e0ffe91900a0c2209a6914d2f85bd161ff77284198129a9b1ba600bda3e52769d39c1bd61c4a70c627c3ad89aa0bdf0c93a2c35e166da9a08b4d2f92deacb6e9034274305b6d254c4052868ba32bec9aa3cec75debe24e78e43374efffe444722a983935f9007fe3de37dd83c52be16e034d09592a179275dd0c91281be579cd19c0162123886893713f25cdae19cf258926bf2070741111eee6b3df708c3fc416b7d046c948bf8500779c0cd5460e640bb1f860f58052b8087e6eb2f16e48f4984c9f9fc9fb2652ac5305861ece5362db08ae912ba055af766da1322057d0bfa647d98b8d4f1e7ed43ecdf1050c0eb19dae93b8014da57241cdab4ffacf0ec1348d4a89b3e8ff187098d83d8eba34e5c7ad4215f1977968a9d337d08fd1188754e7cf41baf0189ccaa5f3b1005f807b0255ce1920ca7d919e4684af70c3d089a99922727c607a2b06e713dd61122842a913036f6cd64dfb313fbdf639fcbd712852bb85337d056685b0a54225ae27e1e8c7ce5acd1f017b8f712c268b9cc0ee26d26c63955df0591f52ef3ef5e6f0a8b0a40fccec5f945431a2e81c35720d178feb481092e4f51978493c5fd502f252bc0152f145f268ead14932990069169483ecc7abc901657460c8730715c078b61059bd2621f50fb838376e0b808a3f118f761efea45bbac4274016960063cc67c428e72e516685552dc3bf473e442d76f2d3ed07b319694490054302a538b52e3b8496b7e37fbf4a2ffff2b484f98fdb14c66ecb8447834733f8a7a5a3c83de34b6647842dd56d8201f9d9240f3b3a5b5cbccf174a08853d06fd164fe74e04608ae12df8a35b73517d22a87c7ebca60942932d03102ff7e8644611b5520b5ebce950945498ce19210c866e48284d18fb7e049deaa43ee5283e3dfad7316ba85490e93182d13efe7ba64ee5ceeaabcff3eb24d46a3a129dd5a6b82e8c48210cb1e6564833f3e15dda4dec383b4319741cebf6374cf2c5d64722afccf7c4e2d81ae28d45f2c35b764281f1f08fec8f8e9277277ae1ae8a8981f85e041d2450afc9374e978f73b66da9aadb2087223f28e21e946eb07710ec86cdcad0948d4ca93827ea34e28806d172c3feb83471ed2d4d7ada2360b209d16b9d35861082d85b6be3c3589a6bdaf6f9b5d52ac8fd7388e32b24f1d5d34b5442c1ceebde311decd709f075d064f07bc60ab14c101ef51039eed56ae1e0a374e3e956603737b3a16db684a81e9b8998a0bb9b17a0876a92b2a3b9924f44b16ae4c7ff376ea8a8c91b504c1dbeb522cf846fc3ec6b9a01f452eeb35cade34c6a0463b92c46e013ee7906ee934141870ddd1464ae688805933504a2dc7cb1f947e28bf22f5eea6afb5de3b950056bf44065b84fd5589385d0feec4ef1db4fb4b595957130e575dc383e3686f4674143debb23e17b398f32683fb4805f297369d0e5f2e63af6891491e4e37186b4a3dffbbdcfff63d1fea4e12d24ef96fde3ed7a323a3605cdf5eaa43da738004556c2c20aa30c40079bc2e9ebe102c1fcf5259f1e3acc6b2a2bc9da4d0b1252433c58a1810581152a235e93deabf7f728eace350bcc4db4f249d4234bbd858c4e61a0eda4e3db0ae530c78eb63425502d651fd0cb986341ba69c44ede18eb3ebf25b2336cdda02447a9e20426d8206368c63b5fd6828612d3b99f627e331bab0009579de8270c36aa03861c300d34f2a3703870712325190073e6c17d8699f6744acb1b5468f93b57ab0366796181a4f543511d7ea2b32606c33cda61e81ed1c2194d305be47a3f1a9145d023620af12e79ec188573526ec35b9ce44e95fdb3530bd0431dd12a227d0ffe317cda1bbd787979261d6c9cf728b3d6bec3ba6ae15a595a30fc242bc5f25d837c1c642219afcfe043bb68a82965574b8b2139789235b262cf4af95a538e6954acf8e27ac3c95328df6e4bd615a376cd96bbc9e0d9802fbb40f80a848225e076219e26e0e63f57330b8bda69ec8dbd8b3272798cbfbb085b1885a1c22b3e2df2a879020ac1110b7af4f53ac97f556596ba0e164df0c85842026a87cf9631c9c9d851549efd8ca37e3b863e88436d5da5f4d3b5b5528e2d08d92b0d3ac6a06a0699653718e93a25b5afe254a068e300751eb6c67e3f5a1813d58d428f1ec108b88ec81444ccb50e8452941510c11f2e80bfd712f64b32b686c92ce922baf6c8eed1e9f0717a654d53b3ce1001880de80b5b15362b20286db9dfdf6c41f48aae84d5ab12ac45310f0eefc56e54113bcf95c1b2a259895af2ae9c679de4e2b898bf8a40a199a2059f8248c1303351dca3fb38906a682f66a94ee6ae6eafa7144758fabbaa60debd6eaaee7b2f1051781084b3c9d626263d011a3daf971b708750a77614753b89b5e1a77a52510ced5708083fb48c554dfd6aacfcf97650f3a3b3f97566050e76da968d4eceb83bc1e005ed1596d6e0ec5e2c90231e62496d7435ec5b28f805e3b7aefdd3718e4ff53065b8e4b15175d80eec59218d8278e711c6049bf6d62ae7069578e957135463d7616b37c1e4bf44d60dac6c7aa04cbbc4a64bb0cc0b059abb6b26f8ed5203232ddd8a6c5882e6e6c53068a71bc84c5834104e85bc96db2163798a3881929248b8c788e5bdc9e46e5f7f3f6ad43fad6fa381a0b924bd938702470b330fb90ba73d557c0d203d55edaed6e3a01aeb53b061dad57713ab27e1a9e0d06b534a65d85beb061bb5258bbb38179ea612a6f402affb8ca018ebf0d6f61d44d5a657c080c7d2dbc9b08c07713b17b0f173ada59b57abb401212f4f1fa026491b48d08cf46a704ab43e46de8ea596d68658523b61a156278b3b77bd1f4491381bfd874ed72b00675fd5b4b7c0ec13c6837434ba8e22230d32e7bb1287e488e14f5c5602cd4ca88012b244c7f23f4897e27027aa862ca139bc8b5fe14be7554832ab02e4ba19699a1e66825d94c7c44451062819a38d3376f0a3716b210c7adf4bfbbc303058aa2e054b3bd53539764f177b11b05451705550f90196997de3d1d480e500cd9d234078cb1a09c63d8911381d327402702c2765fe92b8ba3a0189b2b11b7460996c36eaae3ecb4f4e63bfafd7953ff086dfc0b12e616bbdca4707631467b830d244bd3f4371744bc8a4baac728a397818875d1b6a4a2f0d10be607122a6fe813f52e4456b8a5eb6c9ee0cf889f777a03cc26a055f9f259cfc4f8552b568a4b371260af062619dfb215ecfe7b318f8d627d2777bd5103d6ca2948d19d5812112962b63c2bf3d090ff19185dbc5ad49a580451de717c0baa288cd96669babe88a8b1ab6d0936c4c407878786695f46f59ef06c5c2166b661542c598b6e0551d490946182841184a7a0e669c6ccd73a342f65c4525dc7522dccab15fa72bd07588b5bca71635b9466ca72a504c74cca1c573e8d40d83d1b5c5326481ff8a2055a2e0fb997fe8e4787deaa2a8a57afe74a971e7f1f280895f2fc9d99c41416adef7b70ec47e7a12d0ca3c0ab1dba3c2d65bb172fde1fcd7f97692d3d8c9657e3277ce95947d59bf37dde3f35f7a5d76575f5c14caf7f0926c0896995a5f42efd0d38c42de202bea5b5db39bf697f9a96b54aefec723db523893186634763e7399bfa8029c2708dc817984528601c77a1d78bd4b2c85f10f5ca9363badcdab51a1b315cafa5c2ef64f60395f53efb9d60d89e1b2a5f147508c90d2b09476eee3cb9b5957669a77cd2c522909480dea9be3406d1779ffe4539f2e03efb5f8c2d040f0ea776ff869a36862246294d0ced556a129ef78327617052dc1ef5cfb4e5986ba2f0e063b90e1657d8977b58827a3c4e3d556eb3cf0540685f7c9eda461aa2ecc539fec3d2d56be99a518f11752f2be2f670c5fbe8010ac4eae0ede31c1a48f747ff2eac9fc069d3700a40bf5fcda80a3a4f5fa920f117a72de6da51195d2d7f0cc92ff7835bce2ba6b564832f582df56b24cf30c8297a826a4bbfe0afeb1da3e986b3d0a95509e0037d212a70178ecb246061e067238ea9238e4c4a9a7c6fc5dcba290970f50c52598423336c523f2de7580d059fb53934cb0beb208585e897fafeba30853e54badefa197478fe6b9f26ed0d33babb53acee7b7221d8e0cad7a6bd0d9383ced6391bf88ca7aa50c75c136075e87b92445f02fbbc92f7cb65fe2bbe0bf0c9fc2577da63a56f1efbeb276c1f4d01da6f6f7a842212d96dd45edcd2aee7f2c553ace15eb9336bb1804ec252998c5c8b25033894b05c01ce7c77b73ec0e239478c67d5378fe5a53fe6269025d54006e9bb1cbd09b81a39615517c609f3d74e377888f641587121f0f097b48d8be85800295ebab9407978a9cd379966577cb6e1f5261e4305696a2cdd50d8cb1964d3ae18ec730d40f9c782533efba47db8378c6aa15ce85985e211fff2659729599802a7b585cbef3a2762595f67e2054a0fb4457b146e7a656abb2c4b2387d760f7e5b8b7864132317d5ba29a662f50af8dc182d2fbe216db8e997ac856bc59855ca48999699cd6c5576cc47bf8a8c30638c7e08847e5083aa82068940409461d1065c2b53292d3ab145d5bb590bcd278e48ebd34920b18a2e1731c1855ae5a3ed637ff568d205a08cf98c58f5d79c99912e6c1ab257ece0d68ef13d69a56364419aac7df43f43d5faa9ad851c9810648f9050012e55475109ca3ada3452b78a7964377e0d862e022c73ca3ed6cee8c5fbb2d7c12f91c4851fea7c5b02e0a3c5364b7fcca110f20f8858465c498d7e9c6049417fc5c7d4e0059852a6d794af426e938a401cf43b2ba9f4f3f6f0f2eb710ecf3c0c36c4b3072597f805eca9cb14602292ec7d5601e6b1555c8d024aa4bb81a4cff98cb03725cb184ea7dbed6814106a1402bf68a2e51660af930a500d5530651a0dbf2fdc01a31a99be25350b5c8a5fe01155343d028c03e09009ef2c386a24eba8d842cac581402c8faec7dca1623afe25a230d8d4a8bd23df3cf12abedc2a50e387285acf1b3105011a2bdefb204a53b20be213b50f5244511f25852271e05c03fb9a799ac7ea675ffbde8de181368748a9707674e7e70f28a75e4036b6cf9e0693f91a65be4478b6630067ad8dae030a4b7b9784a206b2f7cfeeefc65aae11fc20190f4d6387bab05fa6e17f0bfbfb0c4f604878771aeace0676d12325e61b19a5317c4d4bb9fe6f3fc8b171f1116528b7cbcc4a91c26a729b512196828075f4d0aeac98887e2a6a19b4e1f1f66233962961c0d49df14c3e6123c9ec8dd7152ad045000107365fd5ed7ce6a6d65ae0736a7e227f77c9b0903d4589ac58ceb691583cdb93ae3fc792c886663cb7c5b0640deb66e29b3c69d2f1a3d1d47d7b672ee3c49e90bd406aa84a0189808924c4e67c5495b045e779c58ca65b42889f52d7315c66be3716dc8592b4875629cd0cb02c29d42bdf9ca5c16bc9051c2a6c09d0695bfba58c19a995838c022e9936c407d8999aa65e4a9d6d8eff99f8dcfac9b561375b6d1293441b9d32533161062c053c63ef09f6100cd748700a710f5bfc2a6297b15242b1f41e21bd004b885d6429a0d334a8c115f7d53d278dad24c9d295b97c50eb340d1e6d523f1757e2014c1605c3bd35f0cfdb74f79850423a37e2f95dfe41c56df09724d21065377f1818311f0c70aaf6fb2d4fc8d9eef576136617371d85481770ce9c390859eacfebba34e75a238ce80bcccadd6c42e8e186be3c15451131fbe9e345c05ab8e23f917d269686a9b5f06dd474f95757b9e5a3328416595539cbdfa69efa9702e5a268b1a70c6e5ff2c118a6e574bfecf17b1576e4f20fee566b0b2b5388476a68562991ac01412fa463b0f9e586ad4bde59e91a4b303268b5d8644cb7996cfbba422facd59875ed6ac057e563412255c412be0928a0b6fdb6f35d7008b5d5528ca796a4a69bd90b993a52da9c7d62f4b71a2763f822bb39f3ed39cc5ad5a4d51b5c27d31d105000f3f1e705ed5c42067106f3fe6d30151021bcab7f3a1ad9175b3d3644325aa676b9e057bf9d9aa3348b1d9b31bd639c59bb63f46a6c18794ae006db3b1ee20368160a82e26aee5a9fdc6b44df8be294f3ac0a1275e57ebf5e384b141ce89dd51aaf2248274468894645ba54bc4e6b9788b1eb5043c1f0dffe2e13c6179d0238d8cd037b6fe3e484445ab458fa09e4e8010d3288aa6e6cdbfba4b62c7984d058da8993d5de1df75a1ce8e3bd5875709fd2ede4cd5843e7102ed4031ed096a0c6e3ae9d522ad95ef4af83599507dd32fe3325819cdd7718c9797e921e6e365175e1dd53991edcd2baf27df8b1670d01967e97b3e3e75d297f908deedf2e3b91bd61973e8aa75a5a6f9db11525dd35556bbd13873602a320af74677832f93bd01f1e0631c882c8ab254a26b73a60a6c90cf9b96bd576e05b9befbce882c5d29198451bd15acaa894a5276ea9d870f49a33ee9d2429ef35a905b281deb75be54fa0c9e47be5876d7dce01986f2d0e7ae6df9b87a0ba6cfa55cec0c65dd386db5adc427eac18a00c9aded475417add4ebb8880ef3dd218a9ec3e6e13456f8de1630774e918fe5288dbaec3dd2a74698ec9e28ad573761b9e78af3d5c7a61e3eefc1a54c25bb841529b3fc9137836a2e7eff5ffae8e44f0257160da51ec0b3d144b92f1f43d2782513705baf5930903602d40cb4de87feca7243d2248a78a5d684e303ae147acc96e0b755eea77092b5f6efa723afc8a4240c75529dfe1c2fb75aa42d67e6b6c9a44c575738725815a9af1ced5", 0x2000, &(0x7f0000000340)={&(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x5040a, 0x7fff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m32.988393288s ago: executing program 5 (id=1799): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/fcloop/ctl/del_remote_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000980)='wwnn=0x10000', 0xc) 2m32.90880198s ago: executing program 5 (id=1801): r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') read$FUSE(r1, &(0x7f0000000740)={0x2020}, 0x2020) 2m32.837401871s ago: executing program 5 (id=1803): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000001c0)=0xfffffff8, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) 2m32.753640953s ago: executing program 5 (id=1806): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000080)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {@auto_da_alloc}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x48d, &(0x7f0000000980)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@redirect_dir_nofollow}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) sendfile(r0, r0, 0x0, 0x2000007ff) 2m32.342658124s ago: executing program 5 (id=1813): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/safesetid/gid_allowlist_policy\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/100, 0x64) 2m32.049083662s ago: executing program 5 (id=1816): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x402) pread64(r1, 0x0, 0xff00, 0x100000000) 2m31.952667604s ago: executing program 33 (id=1816): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x402) pread64(r1, 0x0, 0xff00, 0x100000000) 2m21.462500216s ago: executing program 6 (id=1961): capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x80000001, 0x7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1b, 0x0, &(0x7f0000000200)="b44c806305624431ed3373010001000000bf7e47d5fe008c639000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x800) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 2m21.391202308s ago: executing program 6 (id=1965): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000002c0)={0x5c, r0, 0xb97534d5fe9704cf, 0x1, 0xfffffffc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7fc}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2c9}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) 2m21.30104049s ago: executing program 6 (id=1966): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2, &(0x7f0000000340)={0x7, {{0x2, 0x0, @multicast2}}, {{0x2, 0x400, @dev={0xac, 0x14, 0x14, 0x17}}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000700)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x3, @multicast2}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/224, &(0x7f00000001c0)=0xe0) 2m21.231196452s ago: executing program 6 (id=1969): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'], 0x1, 0x1f7, &(0x7f00000004c0)="$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") mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000080)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 2m20.89703534s ago: executing program 6 (id=1973): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2m20.610813397s ago: executing program 6 (id=1978): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/apparmor/.access\x00', 0x2, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/29, 0x1d}], 0x1, 0x1, 0x2) 2m20.47587878s ago: executing program 34 (id=1978): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/apparmor/.access\x00', 0x2, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/29, 0x1d}], 0x1, 0x1, 0x2) 1m32.304849914s ago: executing program 4 (id=2732): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000360000006b00000000000000180000000000000001"], 0x30}}], 0x1, 0x4000000) 1m32.217521026s ago: executing program 4 (id=2735): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x34, r0, 0x1, 0x70bd29, 0xffffffbe, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffff001}]]}, 0x34}, 0x1, 0x0, 0x0, 0x24044040}, 0x20004056) 1m32.155509978s ago: executing program 4 (id=2736): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x243) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60840, 0x8) 1m32.089674269s ago: executing program 4 (id=2737): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m31.338249758s ago: executing program 4 (id=2753): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./trace\x00', &(0x7f0000000240)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./trace/error_log\x00', 0x20000, 0x4) pread64(r0, &(0x7f0000000300)=""/144, 0x90, 0x7d) 1m30.706929694s ago: executing program 4 (id=2763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xa, 0x1, 0x1, 0x0, 0x1000100000001}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) 1m30.640148445s ago: executing program 35 (id=2763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xa, 0x1, 0x1, 0x0, 0x1000100000001}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) 19.302727747s ago: executing program 2 (id=3774): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e00)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x300, 0x4e20, 0x8}}}}}, 0x0) 19.238121639s ago: executing program 2 (id=3777): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 19.113169422s ago: executing program 2 (id=3780): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x601c2, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) mount$9p_fd(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f00000000c0), 0x4000, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 19.040472644s ago: executing program 2 (id=3782): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x521, &(0x7f0000000500)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x141104, 0x80) 18.577059736s ago: executing program 2 (id=3789): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) read(r0, &(0x7f0000000400)=""/1000, 0x3e8) 16.157056596s ago: executing program 2 (id=3809): capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000003c0)={0x200000, 0x200000, 0x0, 0x0, 0x8, 0x1000004}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.99685603s ago: executing program 36 (id=3809): capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000003c0)={0x200000, 0x200000, 0x0, 0x0, 0x8, 0x1000004}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.596555835s ago: executing program 8 (id=3903): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) 4.442517619s ago: executing program 3 (id=3904): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x24, 0x1, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) 4.351225191s ago: executing program 8 (id=3906): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x405, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, 0x4508, 0x8008}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_ERSPAN_VER={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40010) 4.288995473s ago: executing program 3 (id=3907): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000007e01") 4.144757286s ago: executing program 3 (id=3910): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000006c0)=""/72, 0x48, 0x0, 0x0, 0x0, 0x3, 0x10000000}}, 0x120) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2) 3.97717512s ago: executing program 8 (id=3912): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rpc\x00') mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) getdents64(r0, &(0x7f0000000180)=""/41, 0x29) getdents64(r0, &(0x7f0000000f80)=""/4098, 0x1002) 3.864012633s ago: executing program 8 (id=3913): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 2.160145326s ago: executing program 3 (id=3914): bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) 2.115399487s ago: executing program 9 (id=3810): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x18000, &(0x7f0000005180), 0x81, 0x50d4, &(0x7f00000051c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143442, 0xc0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000002180)={0xe8, 0xb, 0x0, [{0x1, 0x3, 0x6, 0xfffffe00, 'btrfs\x00'}, {0x1, 0x6, 0x0, 0x500000}, {0x3, 0xffffffff, 0x6, 0x6, 'btrfs\x00'}, {0x3, 0x0, 0x6, 0x1000, 'btrfs\x00'}, {0x3, 0x100000000, 0x1, 0x4, '@'}, {0x1, 0x8, 0x6, 0xc0, 'btrfs\x00'}, {0x0, 0x6, 0x6, 0x7f, 'btrfs\x00'}]}, 0xe8) 2.017181859s ago: executing program 3 (id=3916): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f0000000000)=ANY=[], 0x1, 0x5504, &(0x7f000000c0c0)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) 1.313175717s ago: executing program 7 (id=3923): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/schedstat\x00', 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, 0x0, 0x0) sendfile(r1, r0, 0x0, 0xe7f) 1.253089238s ago: executing program 7 (id=3924): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) 1.167999311s ago: executing program 7 (id=3926): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000280)=0x6, 0x4) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000140)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="080000009c004662", 0x8}], 0x1}}], 0x1, 0x4800) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10020) 1.037213714s ago: executing program 1 (id=3927): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setreuid(0x0, 0xee00) bind$bt_hci(r0, &(0x7f0000000380), 0x6) ioctl$sock_bt_hci(r0, 0x400448e7, 0x0) 941.161897ms ago: executing program 7 (id=3928): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000240)='./file1\x00', 0x2000084c, &(0x7f0000000540)=ANY=[], 0x81, 0x14fc, &(0x7f0000002a80)="$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") creat(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe8) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 924.360547ms ago: executing program 1 (id=3929): setuid(0xee01) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x68000080) 757.252781ms ago: executing program 1 (id=3930): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x1, 0x4, 0x4, {0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x3a) 614.770304ms ago: executing program 1 (id=3931): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000005000100000000000500070019000000050011007f0000000c0009000200aaaaaaaaaaaa06000a00ffff00000c0009"], 0x4c}}, 0x0) 556.565666ms ago: executing program 9 (id=3932): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502007000040600666c6167730007020000000004", 0x31) 536.324426ms ago: executing program 3 (id=3933): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 534.934996ms ago: executing program 7 (id=3934): openat$kvm(0xffffffffffffff9c, 0x0, 0x40040, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000100)='./file0\x00', 0x8480, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYBLOB="107c70f21f6681b90bea5aaeaf8681826c7a5244f5a3345e013ed2d6a3ffffffffffffff7fafc079c730a07e76e70c41", @ANYRES8, @ANYRESDEC], 0x3, 0x237, &(0x7f0000000d00)="$eJzs2k+LW1UYB+D3jq1Tp0wz4j9aEA+6UDeXzqxddJAWxICijVAF6a2TaMg1GXLDQEScrHTrR3AtLt0J0qWb2fgJXLibzSy7EK+kidqUFBG1047Ps8kLJz/uOZxzD+/iHr7y5ce9TpV3ilGsZFmsXIpJ3MpiI1bid5N4+cVrPzz79rV3X99uNi+/ldKV7aubWymlc899/96n3zx/c3T2nW/PfbcaBxvvHx5t/Xzw9MH5w1+vftStUrdK/cEoFenGYDAqbpTttNOtenlKb5btomqnbr/aHy6Md8rB7u44Ff2d9bXdYbuqUtEfp157nEaDNBqOU/Fh0e2nPM/T+lrwT7S+vlXXcVSfvh51XT/2VZy9Ges/RSOyx1P2xKXsqevZM5Ps/FFdN457qvwn7P//2x2X+pmI8ou91l5r9jsb3+5EN8pox8VoxC8xPSZzs/rKa83LF9NtG/F5uT/P7++1HlnMb0YjNpbnN2f5tJhfjbWI0xHz/FY04snl+a2l+TPx0gt3PD+PRvz4QQyijJ2YZv/Mf7aZ0qtvNO/KX7j9PwCAkyZPf1jav+X5vcZn+b/RH97VX52KC6eOd+1EVONPekVZtocntpiu8gGYhuLfLFZjXmTT3f3LVBYxmZ6DB2Lyjz4cr96xXkvcJ4v3JAAAAAAAAAAAAA+L+/UFLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL38FgAA//+kh8qP") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x1000) 465.198769ms ago: executing program 1 (id=3935): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='appraise', 0x8) 304.054302ms ago: executing program 7 (id=3936): unshare(0x22020600) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001c00)={0x1, &(0x7f0000001c40)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 137.450546ms ago: executing program 8 (id=3937): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010300000000000000000500"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 52.949099ms ago: executing program 8 (id=3938): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x12) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001100034700bb65e1c3e4ffff0100b2a1010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 0s ago: executing program 1 (id=3939): r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x3, {{0xa, 0x4e23, 0x3, @mcast2, 0x10000002}}}, 0x88) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) kernel console output (not intermixed with test programs): long [ 230.775346][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 230.820835][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 230.900422][T11599] device veth1_vlan entered promiscuous mode [ 230.945187][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 230.987361][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 231.005134][T11847] loop7: detected capacity change from 0 to 1024 [ 231.102171][T11599] device veth0_macvtap entered promiscuous mode [ 231.128652][T11847] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.193278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 231.232067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 231.289478][T11599] device veth1_macvtap entered promiscuous mode [ 231.357528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 231.384478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 231.462971][T11599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.560095][T11599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.646978][T11599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.701389][T11599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.735012][T11845] loop3: detected capacity change from 0 to 32768 [ 231.759230][T11871] loop1: detected capacity change from 0 to 512 [ 231.777719][T11599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.829474][T11871] EXT4-fs (loop1): Ignoring removed oldalloc option [ 231.877853][T11845] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.2835 (11845) [ 231.896810][T11599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.906636][T11599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.936437][T11871] EXT4-fs error (device loop1): ext4_orphan_get:1436: comm syz.1.2849: bad orphan inode 15 [ 231.994883][T11845] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 232.027048][T11871] ext4_test_bit(bit=14, block=5) = 0 [ 232.032353][T11871] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,lazytime,oldalloc,stripe=0x0000000000000001,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 232.059419][T11599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.078664][T11845] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 232.129898][T11599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.149864][T11845] BTRFS info (device loop3): use zstd compression, level 3 [ 232.180995][T11599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.194312][T11845] BTRFS info (device loop3): using free space tree [ 232.216775][T11845] BTRFS info (device loop3): has skinny extents [ 232.242282][T11599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.249969][ T1110] Bluetooth: hci1: command 0x0419 tx timeout [ 232.264290][T11862] loop2: detected capacity change from 0 to 32768 [ 232.324277][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 232.383402][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 232.432008][T11890] loop7: detected capacity change from 0 to 2048 [ 232.461572][T11862] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 232.473894][T11845] BTRFS info (device loop3): enabling ssd optimizations [ 232.487108][T11871] EXT4-fs (loop1): Remounting file system with no journal so ignoring journalled data option [ 232.504754][T11599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.579867][T11599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.591807][T11890] EXT4-fs (loop7): mounted filesystem without journal. Opts: discard,max_dir_size_kb=0x0000000000000004,noquota,,errors=continue. Quota mode: none. [ 232.624299][T11599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.645936][T11599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.679808][T11599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.691570][T11599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.705795][T11599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.716451][T11599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.731361][T11599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.742015][T11599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.774764][ T4196] ocfs2: Unmounting device (7,2) on (node local) [ 232.782205][ T154] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 232.809276][T11599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.846790][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 232.855264][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 232.929902][ T154] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 232.989114][T11599] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.048384][T11599] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.060442][ T154] EXT4-fs (loop7): This should not happen!! Data will be lost [ 233.060442][ T154] [ 233.101056][T11599] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.119727][ T154] EXT4-fs (loop7): Total free blocks count 0 [ 233.125731][ T154] EXT4-fs (loop7): Free/Dirty block details [ 233.152833][T11599] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.166669][ T154] EXT4-fs (loop7): free_blocks=2415919104 [ 233.225588][ T154] EXT4-fs (loop7): dirty_blocks=16 [ 233.275293][ T154] EXT4-fs (loop7): Block reservation details [ 233.302258][ T154] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 233.788978][ T4262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.800759][T11923] loop2: detected capacity change from 0 to 128 [ 233.855193][ T4262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.946263][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 233.996154][T11925] loop7: detected capacity change from 0 to 4096 [ 234.005962][ T8829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.046287][ T8829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.103528][T11925] ntfs3: loop7: Different NTFS' sector size (2048) and media sector size (512) [ 234.139926][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 234.326793][ T4253] Bluetooth: hci1: command 0x0411 tx timeout [ 235.311305][T12003] loop8: detected capacity change from 0 to 1024 [ 235.499577][T11956] loop3: detected capacity change from 0 to 32768 [ 235.652104][T12018] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2888'. [ 236.004117][T12035] MTRR 1 not used [ 236.040041][T11987] loop7: detected capacity change from 0 to 32768 [ 236.155847][T12045] loop8: detected capacity change from 0 to 256 [ 236.249480][T12045] exfat: Deprecated parameter 'utf8' [ 236.254830][T12045] exfat: Deprecated parameter 'namecase' [ 236.376412][T12045] exfat: Deprecated parameter 'namecase' [ 236.382555][T12045] exfat: Deprecated parameter 'namecase' [ 236.483651][T12045] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 236.933958][T12078] input: syz0 as /devices/virtual/input/input14 [ 237.107617][T12086] vivid-001: disconnect [ 237.140404][T12084] vivid-001: reconnect [ 237.161446][T12089] loop7: detected capacity change from 0 to 128 [ 237.234300][T12089] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 237.253561][T12093] loop3: detected capacity change from 0 to 2048 [ 237.353294][T12089] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 237.383292][T12093] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 237.476839][T12093] attempt to access beyond end of device [ 237.476839][T12093] loop3: rw=524288, want=33554432, limit=2048 [ 237.488556][T12103] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 237.514030][T12101] loop1: detected capacity change from 0 to 4096 [ 237.683207][T12110] loop7: detected capacity change from 0 to 512 [ 237.777033][T12110] FAT-fs (loop7): bogus number of FAT sectors [ 237.792283][T12101] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 237.836130][T12110] FAT-fs (loop7): Can't find a valid FAT filesystem [ 238.187510][T12131] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 238.213277][ T8829] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 238.261468][ T4185] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 238.307875][ T4185] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 238.366074][ T4185] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 238.395528][T12137] loop2: detected capacity change from 0 to 1024 [ 238.423190][ T8829] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 238.486646][ T4185] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 238.510938][T12137] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 238.541154][T12107] loop8: detected capacity change from 0 to 32768 [ 238.602807][T12107] XFS: ikeep mount option is deprecated. [ 238.789445][T12151] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2935'. [ 238.789471][T12151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2935'. [ 238.789497][T12151] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2935'. [ 238.789504][T12151] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2935'. [ 238.828681][T12107] XFS (loop8): Mounting V5 Filesystem [ 238.899584][T12107] XFS (loop8): Ending clean mount [ 239.090126][T11599] XFS (loop8): Unmounting Filesystem [ 239.323721][T12175] sd 0:0:1:0: PR command failed: 2 [ 239.329015][ T9931] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 239.347016][T12175] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 239.382612][T12175] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 239.514759][T12183] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2948'. [ 239.551918][T12183] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2948'. [ 239.716214][ T9931] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.730127][ T9931] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 239.755436][ T9931] usb 3-1: New USB device found, idVendor=076d, idProduct=c262, bcdDevice= 0.00 [ 239.796135][T11918] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 239.805867][ T9931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.844163][ T9931] usb 3-1: config 0 descriptor?? [ 239.907450][ T9931] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 240.113039][T11171] usb 3-1: USB disconnect, device number 15 [ 240.180719][T11918] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 240.201740][T12201] bond0: option arp_validate: invalid value ( Ion) [ 240.220901][T11918] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 240.300971][T12196] XFS: ikeep mount option is deprecated. [ 240.385036][T12196] XFS (loop3): Mounting V5 Filesystem [ 240.426308][T11918] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 240.466145][T11918] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.499213][T11918] usb 8-1: Product: syz [ 240.513762][T11918] usb 8-1: Manufacturer: syz [ 240.532409][T11918] usb 8-1: SerialNumber: syz [ 240.553545][T11918] usb 8-1: config 0 descriptor?? [ 240.575162][T12196] XFS (loop3): Ending clean mount [ 240.672004][T12229] set_capacity_and_notify: 2 callbacks suppressed [ 240.672015][T12229] loop8: detected capacity change from 0 to 128 [ 240.697649][ T4195] XFS (loop3): Unmounting Filesystem [ 240.784920][T12233] loop1: detected capacity change from 0 to 512 [ 240.797115][T12229] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 240.878480][T12233] EXT4-fs (loop1): Test dummy encryption mode enabled [ 240.986959][T11918] usb 8-1: USB disconnect, device number 9 [ 241.006583][T12233] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 241.070927][T12233] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 241.150013][T12233] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,inode_readahead_blks=0x0000000000080000,prjquota,noauto_da_alloc,barrier=0x0000000000000003,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 241.177991][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.345407][T12233] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.2967: Directory hole found for htree leaf block 0 [ 241.972473][T12272] loop3: detected capacity change from 0 to 4096 [ 242.047066][T12272] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 242.581514][T12260] loop2: detected capacity change from 0 to 32768 [ 242.654154][T12260] XFS: ikeep mount option is deprecated. [ 242.699627][T12314] loop3: detected capacity change from 0 to 512 [ 242.793255][T12260] XFS (loop2): Mounting V5 Filesystem [ 242.798911][T12314] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 242.873853][T12260] XFS (loop2): Ending clean mount [ 242.884872][T12323] loop1: detected capacity change from 0 to 4096 [ 242.892685][T12314] EXT4-fs (loop3): 1 truncate cleaned up [ 242.906300][T12314] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodioread_nolock,nolazytime,,errors=continue. Quota mode: none. [ 242.952275][T12323] EXT4-fs (loop1): Test dummy encryption mode enabled [ 243.001333][T12323] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,resuid=0x0000000000000000,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,auto_da_alloc=0x00000000000001a3,,errors=continue. Quota mode: writeback. [ 243.026441][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.060233][ T4196] XFS (loop2): Unmounting Filesystem [ 243.132481][T12337] loop8: detected capacity change from 0 to 2048 [ 243.225007][T12337] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 243.291653][T12342] loop7: detected capacity change from 0 to 256 [ 243.307966][ T5813] udevd[5813]: incorrect nilfs2 checksum on /dev/loop8 [ 243.372982][T12344] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 243.447883][T12342] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 243.616215][T12348] loop8: detected capacity change from 0 to 256 [ 243.819207][T12352] loop1: detected capacity change from 0 to 64 [ 244.176494][T12363] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 244.374540][T12377] phram: illegal start address [ 244.698599][T12403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3031'. [ 244.969370][T12413] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 245.070510][T12421] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 245.186176][T11918] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 245.280291][T12386] XFS (loop8): Mounting V5 Filesystem [ 245.364419][T12386] XFS (loop8): Ending clean mount [ 245.520133][T11599] XFS (loop8): Unmounting Filesystem [ 245.566928][T11918] usb 3-1: config 1 has an invalid descriptor of length 216, skipping remainder of the config [ 245.604914][T11918] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 245.646404][T11918] usb 3-1: config 1 has no interface number 0 [ 245.686493][T11918] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 245.831425][T12456] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3053'. [ 245.907683][T11918] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.951505][T11918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.981807][T11918] usb 3-1: Product: syz [ 245.991903][T11918] usb 3-1: Manufacturer: syz [ 246.008933][T11918] usb 3-1: SerialNumber: syz [ 246.018994][T12427] set_capacity_and_notify: 4 callbacks suppressed [ 246.019002][T12427] loop1: detected capacity change from 0 to 32768 [ 246.083160][T11918] usb 3-1: selecting invalid altsetting 1 [ 246.142008][T12427] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.3040 (12427) [ 246.221894][T12462] loop3: detected capacity change from 0 to 128 [ 246.312466][T12462] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 246.333494][T12427] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 246.392852][T12427] BTRFS info (device loop1): using free space tree [ 246.399789][T12462] ext4 filesystem being mounted at /615/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.449270][T12427] BTRFS info (device loop1): has skinny extents [ 246.479305][T12466] loop7: detected capacity change from 0 to 8192 [ 246.554140][T12466] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 246.651795][T12427] BTRFS info (device loop1): enabling ssd optimizations [ 246.729720][T11918] cdc_ncm 3-1:1.1: SET_CRC_MODE failed [ 246.763397][T11918] usb 3-1: selecting invalid altsetting 1 [ 246.783635][T11918] cdc_ncm 3-1:1.1: bind() failure [ 246.816171][T11171] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 246.838398][T11918] usb 3-1: USB disconnect, device number 16 [ 246.980532][T12427] BTRFS info (device loop1): balance: start -d -m -s [ 247.038244][T12427] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata [ 247.109298][T11171] usb 9-1: Using ep0 maxpacket: 32 [ 247.152298][T12505] loop7: detected capacity change from 0 to 4096 [ 247.226812][T12505] ntfs3: loop7: Different NTFS' sector size (2048) and media sector size (512) [ 247.246220][T11171] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 247.288295][T11171] usb 9-1: config 0 has no interface number 0 [ 247.416207][T12505] ntfs3: loop7: Failed to load $BadClus. [ 247.460589][T12427] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata [ 247.495360][T11171] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 247.549953][T11171] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.603095][T11171] usb 9-1: Product: syz [ 247.643692][T11171] usb 9-1: Manufacturer: syz [ 247.678231][T11171] usb 9-1: SerialNumber: syz [ 247.687371][T12427] BTRFS info (device loop1): balance: canceled [ 247.726455][T11171] usb 9-1: config 0 descriptor?? [ 247.771952][T11171] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 247.918832][T12538] loop7: detected capacity change from 0 to 512 [ 247.977710][T11171] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 248.010839][T12538] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 248.076799][T11171] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 248.117844][T12538] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.3071: invalid indirect mapped block 9 (level 0) [ 248.219254][T12538] EXT4-fs (loop7): 1 truncate cleaned up [ 248.255472][T12538] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none. [ 248.406568][ C0] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 248.450135][T12526] loop2: detected capacity change from 0 to 32768 [ 248.501989][T12526] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.3068 (12526) [ 248.608473][T12526] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 248.657790][T12526] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 248.740100][T12526] BTRFS info (device loop2): use zstd compression, level 3 [ 248.779297][T12526] BTRFS info (device loop2): using free space tree [ 248.815369][T12526] BTRFS info (device loop2): has skinny extents [ 248.924169][ T4346] usb 9-1: USB disconnect, device number 2 [ 248.969161][ T4346] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 248.988064][T12526] BTRFS info (device loop2): enabling ssd optimizations [ 249.053273][ T4346] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 249.111238][ T4346] quatech2 9-1:0.51: device disconnected [ 249.387200][T12602] loop3: detected capacity change from 0 to 512 [ 249.495195][T12602] EXT4-fs (loop3): Ignoring removed nobh option [ 249.569437][T12602] EXT4-fs (loop3): 1 truncate cleaned up [ 249.616950][T12602] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,errors=remount-ro,nombcache,noload,nobh,debug_want_extra_isize=0x0000000000000008,. Quota mode: none. [ 249.661217][T12616] loop7: detected capacity change from 0 to 128 [ 249.726579][T12616] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 249.806249][T12616] hpfs: filesystem error: improperly stopped [ 249.833080][T12616] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 249.863690][T12616] hpfs: You really don't want any checks? You are crazy... [ 249.894605][T12616] hpfs: Code page index out of array [ 249.920359][T12616] hpfs: code page support is disabled [ 249.946381][T12616] hpfs: hpfs_map_4sectors(): unaligned read [ 249.971888][T12616] hpfs: hpfs_map_4sectors(): unaligned read [ 249.999794][T12616] hpfs: filesystem error: unable to find root dir [ 250.332576][T12631] loop1: detected capacity change from 0 to 1024 [ 250.469611][T12631] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,max_dir_size_kb=0x0000000000000007,noquota,delalloc,noblock_validity,nodioread_nolock,errors=remount-ro,. Quota mode: none. [ 250.532037][T12645] scsi_dev_info_list_add_str: bad dev info string 'e' '(null)' '(null)' [ 250.666191][T12631] ext4 filesystem being mounted at /609/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.134754][T12679] Invalid input. Must be >= 2304 [ 251.447631][T12647] loop7: detected capacity change from 0 to 32768 [ 251.529917][T12647] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 scanned by syz.7.3094 (12647) [ 251.671469][T12647] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 251.756554][T12647] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 251.856107][T12647] BTRFS info (device loop7): use zstd compression, level 3 [ 251.933790][T12647] BTRFS info (device loop7): using free space tree [ 251.986230][T12647] BTRFS info (device loop7): has skinny extents [ 252.190002][T12763] loop1: detected capacity change from 0 to 1024 [ 252.218231][T12647] BTRFS info (device loop7): enabling ssd optimizations [ 252.662568][T12788] loop3: detected capacity change from 0 to 512 [ 252.869181][T12796] loop8: detected capacity change from 0 to 128 [ 252.938170][T12796] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 253.001524][T12796] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.150909][T12769] loop2: detected capacity change from 0 to 32768 [ 253.339193][T12769] XFS (loop2): Mounting V5 Filesystem [ 253.456926][T12814] loop3: detected capacity change from 0 to 256 [ 253.559926][T12814] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 253.599389][T12769] XFS (loop2): Ending clean mount [ 253.693785][T12825] loop1: detected capacity change from 0 to 256 [ 253.860339][T12831] loop8: detected capacity change from 0 to 8 [ 253.874793][ T4196] XFS (loop2): Unmounting Filesystem [ 253.984501][T12831] SQUASHFS error: Failed to read block 0x260685: -5 [ 254.058513][T12831] SQUASHFS error: Unable to read metadata cache entry [260685] [ 254.097417][T12831] SQUASHFS error: Unable to read directory block [260685:0] [ 254.169817][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.176154][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.240712][T12846] serial 00:04: in use; can't configure [ 254.617918][T12866] loop8: detected capacity change from 0 to 512 [ 254.698194][T12866] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 254.811673][T12866] EXT4-fs error (device loop8): ext4_validate_block_bitmap:420: comm syz.8.3157: bg 0: bad block bitmap checksum [ 255.255356][T12909] loop2: detected capacity change from 0 to 512 [ 255.318023][T12909] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 255.380804][T12909] System zones: 1-12 [ 255.424259][T12909] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.3172: missing EA_INODE flag [ 255.445894][T12909] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.3172: error while reading EA inode 12 err=-117 [ 255.467740][T12909] EXT4-fs (loop2): 1 orphan inode deleted [ 255.473829][T12909] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 255.581570][T12925] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 255.685847][T12925] hpfs: filesystem error: improperly stopped [ 255.742685][T12925] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 255.797280][T12925] hpfs: You really don't want any checks? You are crazy... [ 255.840665][T12925] hpfs: Code page index out of array [ 255.890616][T12925] hpfs: code page support is disabled [ 255.910797][T12925] hpfs: hpfs_map_4sectors(): unaligned read [ 255.928510][T12925] hpfs: hpfs_map_4sectors(): unaligned read [ 255.943403][T12925] hpfs: filesystem error: unable to find root dir [ 256.102224][T12953] program syz.8.3189 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.115115][T12949] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3190'. [ 256.331366][T12961] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 256.379605][T12970] tipc: Started in network mode [ 256.409021][T12970] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 256.462030][T12970] tipc: Enabled bearer , priority 0 [ 256.652411][T12961] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 256.709615][T12979] set_capacity_and_notify: 3 callbacks suppressed [ 256.709626][T12979] loop2: detected capacity change from 0 to 128 [ 256.773268][ T4329] kernel write not supported for file /input/event0 (pid: 4329 comm: kworker/0:9) [ 256.820151][T12979] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 256.848891][ T9] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 256.863871][ T4195] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 256.882372][ T4195] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 256.903360][T12979] hpfs: filesystem error: improperly stopped [ 256.919910][ T4195] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 256.938146][T12979] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 256.957885][ T9] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 256.979391][T12979] hpfs: You really don't want any checks? You are crazy... [ 256.991218][ T4195] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 257.011000][ T4195] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 257.028882][T12979] hpfs: Code page index out of array [ 257.043281][T12979] hpfs: code page support is disabled [ 257.102303][T12979] hpfs: hpfs_map_4sectors(): unaligned read [ 257.121392][T12979] hpfs: hpfs_map_4sectors(): unaligned read [ 257.134007][T12979] hpfs: filesystem error: unable to find root dir [ 257.334875][T13000] loop7: detected capacity change from 0 to 4096 [ 257.371350][T13009] loop3: detected capacity change from 0 to 512 [ 257.430157][T13000] NILFS (loop7): invalid segment: Checksum error in segment payload [ 257.482460][T13009] EXT4-fs (loop3): Ignoring removed bh option [ 257.542176][T13000] NILFS (loop7): trying rollback from an earlier position [ 257.550958][T13009] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 257.566090][ T4356] tipc: Node number set to 43690 [ 257.624839][T13000] NILFS (loop7): recovery complete [ 257.631467][T13009] EXT4-fs (loop3): 1 truncate cleaned up [ 257.655394][T13009] EXT4-fs (loop3): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 257.676837][T13017] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 257.833948][T13021] input: syz1 as /devices/virtual/input/input17 [ 258.194988][T13010] loop2: detected capacity change from 0 to 32768 [ 258.282146][T13010] JBD2: Ignoring recovery information on journal [ 258.412128][T13010] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 258.540204][T13059] block2mtd: illegal erase size [ 258.552059][T13010] (syz.2.3218,13010,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len is smaller than minimal - offset=255, inode=0, rec_len=0, name_len=0 [ 258.693206][ T4196] ocfs2: Unmounting device (7,2) on (node local) [ 258.757883][T13067] loop8: detected capacity change from 0 to 64 [ 258.768784][T13037] loop3: detected capacity change from 0 to 32768 [ 258.838296][T13067] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 258.894608][T13037] XFS (loop3): Mounting V5 Filesystem [ 258.997830][T13037] XFS (loop3): Ending clean mount [ 259.175823][T13088] kAFS: bad VL server IP address [ 259.183753][ T4195] XFS (loop3): Unmounting Filesystem [ 259.518364][T13102] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3256'. [ 259.561154][ T25] audit: type=1400 audit(2000000021.840:85): apparmor="STATUS" info="failed to unpack policydb" error=-71 profile="unconfined" name="p" pid=13103 comm="syz.7.3258" name="p" offset=92 [ 259.871305][T13089] loop8: detected capacity change from 0 to 32768 [ 259.959185][T13089] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.3249 (13089) [ 260.056569][T13121] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.083846][T13089] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 260.125446][T13089] BTRFS info (device loop8): using free space tree [ 260.168415][T13089] BTRFS info (device loop8): has skinny extents [ 260.306187][ T2297] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 260.316251][T13089] BTRFS info (device loop8): enabling ssd optimizations [ 260.409328][T13151] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3270'. [ 260.455468][T13089] BTRFS info (device loop8): balance: start -d -m -s [ 260.490010][T13089] BTRFS info (device loop8): relocating block group 6881280 flags data|metadata [ 260.569053][ T2297] usb 8-1: Using ep0 maxpacket: 16 [ 260.651012][T13089] BTRFS info (device loop8): relocating block group 5242880 flags data|metadata [ 260.696201][ T2297] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.748368][ T2297] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 260.773739][T13164] netlink: 'syz.1.3276': attribute type 10 has an invalid length. [ 260.838116][T13164] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.869727][T13089] BTRFS info (device loop8): balance: canceled [ 260.943732][T13164] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.950970][T13164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.979341][ T2297] usb 8-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 260.999487][ T2297] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.012119][T13164] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 261.030593][ T2297] usb 8-1: Product: syz [ 261.047080][ T2297] usb 8-1: Manufacturer: syz [ 261.051797][ T2297] usb 8-1: SerialNumber: syz [ 261.060326][T13166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3276'. [ 261.079282][ T2297] usb 8-1: config 0 descriptor?? [ 261.085095][T13166] device bridge_slave_1 left promiscuous mode [ 261.120417][T13166] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.129472][ T2297] mcba_usb 8-1:0.0: Can't find endpoints [ 261.363494][T13166] bond0: (slave bridge0): Releasing backup interface [ 261.380375][T13119] udc-core: couldn't find an available UDC or it's busy [ 261.402731][T13119] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 261.449080][ T4316] usb 8-1: USB disconnect, device number 10 [ 261.742521][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3289'. [ 261.788085][T13197] program syz.8.3291 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.240177][T13215] loop7: detected capacity change from 0 to 512 [ 262.250628][T13180] loop3: detected capacity change from 0 to 32768 [ 262.419082][T13215] EXT4-fs (loop7): Ignoring removed bh option [ 262.522333][T13180] XFS (loop3): Mounting V5 Filesystem [ 262.553729][T13215] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 262.716943][T13180] XFS (loop3): Ending clean mount [ 262.722796][T13215] EXT4-fs (loop7): 1 truncate cleaned up [ 262.763309][T13215] EXT4-fs (loop7): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 262.820926][ T4195] XFS (loop3): Unmounting Filesystem [ 262.943996][T13237] loop1: detected capacity change from 0 to 4096 [ 263.056970][ T4316] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 263.287517][ T6164] Bluetooth: hci3: command 0x0406 tx timeout [ 263.326095][ T4316] usb 3-1: Using ep0 maxpacket: 8 [ 263.552986][T13248] loop1: detected capacity change from 0 to 164 [ 263.636273][ T4316] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 263.733915][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.772494][T13248] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 263.820866][ T4316] usb 3-1: Product: syz [ 263.825437][ T4316] usb 3-1: Manufacturer: syz [ 263.849245][ T4316] usb 3-1: SerialNumber: syz [ 263.981693][T13254] netlink: 'syz.7.3315': attribute type 2 has an invalid length. [ 264.005087][T13254] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3315'. [ 264.142528][T13258] loop1: detected capacity change from 0 to 512 [ 264.287356][T13258] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.3316: inode has both inline data and extents flags [ 264.376850][ T4316] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 264.506484][T13258] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.3316: couldn't read orphan inode 15 (err -117) [ 264.550813][T13268] netlink: 'syz.7.3320': attribute type 10 has an invalid length. [ 264.584999][T13268] device geneve0 entered promiscuous mode [ 264.591527][ T4316] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 264.604944][T13258] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 264.629273][T13272] binder: 13270:13272 ioctl c018620c 200000000040 returned -22 [ 264.662361][T13273] loop8: detected capacity change from 0 to 512 [ 264.674423][T13272] binder: 13270:13272 ioctl c0306201 200000000300 returned -22 [ 264.738979][T13273] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 264.781826][T13273] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 264.829556][ T4316] snd-usb-audio: probe of 3-1:1.2 failed with error -22 [ 264.845917][T13273] System zones: 0-1, 15-15, 18-18, 34-34 [ 264.863419][T13273] EXT4-fs (loop8): orphan cleanup on readonly fs [ 264.889133][ T4331] udevd[4331]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.919942][ T4316] usb 3-1: USB disconnect, device number 17 [ 264.939483][T13273] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=0 [ 265.015340][T13280] comedi comedi0: comedi_test: 1000000 microvolt, 100000 microsecond waveform attached [ 265.036120][T13273] EXT4-fs warning (device loop8): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 265.130340][T13273] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 265.152921][T13283] comedi comedi1: Minor -1 is invalid! [ 265.172257][T13273] EXT4-fs error (device loop8): ext4_orphan_get:1436: comm syz.8.3332: bad orphan inode 16 [ 265.224952][T13273] ext4_test_bit(bit=15, block=18) = 1 [ 265.250322][T13273] is_bad_inode(inode)=0 [ 265.266146][T13273] NEXT_ORPHAN(inode)=0 [ 265.270223][T13273] max_ino=32 [ 265.305038][T13273] i_nlink=2 [ 265.313863][T13273] EXT4-fs (loop8): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 265.413576][T13292] kvm [13290]: vcpu2, guest rIP: 0xfff0 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 265.439308][T13273] fscrypt (loop8, inode 16): Error -61 getting encryption context [ 265.470342][T13273] fscrypt (loop8, inode 16): Error -61 getting encryption context [ 265.533970][T13277] loop7: detected capacity change from 0 to 32768 [ 265.628802][T13277] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.3323 (13277) [ 265.773327][T13277] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 265.841378][T13277] BTRFS info (device loop7): using free space tree [ 265.887121][T13277] BTRFS info (device loop7): has skinny extents [ 266.082355][T13277] BTRFS info (device loop7): enabling ssd optimizations [ 266.250227][T13277] BTRFS info (device loop7): balance: start -d -m -s [ 266.285483][T13277] BTRFS info (device loop7): relocating block group 6881280 flags data|metadata [ 266.313382][T13365] loop2: detected capacity change from 0 to 256 [ 266.414249][T13365] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7cc0afd3, utbl_chksum : 0xe619d30d) [ 266.495642][T13277] BTRFS info (device loop7): relocating block group 5242880 flags data|metadata [ 266.641607][T13277] BTRFS info (device loop7): balance: canceled [ 266.732616][T13381] loop8: detected capacity change from 0 to 2048 [ 266.765175][T13385] loop2: detected capacity change from 0 to 1024 [ 266.950250][T13385] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 267.007754][T13385] ext4 filesystem being mounted at /682/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.171038][T13362] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 267.178840][T13362] IPv6: NLM_F_CREATE should be set when creating new route [ 267.186095][T13362] IPv6: NLM_F_CREATE should be set when creating new route [ 267.193299][T13362] IPv6: NLM_F_CREATE should be set when creating new route [ 267.292937][T13390] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 267.292937][T13390] [ 267.396826][T13390] ialloc: diAlloc returned -5! [ 267.469403][T13394] netlink: 'syz.3.3371': attribute type 10 has an invalid length. [ 267.577385][T13394] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 267.606451][ T4262] wlan1: Trigger new scan to find an IBSS to join [ 267.675184][T13397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3371'. [ 267.750262][T13397] bond0: (slave bridge0): Releasing backup interface [ 267.914201][T13411] set_capacity_and_notify: 1 callbacks suppressed [ 267.914211][T13411] loop1: detected capacity change from 0 to 128 [ 267.980990][T13418] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 268.198860][T13423] loop2: detected capacity change from 0 to 2048 [ 268.360140][ T6164] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 268.417379][T13423] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 268.551732][ T2297] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 268.672414][T13414] loop3: detected capacity change from 0 to 32768 [ 268.684198][T13436] loop8: detected capacity change from 0 to 256 [ 268.716405][ T6164] usb 8-1: not running at top speed; connect to a high speed hub [ 268.740143][T13414] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.3378 (13414) [ 268.822526][T13414] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 268.899822][T13414] BTRFS info (device loop3): using free space tree [ 268.935358][T13414] BTRFS info (device loop3): has skinny extents [ 268.946271][ T2297] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 268.965515][ T2297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.012912][ T2297] usb 2-1: config 0 descriptor?? [ 269.020019][ T6164] usb 8-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 269.060133][ T6164] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.078758][ T2297] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 269.087495][T13414] BTRFS info (device loop3): enabling ssd optimizations [ 269.118312][ T6164] usb 8-1: Product: syz [ 269.122474][ T6164] usb 8-1: Manufacturer: syz [ 269.135362][T13463] ODEBUG: Out of memory. ODEBUG disabled [ 269.151339][ T6164] usb 8-1: SerialNumber: syz [ 269.214650][T13414] BTRFS info (device loop3): balance: start -d -m -s [ 269.223434][ T6164] keyspan 8-1:1.0: Keyspan 4 port adapter converter detected [ 269.242517][T13414] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata [ 269.258110][ T6164] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 269.290017][ T6164] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 269.320901][T13414] BTRFS info (device loop3): relocating block group 5242880 flags data|metadata [ 269.330233][ T4329] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 269.348475][ T6164] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 269.371908][ T6164] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 269.506164][ T2297] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 269.556382][ C0] usb 8-1: malformed indat packet [ 269.576381][ C0] usb 8-1: malformed indat packet [ 269.596102][ C0] usb 8-1: malformed indat packet [ 269.604236][ T4329] usb 3-1: Using ep0 maxpacket: 8 [ 269.616071][ C0] usb 8-1: malformed indat packet [ 269.637278][ C0] usb 8-1: malformed indat packet [ 269.656054][ C0] usb 8-1: malformed indat packet [ 269.674545][T13414] BTRFS info (device loop3): found 10 extents, stage: move data extents [ 269.683001][ C0] usb 8-1: malformed indat packet [ 269.696052][ C0] usb 8-1: malformed indat packet [ 269.741648][T13414] BTRFS info (device loop3): balance: canceled [ 269.906411][ T4329] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 269.930519][T13485] loop8: detected capacity change from 0 to 256 [ 269.940310][ T2297] gspca_cpia1: usb_control_msg 02, error -71 [ 269.946424][ T4329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.954498][ T2297] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 269.973272][ T4329] usb 3-1: Product: syz [ 270.006192][ T2297] usb 2-1: USB disconnect, device number 11 [ 270.012200][ T4329] usb 3-1: Manufacturer: syz [ 270.032011][ T4329] usb 3-1: SerialNumber: syz [ 270.055809][ T4329] usb 3-1: config 0 descriptor?? [ 270.101117][ T4329] gspca_main: sq930x-2.14.0 probing 2770:930c [ 270.235253][ T6164] usb 8-1: USB disconnect, device number 11 [ 270.249035][ T6164] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 270.265617][ T6164] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 270.284325][ T6164] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 270.304112][ T6164] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 270.315814][ T6164] keyspan 8-1:1.0: device disconnected [ 270.332788][ T4346] Bluetooth: hci0: command 0x0c20 tx timeout [ 270.646302][ T3083] wlan1: Trigger new scan to find an IBSS to join [ 270.654598][T13508] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 270.956124][ T4329] gspca_sq930x: ucbus_write failed -71 [ 271.196194][ T4329] gspca_sq930x: Sensor ov9630 not yet treated [ 271.202304][ T4329] sq930x: probe of 3-1:0.0 failed with error -22 [ 271.218822][ T4329] usb 3-1: USB disconnect, device number 18 [ 271.503814][T13515] ima: rule for LSM 'u' is undefined [ 271.543877][ T25] audit: type=1807 audit(2000000033.780:86): action=measure func=FILE_CHECK obj_type=u res=1 [ 271.560279][T13510] ima: policy update completed [ 271.610498][ T25] audit: type=1802 audit(2000000033.870:87): pid=13510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.7.3423" res=1 errno=0 [ 271.704790][T13527] loop3: detected capacity change from 0 to 512 [ 271.739603][ T25] audit: type=1400 audit(2000000033.930:88): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=13522 comm="syz.1.3417" name="p" offset=48 [ 271.799801][T13532] loop8: detected capacity change from 0 to 512 [ 271.816793][T13527] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 271.880978][T13532] EXT4-fs error (device loop8): ext4_orphan_get:1410: inode #15: comm syz.8.3422: inode has both inline data and extents flags [ 271.990378][T13540] loop7: detected capacity change from 0 to 512 [ 272.011865][T13532] EXT4-fs error (device loop8): ext4_orphan_get:1415: comm syz.8.3422: couldn't read orphan inode 15 (err -117) [ 272.063478][T13540] FAT-fs (loop7): Unrecognized mount option "ÿòÖ›”6GJRšò�þ餂 „Õ.¦zQ\wFMx»7D7U çd~õôÿzGcxàEóÓb4ð�'ûˆòIGà(äæ;Õeî7+Êž:‰!Y/Qš‘žÅ:|Ö¿Œ'ÊW—øMfº·_³€Z�ݤ8{•­Vƒ@� Ay©”v7®Û¾ý†Ñ?3±/Rëç 5�?þ: !lÀõ\zú{0»oóéÙ-ôþ†a18446744073709551615" or missing value [ 272.124266][T13532] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 272.267246][ T25] audit: type=1400 audit(2000000034.550:89): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=13549 comm="syz.3.3432" [ 272.364673][T13554] pim6reg0: tun_chr_ioctl cmd 1074025678 [ 272.405849][T13518] loop2: detected capacity change from 0 to 32768 [ 272.416194][T13554] pim6reg0: group set to 0 [ 272.478453][T13518] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.3411 (13518) [ 272.598683][T13518] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 272.641871][T13565] loop7: detected capacity change from 0 to 2048 [ 272.669243][T13518] BTRFS info (device loop2): using free space tree [ 272.740899][T13518] BTRFS info (device loop2): has skinny extents [ 272.761228][T13565] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.946100][T13518] BTRFS info (device loop2): enabling ssd optimizations [ 273.020775][T13594] UDF-fs: error (device loop7): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a [ 273.085323][T13601] set_capacity_and_notify: 1 callbacks suppressed [ 273.085334][T13601] loop3: detected capacity change from 0 to 2048 [ 273.106833][T13518] BTRFS info (device loop2): balance: start -d -m -s [ 273.132143][T13518] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata [ 273.164287][T13601] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 273.234735][T13601] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 273.270395][T13518] BTRFS info (device loop2): relocating block group 5242880 flags data|metadata [ 273.435603][T13518] BTRFS info (device loop2): balance: canceled [ 273.611349][ T3083] wlan1: Trigger new scan to find an IBSS to join [ 273.875538][T13621] loop1: detected capacity change from 0 to 512 [ 273.901984][T13623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3458'. [ 273.926648][ T9931] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 273.960079][T13621] EXT4-fs (loop1): Ignoring removed orlov option [ 274.025632][T13621] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,orlov,quota,,errors=continue. Quota mode: writeback. [ 274.094140][T13621] ext4 filesystem being mounted at /680/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.229561][ T9931] usb 8-1: Using ep0 maxpacket: 32 [ 274.356348][ T9931] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 274.364472][ T9931] usb 8-1: config 0 has no interface number 0 [ 274.410034][T13651] loop8: detected capacity change from 0 to 1024 [ 274.469859][T13651] EXT4-fs error (device loop8): ext4_map_blocks:741: inode #3: block 1: comm syz.8.3469: lblock 1 mapped to illegal pblock 1 (length 1) [ 274.552344][ T9] wlan1: Creating new IBSS network, BSSID 42:2e:b9:dd:d1:7c [ 274.589770][T13651] EXT4-fs (loop8): Remounting filesystem read-only [ 274.596752][ T9931] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 274.605827][ T9931] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.643140][T13651] Quota error (device loop8): write_blk: dquota write failed [ 274.687310][T13651] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 274.699952][ T9931] usb 8-1: Product: syz [ 274.704101][ T9931] usb 8-1: Manufacturer: syz [ 274.749333][ T9931] usb 8-1: SerialNumber: syz [ 274.754720][T13651] EXT4-fs error (device loop8): ext4_acquire_dquot:6236: comm syz.8.3469: Failed to acquire dquot type 0 [ 274.789677][ T9931] usb 8-1: config 0 descriptor?? [ 274.829492][T13651] EXT4-fs (loop8): Remounting filesystem read-only [ 274.856883][ T9931] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 274.871814][T13643] loop3: detected capacity change from 0 to 32768 [ 274.878681][T13651] EXT4-fs error (device loop8): ext4_free_blocks:6231: comm syz.8.3469: Freeing blocks not in datazone - block = 0, count = 4096 [ 274.941517][T13643] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.3464 (13643) [ 274.962810][T13667] loop2: detected capacity change from 0 to 128 [ 274.986815][T13651] EXT4-fs (loop8): Remounting filesystem read-only [ 275.025119][T13667] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 275.043369][T13651] EXT4-fs error (device loop8): ext4_read_inode_bitmap:140: comm syz.8.3469: Invalid inode bitmap blk 0 in block_group 0 [ 275.062329][ T4262] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 275.082850][ T9931] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 275.099036][T13643] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 275.141266][ T9931] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 275.151857][T13643] BTRFS info (device loop3): using free space tree [ 275.162047][T13667] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.181341][T13651] EXT4-fs (loop8): Remounting filesystem read-only [ 275.190354][ T4262] EXT4-fs (loop8): Remounting filesystem read-only [ 275.207384][T13643] BTRFS info (device loop3): has skinny extents [ 275.218619][T13651] EXT4-fs error (device loop8) in ext4_free_inode:362: Corrupt filesystem [ 275.252721][ T4262] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 275.324274][ T4262] EXT4-fs error (device loop8): ext4_release_dquot:6272: comm kworker/u4:5: Failed to release dquot type 0 [ 275.343108][T13651] EXT4-fs (loop8): Remounting filesystem read-only [ 275.373822][T13651] EXT4-fs (loop8): 1 orphan inode deleted [ 275.419435][T13651] EXT4-fs (loop8): mounted filesystem without journal. Opts: €�; acl,noblock_validity,journal_dev=0x000000000000000f,max_batch_time=0x00000000000008c9,block_validity,errors=remount-ro,. Quota mode: writeback. [ 275.440357][T13643] BTRFS info (device loop3): enabling ssd optimizations [ 275.455179][ T4262] EXT4-fs (loop8): Remounting filesystem read-only [ 275.546624][T13643] BTRFS info (device loop3): balance: start -d -m -s [ 275.582407][ T4198] usb 8-1: USB disconnect, device number 12 [ 275.596061][ C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 275.614100][T13643] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata [ 275.631658][ T4198] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 275.691295][ T4198] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 275.718579][T13643] BTRFS info (device loop3): relocating block group 5242880 flags data|metadata [ 275.737089][ T4198] quatech2 8-1:0.51: device disconnected [ 275.906562][T13704] netlink: 'syz.8.3480': attribute type 10 has an invalid length. [ 275.923895][T13702] loop2: detected capacity change from 0 to 2048 [ 275.954458][T13643] BTRFS info (device loop3): found 10 extents, stage: move data extents [ 275.967716][T13704] device geneve0 entered promiscuous mode [ 276.011939][T13702] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 276.074925][T13643] BTRFS info (device loop3): balance: canceled [ 276.652327][T13728] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3496'. [ 276.734078][ T25] audit: type=1400 audit(2000000039.010:90): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=13732 comm="syz.8.3499" name="unknown" offset=16 [ 276.818778][T13739] netlink: 'syz.7.3501': attribute type 10 has an invalid length. [ 276.881885][T13739] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.889135][T13739] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.905257][T13733] zswap: compressor -ο™éšÝp¨�|J’J�>ÓæÜU’Ïjžž§ë¤£�SêïF—EõÖ]·}I not available [ 276.984274][T13739] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.991380][T13739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.998658][T13739] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.005685][T13739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.104497][T13758] openvswitch: netlink: Actions may not be safe on all matching packets [ 277.118868][T13759] loop2: detected capacity change from 0 to 256 [ 277.150655][T13739] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 277.162300][T13759] exfat: Deprecated parameter 'utf8' [ 277.185513][T13759] exfat: Deprecated parameter 'utf8' [ 277.202696][T13748] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3501'. [ 277.218595][T13759] exfat: Deprecated parameter 'utf8' [ 277.238010][T13759] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 277.251364][T13748] device bridge_slave_1 left promiscuous mode [ 277.265236][T13748] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.294393][T13748] device bridge_slave_0 left promiscuous mode [ 277.308178][T13748] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.325900][T13748] bond0: (slave bridge0): Releasing backup interface [ 277.388760][T13763] batman_adv: batadv0: Adding interface: vlan2 [ 277.413635][T13763] batman_adv: batadv0: The MTU of interface vlan2 is too small (1464) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.488095][T13763] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 277.927613][T13804] netlink: 'syz.8.3529': attribute type 10 has an invalid length. [ 277.974824][T13804] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.982070][T13804] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.029683][T13813] loop1: detected capacity change from 0 to 1024 [ 278.055825][T13804] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.062943][T13804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.070243][T13804] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.077294][T13804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.089554][T13818] loop3: detected capacity change from 0 to 64 [ 278.185053][T13813] hfsplus: request for non-existent node 62977 in B*Tree [ 278.199193][T13813] hfsplus: request for non-existent node 62977 in B*Tree [ 278.210324][T13804] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 278.223587][T13809] netlink: 'syz.7.3531': attribute type 1 has an invalid length. [ 278.285242][T13809] netlink: 'syz.7.3531': attribute type 2 has an invalid length. [ 278.303750][ T144] hfsplus: b-tree write err: -5, ino 3 [ 278.321821][T13815] netlink: 'syz.7.3531': attribute type 1 has an invalid length. [ 278.343952][T13815] netlink: 'syz.7.3531': attribute type 2 has an invalid length. [ 278.405130][T13816] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3529'. [ 278.423167][T13825] loop1: detected capacity change from 0 to 256 [ 278.444656][T13816] device bridge_slave_1 left promiscuous mode [ 278.503468][T13816] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.543858][T13827] loop7: detected capacity change from 0 to 128 [ 278.562223][T13816] device bridge_slave_0 left promiscuous mode [ 278.980882][T13831] loop2: detected capacity change from 0 to 131072 [ 279.026231][T13831] F2FS-fs (loop2): invalid crc value [ 279.096434][T13816] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.123294][T13831] F2FS-fs (loop2): Found nat_bits in checkpoint [ 279.143903][T13831] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 279.167333][T13831] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 279.270737][T13839] loop3: detected capacity change from 0 to 2048 [ 279.372794][T13839] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 279.434252][T13816] bond0: (slave bridge0): Releasing backup interface [ 279.603992][T13847] typec_fusb302 0-0022: I2C/SMBus block functionality not supported! [ 279.663653][T13847] i2c i2c-0: new_device: Instantiated device fusb302 at 0x22 [ 279.677944][T13853] loop8: detected capacity change from 0 to 256 [ 279.896653][T13862] loop8: detected capacity change from 0 to 16 [ 279.943151][T13862] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 279.964308][T13866] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3557'. [ 279.983843][ T5813] udevd[5813]: incorrect cramfs checksum on /dev/loop8 [ 280.129263][T12575] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 280.336499][T13880] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 280.356134][T13883] netlink: 'syz.2.3561': attribute type 10 has an invalid length. [ 280.370160][T13880] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 280.389437][T13883] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.396671][T13883] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.405788][T13880] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 280.431238][T13880] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 280.452667][T13887] loop8: detected capacity change from 0 to 512 [ 280.465380][T13883] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.472475][T13883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.479781][T13883] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.486821][T13883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.494763][T12575] usb 4-1: not running at top speed; connect to a high speed hub [ 280.507445][T13880] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 280.540409][T13880] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 280.561645][T13887] EXT4-fs error (device loop8): ext4_do_update_inode:5229: inode #15: comm syz.8.3565: corrupted inode contents [ 280.575204][T13880] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 280.588806][T13880] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 280.595321][T13887] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 280.606072][ T4349] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 280.615609][T13880] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 280.625579][T13883] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 280.640237][T13887] EXT4-fs error (device loop8): ext4_do_update_inode:5229: inode #15: comm syz.8.3565: corrupted inode contents [ 280.653631][T13880] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 280.663865][T13888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3561'. [ 280.675623][T13887] EXT4-fs error (device loop8): ext4_evict_inode:332: inode #15: comm syz.8.3565: mark_inode_dirty error [ 280.696957][T13888] device bridge_slave_1 left promiscuous mode [ 280.708874][T13887] EXT4-fs (loop8): 1 orphan inode deleted [ 280.728840][T13887] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 280.743477][ T25] audit: type=1326 audit(2000000043.030:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.7.3566" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57608e559 code=0x7ffc0000 [ 280.767938][T12575] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 280.780833][T13888] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.794341][T13892] loop7: detected capacity change from 0 to 512 [ 280.804102][T12575] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.825920][T12575] usb 4-1: Product: syz [ 280.853062][T12575] usb 4-1: Manufacturer: syz [ 280.867740][T13892] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 280.884439][ T25] audit: type=1326 audit(2000000043.070:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.7.3566" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57608e559 code=0x7ffc0000 [ 280.918435][T12575] usb 4-1: SerialNumber: syz [ 280.939347][T13888] device bridge_slave_0 left promiscuous mode [ 280.961901][T13892] ext4 filesystem being mounted at /247/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.976862][T12575] keyspan 4-1:1.0: Keyspan 4 port adapter converter detected [ 280.986139][ T4349] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 281.000948][T13888] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.030134][T12575] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 281.049281][ T4349] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 281.075589][ T25] audit: type=1326 audit(2000000043.070:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.7.3566" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57608e559 code=0x7ffc0000 [ 281.118425][T12575] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 281.131704][ T4349] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 281.172258][T12575] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 281.193872][ T4349] usb 2-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 281.203044][ C0] usb 4-1: malformed indat packet [ 281.216050][ C0] usb 4-1: malformed indat packet [ 281.236071][ C0] usb 4-1: malformed indat packet [ 281.241872][T12575] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 281.256047][ C0] usb 4-1: malformed indat packet [ 281.261362][ T25] audit: type=1326 audit(2000000043.070:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.7.3566" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb57608e559 code=0x7ffc0000 [ 281.285433][ C0] usb 4-1: malformed indat packet [ 281.296045][ C0] usb 4-1: malformed indat packet [ 281.303361][ T4349] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.316269][ C0] usb 4-1: malformed indat packet [ 281.356119][ C0] usb 4-1: malformed indat packet [ 281.396518][T13882] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 281.499852][ T25] audit: type=1326 audit(2000000043.070:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.7.3566" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57608e559 code=0x7ffc0000 [ 281.578919][T13888] bond0: (slave bridge0): Releasing backup interface [ 281.592528][T12575] usb 4-1: USB disconnect, device number 11 [ 281.614337][T12575] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 281.635103][ T25] audit: type=1326 audit(2000000043.070:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.7.3566" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57608e559 code=0x7ffc0000 [ 281.682324][T12575] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 281.717072][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.724821][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.737584][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.745168][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.756072][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.763197][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.770847][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.779918][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.787104][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.794192][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.801629][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.808791][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.815907][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.823356][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.830643][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.837912][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.845429][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.852829][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.860177][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.867372][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.874462][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.881966][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.889212][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.896500][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.903590][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.910981][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.918295][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.925527][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.933596][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.940955][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.948498][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.955932][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.963335][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.970662][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.978017][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.985209][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 281.992548][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 282.001793][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 282.010029][T12575] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 282.019805][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 282.028885][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 282.036349][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 282.044111][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 282.052209][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 282.059704][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 282.067060][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 282.074262][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 282.082612][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 282.090238][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 282.097646][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 282.104895][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 282.112227][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 282.119643][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 282.130692][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 282.138135][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 282.145325][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 282.154181][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 282.162536][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 282.170897][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 282.178330][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 282.186157][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 282.193341][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 282.200800][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 282.208180][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 282.215340][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 282.222793][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 282.232151][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 282.239552][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 282.246917][ T4201] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 282.272045][ T25] audit: type=1326 audit(2000000043.070:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.7.3566" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57608e559 code=0x7ffc0000 [ 282.313595][T12575] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 282.358556][T12575] keyspan 4-1:1.0: device disconnected [ 282.391169][ T4349] usb 2-1: USB disconnect, device number 12 [ 282.409227][ T25] audit: type=1326 audit(2000000043.070:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.7.3566" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb57608e559 code=0x7ffc0000 [ 282.471859][T13915] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 282.523900][T13917] bond0: no command found in slaves file - use +ifname or -ifname [ 282.576594][ T25] audit: type=1326 audit(2000000043.070:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.7.3566" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb57608e2c2 code=0x7ffc0000 [ 282.766132][ T25] audit: type=1326 audit(2000000043.070:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.7.3566" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb57604ed8e code=0x7ffc0000 [ 282.923529][T13939] loop3: detected capacity change from 0 to 256 [ 282.954031][ T25] audit: type=1326 audit(2000000043.070:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.7.3566" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb57608e387 code=0x7ffc0000 [ 283.179459][ T25] audit: type=1326 audit(2000000043.070:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.7.3566" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb57604ed8e code=0x7ffc0000 [ 283.209201][T13909] loop7: detected capacity change from 0 to 40427 [ 283.243031][T13949] loop1: detected capacity change from 0 to 164 [ 283.278134][T13909] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 283.379421][T13909] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 283.426201][T13949] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 283.439518][ T25] audit: type=1326 audit(2000000043.070:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.7.3566" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb57608e1eb code=0x7ffc0000 [ 283.509140][T13909] F2FS-fs (loop7): invalid crc value [ 283.526296][ T4197] Bluetooth: hci5: Reading Intel version command failed (-110) [ 283.587280][T13909] F2FS-fs (loop7): Found nat_bits in checkpoint [ 283.610040][T13926] loop8: detected capacity change from 0 to 32768 [ 283.647762][ T25] audit: type=1326 audit(2000000043.120:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.7.3566" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb57604ed8e code=0x7ffc0000 [ 283.715792][T13926] ocfs2: Slot 0 on device (7,8) was already allocated to this node! [ 283.807203][T13926] JBD2: Ignoring recovery information on journal [ 283.827171][T13909] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 283.873888][ T25] audit: type=1326 audit(2000000043.120:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.7.3566" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb57604ed8e code=0x7ffc0000 [ 283.902120][T13909] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 283.951669][T13926] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 284.084631][ T25] audit: type=1326 audit(2000000043.120:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.7.3566" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb57608d3c7 code=0x7ffc0000 [ 284.120111][T13982] loop2: detected capacity change from 0 to 512 [ 284.242618][T11599] ocfs2: Unmounting device (7,8) on (node local) [ 284.280745][T13982] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3603: invalid indirect mapped block 256 (level 2) [ 284.426593][T13982] EXT4-fs (loop2): Remounting filesystem read-only [ 284.462332][T13982] EXT4-fs (loop2): 2 truncates cleaned up [ 284.524964][T13982] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,barrier,. Quota mode: writeback. [ 284.815578][T14011] tipc: Started in network mode [ 284.841715][T14011] tipc: Node identity aaaaaaaaaa17, cluster identity 4711 [ 284.894260][T14011] tipc: Enabled bearer , priority 0 [ 284.998613][T14024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3621'. [ 285.441440][T14026] loop8: detected capacity change from 0 to 131072 [ 285.487148][T14026] F2FS-fs (loop8): invalid crc value [ 285.507945][T14024] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3621'. [ 285.532920][T14026] F2FS-fs (loop8): Found nat_bits in checkpoint [ 285.562703][T14026] F2FS-fs (loop8): Cannot turn on quotas: -2 on 2 [ 285.579558][T14026] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 285.620184][T14024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3621'. [ 285.843970][T14040] loop7: detected capacity change from 0 to 4096 [ 286.003902][T14048] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 286.014718][ T4349] tipc: Node number set to 12429994 [ 286.138171][T14052] NILFS (loop7): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 286.195169][T14040] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 286.450703][ T4349] wiimote 0005:057E:0306.0012: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 286.495743][ T4349] wiimote 0005:057E:0306.0012: New device registered [ 287.362808][T14133] loop1: detected capacity change from 0 to 512 [ 287.452987][ T154] bond0: (slave bond_slave_0): interface is now down [ 287.495078][ T154] bond0: (slave bond_slave_1): interface is now down [ 287.502629][ T9931] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 287.524043][ T154] bond0: (slave syz_tun): interface is now down [ 287.570551][ T154] bond0: now running without any active interface! [ 287.611182][ T4349] wiimote 0005:057E:0306.0012: detected device: Nintendo Wii Remote (Gen 1) [ 287.677686][ T4349] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0012/input/input19 [ 287.713384][ T4349] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0012/input/input20 [ 287.740159][ T4349] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0012/input/input18 [ 287.836221][ T9931] usb 9-1: not running at top speed; connect to a high speed hub [ 287.844422][T14149] loop1: detected capacity change from 0 to 256 [ 287.936167][ T9931] usb 9-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 287.963078][ T9931] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.003746][ T9931] usb 9-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 288.040306][ T9931] usb 9-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 288.050949][ T9931] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.067815][ T9931] usb 9-1: config 0 descriptor?? [ 288.107535][ T9931] usb 9-1: Found UVC 9.00 device (046d:0825) [ 288.129506][ T25] kauditd_printk_skb: 18 callbacks suppressed [ 288.129516][ T25] audit: type=1400 audit(2000000050.410:125): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=14158 comm="syz.1.3677" name="p" offset=64 [ 288.404653][T14175] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3686'. [ 288.532628][T14182] loop3: detected capacity change from 0 to 128 [ 288.546748][ T9931] usb 9-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 288.579929][T14182] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 288.682700][T14163] loop1: detected capacity change from 0 to 40427 [ 288.765408][T14163] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1ffff [ 288.845063][ T9931] usb 9-1: USB disconnect, device number 3 [ 288.879146][T14163] F2FS-fs (loop1): invalid crc value [ 288.938299][T14182] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 288.973122][T14163] F2FS-fs (loop1): Found nat_bits in checkpoint [ 289.085794][T14163] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 289.182050][T14163] attempt to access beyond end of device [ 289.182050][T14163] loop1: rw=524288, want=45072, limit=40427 [ 289.235896][T14163] attempt to access beyond end of device [ 289.235896][T14163] loop1: rw=0, want=45072, limit=40427 [ 289.314416][T14204] loop3: detected capacity change from 0 to 1024 [ 289.324620][ T4185] attempt to access beyond end of device [ 289.324620][ T4185] loop1: rw=2049, want=45104, limit=40427 [ 289.462243][T14206] loop8: detected capacity change from 0 to 128 [ 289.478458][T14067] wiimote 0005:057E:0306.0012: Device removed [ 289.521738][T14206] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 289.624881][T14206] hpfs: filesystem error: improperly stopped [ 289.654578][T14206] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 289.707465][T14206] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 289.744946][T14196] loop2: detected capacity change from 0 to 32768 [ 289.753523][T14206] hpfs: You really don't want any checks? You are crazy... [ 289.781614][T14206] hpfs: hpfs_map_sector(): read error [ 289.851360][T14206] hpfs: code page support is disabled [ 289.891986][T14196] XFS (loop2): Mounting V5 Filesystem [ 289.907128][T14206] hpfs: hpfs_map_4sectors(): unaligned read [ 289.913035][T14206] hpfs: hpfs_map_4sectors(): unaligned read [ 289.953056][T14196] XFS (loop2): Ending clean mount [ 289.968378][T14206] hpfs: filesystem error: unable to find root dir [ 289.995258][T14196] XFS (loop2): Quotacheck needed: Please wait. [ 290.206513][T14196] XFS (loop2): Quotacheck: Done. [ 290.300853][ T4196] XFS (loop2): Unmounting Filesystem [ 290.389831][T14236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3710'. [ 290.448285][T14236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3710'. [ 290.509885][T14236] netlink: 'syz.1.3710': attribute type 7 has an invalid length. [ 290.557200][T14236] netlink: 'syz.1.3710': attribute type 18 has an invalid length. [ 290.650877][T14228] loop3: detected capacity change from 0 to 32768 [ 290.741131][T14228] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 290.864897][T14232] loop8: detected capacity change from 0 to 40427 [ 290.885053][ T4195] ocfs2: Unmounting device (7,3) on (node local) [ 290.980680][T14232] F2FS-fs (loop8): invalid crc value [ 291.039903][T14232] F2FS-fs (loop8): Found nat_bits in checkpoint [ 291.174096][T14232] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 291.290623][T14261] program syz.3.3718 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.402453][T11599] attempt to access beyond end of device [ 291.402453][T11599] loop8: rw=2049, want=45112, limit=40427 [ 291.505450][T14274] loop1: detected capacity change from 0 to 128 [ 291.920554][T14268] loop2: detected capacity change from 0 to 32768 [ 291.964716][T14268] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.3721 (14268) [ 292.046702][T14268] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 292.071736][T14294] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.3734'. [ 292.099424][T14268] BTRFS info (device loop2): using free space tree [ 292.119454][T14294] netlink: zone id is out of range [ 292.125225][T14268] BTRFS info (device loop2): has skinny extents [ 292.139277][T14294] netlink: zone id is out of range [ 292.146594][ T4198] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 292.174848][T14294] netlink: zone id is out of range [ 292.194164][T14294] netlink: zone id is out of range [ 292.212231][T14294] netlink: zone id is out of range [ 292.233848][T14268] BTRFS info (device loop2): enabling ssd optimizations [ 292.246339][T14294] netlink: zone id is out of range [ 292.262787][T14294] netlink: zone id is out of range [ 292.274585][T14294] netlink: zone id is out of range [ 292.287405][T14294] netlink: zone id is out of range [ 292.293432][T14294] netlink: zone id is out of range [ 292.387125][ T4198] usb 4-1: Using ep0 maxpacket: 32 [ 292.506147][ T4198] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 292.527078][ T4198] usb 4-1: config 0 has no interface number 0 [ 292.698949][ T4198] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 292.714764][ T4198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.732506][ T4198] usb 4-1: Product: syz [ 292.742371][ T4198] usb 4-1: Manufacturer: syz [ 292.751869][ T4198] usb 4-1: SerialNumber: syz [ 292.769473][ T4198] usb 4-1: config 0 descriptor?? [ 292.817137][ T4198] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 292.834692][ T4198] usb 4-1: selecting invalid altsetting 1 [ 292.849203][ T4198] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 292.858437][T14318] loop1: detected capacity change from 0 to 40427 [ 292.869779][ T4198] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 292.896627][T14318] F2FS-fs (loop1): invalid crc value [ 292.911666][ T4198] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 292.937057][T14318] F2FS-fs (loop1): Found nat_bits in checkpoint [ 292.954055][ T4198] usb 4-1: media controller created [ 293.002234][ T4198] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 293.058331][T14318] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 293.096213][ T4198] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 293.112424][ T4198] zl10353_read_register: readreg error (reg=127, ret==-71) [ 293.146104][ T4198] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 293.192305][ T4198] usb 4-1: USB disconnect, device number 12 [ 293.307302][ T4185] attempt to access beyond end of device [ 293.307302][ T4185] loop1: rw=2049, want=45104, limit=40427 [ 293.379425][T14329] ieee802154 phy0 wpan0: encryption failed: -22 [ 293.479735][T14333] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 293.640586][T14341] set_capacity_and_notify: 1 callbacks suppressed [ 293.640597][T14341] loop8: detected capacity change from 0 to 128 [ 293.755925][T14341] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 293.974060][T14341] UDF-fs: error (device loop8): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 294.273143][T14377] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 294.540682][T14387] loop8: detected capacity change from 0 to 32768 [ 294.578487][T14387] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 294.587048][T14387] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 294.608158][T14387] gfs2: fsid=syz:syz.0: no journals! [ 294.875815][T14405] netlink: 'syz.8.3772': attribute type 3 has an invalid length. [ 294.904266][T14402] loop1: detected capacity change from 0 to 4096 [ 295.017600][T14413] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 295.110049][T14402] NILFS (loop1): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 295.138023][T14419] program syz.3.3779 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.250242][T14425] loop2: detected capacity change from 0 to 512 [ 295.261822][T14427] pimreg1: tun_chr_ioctl cmd 1074025677 [ 295.284536][T14427] pimreg1: linktype set to 270 [ 295.324316][T14425] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 295.343278][T14429] loop1: detected capacity change from 0 to 2048 [ 295.378805][T14425] ext4 filesystem being mounted at /762/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.403443][T14437] loop3: detected capacity change from 0 to 256 [ 295.432841][T14429] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 295.459650][T14425] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 295.476238][T14433] zswap: compressor -ο™éšÝp¨�|J’J�>ÓæÜU’Ïjžž§ë¤£�SêïF—EõÖ]·}I not available [ 295.522197][T14429] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3784'. [ 295.564996][T14429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3784'. [ 295.623700][ T4196] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /762/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=12, inode=2, rec_len=1797, size=2048 fake=1 [ 295.776313][ T4196] EXT4-fs error (device loop2): ext4_empty_dir:3156: inode #11: block 4: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=12, inode=2, rec_len=1797, size=2048 fake=1 [ 295.864182][ T4196] EXT4-fs warning (device loop2): ext4_empty_dir:3158: inode #11: comm syz-executor: directory missing '..' [ 295.910591][ T4196] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /762/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=12, inode=2, rec_len=1797, size=2048 fake=1 [ 295.965652][ T4196] EXT4-fs error (device loop2): ext4_empty_dir:3156: inode #11: block 4: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=12, inode=2, rec_len=1797, size=2048 fake=1 [ 295.997925][T14441] loop8: detected capacity change from 0 to 32768 [ 296.004877][ T4196] EXT4-fs warning (device loop2): ext4_empty_dir:3158: inode #11: comm syz-executor: directory missing '..' [ 296.020497][ T4196] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /762/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=12, inode=2, rec_len=1797, size=2048 fake=1 [ 296.044853][ T4196] EXT4-fs error (device loop2): ext4_empty_dir:3156: inode #11: block 4: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=12, inode=2, rec_len=1797, size=2048 fake=1 [ 296.071262][ T4196] EXT4-fs warning (device loop2): ext4_empty_dir:3158: inode #11: comm syz-executor: directory missing '..' [ 296.084598][T14441] (syz.8.3788,14441,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 296.173002][T14441] (syz.8.3788,14441,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 296.192504][T14453] loop7: detected capacity change from 0 to 512 [ 296.201603][ T4196] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /762/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=12, inode=2, rec_len=1797, size=2048 fake=1 [ 296.254693][T14441] JBD2: Ignoring recovery information on journal [ 296.263614][ T4196] EXT4-fs error (device loop2): ext4_empty_dir:3156: inode #11: block 4: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=12, inode=2, rec_len=1797, size=2048 fake=1 [ 296.305620][T14453] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 296.359024][T14441] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 296.464084][T14453] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #16: comm syz.7.3794: invalid indirect mapped block 32768 (level 2) [ 296.506433][ T4196] EXT4-fs warning (device loop2): ext4_empty_dir:3158: inode #11: comm syz-executor: directory missing '..' [ 296.650809][T14453] EXT4-fs (loop7): Remounting filesystem read-only [ 296.659556][ T4196] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /762/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=12, inode=2, rec_len=1797, size=2048 fake=1 [ 296.711440][T14453] EXT4-fs (loop7): 1 orphan inode deleted [ 296.757218][T14453] EXT4-fs (loop7): 1 truncate cleaned up [ 296.763085][T14453] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,usrquota,. Quota mode: writeback. [ 296.801948][ T4196] EXT4-fs error (device loop2): ext4_empty_dir:3156: inode #11: block 4: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=12, inode=2, rec_len=1797, size=2048 fake=1 [ 296.886597][ T4196] EXT4-fs warning (device loop2): ext4_empty_dir:3158: inode #11: comm syz-executor: directory missing '..' [ 296.903909][T14453] EXT4-fs warning (device loop7): ext4_resize_begin:83: There are errors in the filesystem, so online resizing is not allowed [ 296.961588][ T4196] EXT4-fs warning (device loop2): ext4_empty_dir:3158: inode #11: comm syz-executor: directory missing '..' [ 297.039684][ T4196] EXT4-fs warning (device loop2): ext4_empty_dir:3158: inode #11: comm syz-executor: directory missing '..' [ 297.143416][ T4196] EXT4-fs warning (device loop2): ext4_empty_dir:3158: inode #11: comm syz-executor: directory missing '..' [ 297.159360][T11599] ocfs2: Unmounting device (7,8) on (node local) [ 297.232608][ T4196] EXT4-fs warning (device loop2): ext4_empty_dir:3158: inode #11: comm syz-executor: directory missing '..' [ 297.289669][ T4196] EXT4-fs warning (device loop2): ext4_empty_dir:3158: inode #11: comm syz-executor: directory missing '..' [ 297.670470][T14479] loop7: detected capacity change from 0 to 128 [ 297.738915][T14479] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 297.769664][ T4196] tipc: Resetting bearer [ 297.802390][ T4196] bond0: (slave syz_tun): Releasing backup interface [ 297.810845][T14479] ext4 filesystem being mounted at /262/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 297.863906][ T4196] tipc: Resetting bearer [ 297.889403][ T4196] tipc: Disabling bearer [ 297.901309][T14466] loop3: detected capacity change from 0 to 32768 [ 297.927844][ T4198] Bluetooth: hci5: command 0x1003 tx timeout [ 297.944021][T14466] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.3799 (14466) [ 297.963929][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 298.019214][T14487] netlink: 7 bytes leftover after parsing attributes in process `syz.8.3808'. [ 298.113029][T14466] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 298.130449][ T3083] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 298.185070][T14466] BTRFS info (device loop3): force clearing of disk cache [ 298.215294][ T3083] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.266133][T14466] BTRFS info (device loop3): metadata ratio 0 [ 298.272219][T14466] BTRFS info (device loop3): enabling ssd optimizations [ 298.280833][T14492] syz.7.3811[14492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 298.280892][T14492] syz.7.3811[14492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 298.342041][ T3083] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 298.378309][T14466] BTRFS info (device loop3): using spread ssd allocation scheme [ 298.429062][T14466] BTRFS info (device loop3): using free space tree [ 298.483169][T14466] BTRFS info (device loop3): has skinny extents [ 298.507585][ T3083] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.568155][T14506] netlink: 203516 bytes leftover after parsing attributes in process `syz.8.3815'. [ 298.609848][ T3083] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 298.634185][T14506] net_ratelimit: 110 callbacks suppressed [ 298.634195][T14506] netlink: zone id is out of range [ 298.652102][T14466] BTRFS info (device loop3): clearing free space tree [ 298.676154][T12575] FS-Cache: Duplicate cookie detected [ 298.682022][T12575] FS-Cache: O-cookie c=00000007 [p=00000006 fl=222 nc=0 na=1] [ 298.689589][T12575] FS-Cache: O-cookie d=ffffffff8d547b60{AFS.cell} n=ffff888075bfb000 [ 298.697669][T12575] FS-Cache: O-key=[4] '73797a30' [ 298.702600][T12575] FS-Cache: N-cookie c=00000008 [p=00000006 fl=2 nc=0 na=1] [ 298.709898][T12575] FS-Cache: N-cookie d=ffffffff8d547b60{AFS.cell} n=ffff888066cab000 [ 298.717976][T12575] FS-Cache: N-key=[4] '73797a30' [ 298.734962][T14466] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 298.764613][ T3083] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.778337][T14506] netlink: zone id is out of range [ 298.783491][T14506] netlink: zone id is out of range [ 298.789869][T14466] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 298.803460][T14506] netlink: zone id is out of range [ 298.809380][T14506] netlink: zone id is out of range [ 298.823415][T14506] netlink: zone id is out of range [ 298.843221][T14506] netlink: zone id is out of range [ 298.860041][T14506] netlink: zone id is out of range [ 298.865705][T14466] BTRFS info (device loop3): creating free space tree [ 298.885590][T14506] netlink: zone id is out of range [ 298.899439][T14466] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 298.909742][T14506] netlink: zone id is out of range [ 298.925448][T14516] rxe_eth0 speed is unknown, defaulting to 1000 [ 298.942777][T14466] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 298.970748][ T3083] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 299.017674][ T3083] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.114539][T14530] loop7: detected capacity change from 0 to 2048 [ 299.159031][T14532] program syz.8.3820 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 299.234239][T14530] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 299.342495][T14530] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 299.472327][T14536] loop8: detected capacity change from 0 to 256 [ 299.545316][T14536] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 299.586046][ T3083] tipc: Left network mode [ 299.650366][T14543] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 299.715692][T14516] chnl_net:caif_netlink_parms(): no params data found [ 299.770392][T14543] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 299.874267][T14516] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.936209][T14516] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.975795][T14516] device bridge_slave_0 entered promiscuous mode [ 300.020086][T14516] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.068819][T14516] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.112860][T14516] device bridge_slave_1 entered promiscuous mode [ 300.203096][T14516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.275106][T14516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.383733][T14516] team0: Port device team_slave_0 added [ 300.424641][T14516] team0: Port device team_slave_1 added [ 300.509492][T14516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.548913][T14516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.593297][ T2297] Bluetooth: hci5: command 0x1001 tx timeout [ 300.633437][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 300.775304][T14516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.802466][T14552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.816062][ T2297] Bluetooth: hci4: command 0x0409 tx timeout [ 300.880275][T14516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.916063][T14516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.045820][T14516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.250870][T14516] device hsr_slave_0 entered promiscuous mode [ 301.287725][T14516] device hsr_slave_1 entered promiscuous mode [ 301.319820][T14516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.348813][T14516] Cannot create hsr debugfs directory [ 301.802141][T14516] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 301.859942][T14579] loop7: detected capacity change from 0 to 40427 [ 301.891344][T14516] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 301.927333][T14516] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 301.955276][T14579] F2FS-fs (loop7): invalid crc value [ 302.009568][T14516] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 302.050068][T14579] F2FS-fs (loop7): Found nat_bits in checkpoint [ 302.276570][T14630] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3842'. [ 302.285654][T14579] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 302.324256][T14630] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3842'. [ 302.384991][T14630] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3842'. [ 302.429396][ T9266] attempt to access beyond end of device [ 302.429396][ T9266] loop7: rw=2049, want=45104, limit=40427 [ 302.448875][T14630] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3842'. [ 302.531489][T14516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.646637][ T4198] Bluetooth: hci5: command 0x1009 tx timeout [ 302.654852][T14516] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.709365][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 302.720541][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 302.800485][ T3083] device hsr_slave_0 left promiscuous mode [ 302.852528][ T3083] device hsr_slave_1 left promiscuous mode [ 302.886124][ T9931] Bluetooth: hci4: command 0x041b tx timeout [ 302.953513][T14640] loop8: detected capacity change from 0 to 4096 [ 303.020861][T14640] ntfs3: loop8: Different NTFS' sector size (1024) and media sector size (512) [ 303.060488][ T3083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.110726][ T3083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.158720][ T3083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.226099][ T3083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.274287][ T3083] device veth1_macvtap left promiscuous mode [ 303.313854][ T3083] device veth0_macvtap left promiscuous mode [ 303.363966][ T3083] device veth1_vlan left promiscuous mode [ 303.399542][ T3083] device veth0_vlan left promiscuous mode [ 304.012974][ T3083] team0 (unregistering): Port device team_slave_1 removed [ 304.042955][ T3083] team0 (unregistering): Port device team_slave_0 removed [ 304.074127][ T3083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.118382][ T3083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.260347][ T3083] bond0 (unregistering): Released all slaves [ 304.301449][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 304.321947][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 304.344421][ T457] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.351508][ T457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.382661][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 304.403593][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 304.430299][ T457] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.437405][ T457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.463631][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 304.494865][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 304.523022][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 304.553317][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 304.577957][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 304.598992][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 304.620381][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 304.643747][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 304.665444][T14653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3847'. [ 304.685901][T14653] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3847'. [ 304.722391][T14673] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3854'. [ 304.792550][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 304.840923][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 304.914847][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 304.953477][T14682] loop7: detected capacity change from 0 to 2048 [ 304.964203][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 304.976025][T11919] Bluetooth: hci4: command 0x040f tx timeout [ 305.016866][T14682] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 305.036507][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 305.081948][T14516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 305.100971][T14682] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 305.514424][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 305.547000][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 305.609075][T14516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.666101][ T4316] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 305.903094][T14730] overlayfs: statfs failed on './file0' [ 305.909324][ T4316] usb 9-1: Using ep0 maxpacket: 8 [ 306.031628][ T4316] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 306.084176][ T4316] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.120238][T14739] net_ratelimit: 110 callbacks suppressed [ 306.120248][T14739] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 306.200330][ T4316] pvrusb2: Hardware description: Terratec Grabster AV400 [ 306.233434][ T4316] pvrusb2: ********** [ 306.260490][ T4316] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 306.299834][T14746] loop1: detected capacity change from 0 to 512 [ 306.322045][ T4316] pvrusb2: Important functionality might not be entirely working. [ 306.374361][T14746] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.3875: invalid indirect mapped block 4294967295 (level 1) [ 306.393901][ T4316] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 306.429110][ T4316] pvrusb2: ********** [ 306.457510][T14746] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.3875: invalid indirect mapped block 4294967295 (level 1) [ 306.477642][ T2424] pvrusb2: Invalid write control endpoint [ 306.524090][T14737] netlink: 'syz.3.3872': attribute type 1 has an invalid length. [ 306.553511][T14752] loop7: detected capacity change from 0 to 128 [ 306.562359][T14737] netlink: 'syz.3.3872': attribute type 2 has an invalid length. [ 306.586485][T14746] EXT4-fs (loop1): 2 truncates cleaned up [ 306.592211][T14746] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 306.614323][ T2424] pvrusb2: Invalid write control endpoint [ 306.658643][T14752] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 306.687465][ T2424] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 306.705901][T14516] device veth0_vlan entered promiscuous mode [ 306.749770][T14752] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 306.758677][ T2424] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 306.783904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 306.811303][ T2424] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 306.824948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 306.849501][T14756] loop3: detected capacity change from 0 to 16 [ 306.905878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 306.913857][ T2424] pvrusb2: Device being rendered inoperable [ 306.932818][T14756] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 306.976583][T14697] pvrusb2: Attempted to execute control transfer when device not ok [ 307.000958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 307.057130][ T2424] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 307.077216][ T2424] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 307.110570][T14516] device veth1_vlan entered promiscuous mode [ 307.136363][T11919] Bluetooth: hci4: command 0x0419 tx timeout [ 307.149620][T11919] usb 9-1: USB disconnect, device number 4 [ 307.167544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 307.192468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 307.227238][ T2424] pvrusb2: Attached sub-driver cx25840 [ 307.232708][ T2424] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 307.274838][T14516] device veth0_macvtap entered promiscuous mode [ 307.324499][ T2424] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 307.363888][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 307.395655][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 307.472969][T14516] device veth1_macvtap entered promiscuous mode [ 307.511942][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 307.554301][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 307.629715][T14516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.733726][T14516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.755413][T14779] loop7: detected capacity change from 0 to 1024 [ 307.819199][T14516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.871487][T14779] hfsplus: invalid length 256 has been corrected to 255 [ 307.934877][T14516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.957302][T14779] hfsplus: invalid length 256 has been corrected to 255 [ 308.016008][T14516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.112586][T14516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.186061][T14516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.276033][T14516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.341913][T14516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.423326][T14516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.502379][T14516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.595059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 308.642102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 308.660278][T14806] loop3: detected capacity change from 0 to 4096 [ 308.684083][ T25] audit: type=1400 audit(2000000070.960:126): apparmor="STATUS" info="failed to unpack policydb" error=-71 profile="unconfined" name="p" pid=14808 comm="syz.7.3892" name="p" offset=92 [ 308.758598][T14516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.792153][T14806] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 308.832969][ T5813] udevd[5813]: incorrect nilfs2 checksum on /dev/loop3 [ 308.843442][T14516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.866089][T14806] NILFS (loop3): mounting unchecked fs [ 308.907181][T14516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.931033][T14806] NILFS (loop3): recovery complete [ 308.963072][T14814] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 308.987977][T14516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.010558][T14806] NILFS error (device loop3): nilfs_readdir: zero-length directory entry [ 309.026713][T14813] loop1: detected capacity change from 0 to 4096 [ 309.048663][T14516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.132190][T14516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.145931][T14815] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 309.213683][T14516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.256094][T14516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.293914][T14516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.338289][T14516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.384101][T14516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.472738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 309.509224][T14819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3899'. [ 309.524423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 309.581091][T14516] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.624882][T14516] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.662515][T14516] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.694373][T14516] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.976504][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.984329][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.077201][ T457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.116163][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 310.136049][ T457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.180056][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 310.191418][T14846] UHID_CREATE from different security context by process 1771 (syz.3.3910), this is not allowed. [ 310.220466][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 310.250568][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 310.282012][T14839] loop1: detected capacity change from 0 to 4096 [ 310.306360][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 310.351602][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 310.398509][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 310.440109][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 310.475625][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 310.507644][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 310.538781][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 310.570328][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 310.598609][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 310.627651][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 310.655064][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 310.684718][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 310.713088][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 310.750912][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 310.778807][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 310.811632][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 310.842280][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 310.869800][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 310.898602][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 310.925932][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 310.954302][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 310.982006][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.009841][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.040019][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.070440][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.100179][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.127962][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.158357][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.165748][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.217786][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.245496][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.275827][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.307779][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.315184][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.370428][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.398010][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.435165][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.473761][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.513484][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.551502][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.571703][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.608433][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.638141][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.667711][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.705842][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.737721][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.772328][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.795217][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.813906][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.823358][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.832708][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.841898][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.852087][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.861289][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.870608][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.879799][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.888885][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.897988][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.905388][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.914559][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.923722][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.933169][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.942349][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.952538][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.961667][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.970850][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.980000][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.989247][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 311.998508][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 312.005916][ T6163] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 312.021825][ T6163] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.03 Device [syz1] on syz1 [ 312.129900][T14887] fido_id[14887]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 312.149225][T14839] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 312.210878][T14839] ntfs3: loop1: Failed to load $Extend. [ 312.268416][T14839] ntfs3: loop1: ntfs_sync_fs r=9 failed, -22. [ 312.346137][ T4251] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 312.375856][ T4185] ntfs3: loop1: ntfs_sync_fs r=9 failed, -22. [ 312.417277][ T4185] ntfs3: loop1: ntfs_evict_inode r=9 failed, -22. [ 312.588867][ T4251] usb 9-1: Using ep0 maxpacket: 8 [ 312.708245][ T4251] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 312.758567][ T4251] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 312.792336][T14894] loop9: detected capacity change from 0 to 32768 [ 312.819550][ T4251] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 312.858270][T14894] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop9 scanned by syz.9.3810 (14894) [ 312.903062][ T4251] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 312.984637][ T4251] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 313.029069][T14896] loop3: detected capacity change from 0 to 40427 [ 313.043463][ T4251] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.075316][T14896] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 313.106330][T14894] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 313.158934][T14896] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 313.177797][T14894] BTRFS info (device loop9): using free space tree [ 313.229229][T14894] BTRFS info (device loop9): has skinny extents [ 313.260236][T14896] F2FS-fs (loop3): Found nat_bits in checkpoint [ 313.304254][T14936] loop7: detected capacity change from 0 to 256 [ 313.346195][ T4251] usb 9-1: GET_CAPABILITIES returned 0 [ 313.389525][ T4251] usbtmc 9-1:16.0: can't read capabilities [ 313.420343][T14936] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 313.435660][T14894] BTRFS info (device loop9): enabling ssd optimizations [ 313.490087][T14896] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 313.536536][T14896] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 313.557505][ T4251] usb 9-1: USB disconnect, device number 5 [ 313.704846][ T4195] attempt to access beyond end of device [ 313.704846][ T4195] loop3: rw=2049, want=45104, limit=40427 [ 313.804037][ T25] audit: type=1807 audit(2000000076.080:127): action=appraise res=1 [ 313.816596][T14961] ima: policy update completed [ 313.823293][T14964] loop7: detected capacity change from 0 to 128 [ 313.849068][ T25] audit: type=1802 audit(2000000076.100:128): pid=14961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.1.3935" res=1 errno=0 [ 314.122865][T14966] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3937'. [ 314.267952][ T25] audit: type=1800 audit(2000000076.550:129): pid=4286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 314.290880][ T5813] [ 314.293208][ T5813] ====================================================== [ 314.300196][ T5813] WARNING: possible circular locking dependency detected [ 314.307205][ T5813] syzkaller #0 Not tainted [ 314.311605][ T5813] ------------------------------------------------------ [ 314.318606][ T5813] udevd/5813 is trying to acquire lock: [ 314.324119][ T5813] ffff88804727dae8 (&iint_mutex_key[depth]){+.+.}-{3:3}, at: process_measurement+0x724/0x1c20 [ 314.334367][ T5813] [ 314.334367][ T5813] but task is already holding lock: [ 314.341712][ T5813] ffff88807e590460 (sb_writers#3){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 314.350380][ T5813] [ 314.350380][ T5813] which lock already depends on the new lock. [ 314.350380][ T5813] [ 314.360753][ T5813] [ 314.360753][ T5813] the existing dependency chain (in reverse order) is: [ 314.369740][ T5813] [ 314.369740][ T5813] -> #8 (sb_writers#3){.+.+}-{0:0}: [ 314.377099][ T5813] lo_write_bvec+0x194/0x780 [ 314.382184][ T5813] loop_process_work+0x1b66/0x24c0 [ 314.387786][ T5813] process_one_work+0x867/0xff0 [ 314.393128][ T5813] worker_thread+0xad7/0x12a0 [ 314.398313][ T5813] kthread+0x42e/0x520 [ 314.402875][ T5813] ret_from_fork+0x1f/0x30 [ 314.407786][ T5813] [ 314.407786][ T5813] -> #7 ((work_completion)(&lo->rootcg_work)){+.+.}-{0:0}: [ 314.417128][ T5813] process_one_work+0x7ba/0xff0 [ 314.422490][ T5813] worker_thread+0xad7/0x12a0 [ 314.427661][ T5813] kthread+0x42e/0x520 [ 314.432223][ T5813] ret_from_fork+0x1f/0x30 [ 314.437133][ T5813] [ 314.437133][ T5813] -> #6 ((wq_completion)loop7){+.+.}-{0:0}: [ 314.445179][ T5813] flush_workqueue+0x16a/0x1390 [ 314.450540][ T5813] drain_workqueue+0xca/0x370 [ 314.455711][ T5813] destroy_workqueue+0x7b/0xb20 [ 314.461053][ T5813] __loop_clr_fd+0x22f/0xb50 [ 314.466135][ T5813] blkdev_put+0x52b/0x780 [ 314.470975][ T5813] deactivate_locked_super+0x93/0xf0 [ 314.476751][ T5813] cleanup_mnt+0x426/0x4d0 [ 314.481656][ T5813] task_work_run+0x125/0x1a0 [ 314.486736][ T5813] exit_to_user_mode_loop+0x10f/0x130 [ 314.492598][ T5813] exit_to_user_mode_prepare+0xee/0x180 [ 314.498634][ T5813] syscall_exit_to_user_mode+0x16/0x40 [ 314.504585][ T5813] do_syscall_64+0x58/0xa0 [ 314.509494][ T5813] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 314.515883][ T5813] [ 314.515883][ T5813] -> #5 (&lo->lo_mutex){+.+.}-{3:3}: [ 314.523320][ T5813] __mutex_lock_common+0x1e5/0x2400 [ 314.529010][ T5813] mutex_lock_killable_nested+0x17/0x20 [ 314.535051][ T5813] lo_open+0x6a/0x100 [ 314.539530][ T5813] blkdev_get_whole+0x90/0x390 [ 314.544789][ T5813] blkdev_get_by_dev+0x2da/0xa50 [ 314.550222][ T5813] blkdev_open+0x128/0x2c0 [ 314.555132][ T5813] do_dentry_open+0x7f7/0xf90 [ 314.560304][ T5813] path_openat+0x2718/0x2fb0 [ 314.565386][ T5813] do_filp_open+0x1df/0x400 [ 314.570380][ T5813] do_sys_openat2+0x14b/0x500 [ 314.575548][ T5813] __x64_sys_openat+0x135/0x160 [ 314.580887][ T5813] do_syscall_64+0x4c/0xa0 [ 314.585797][ T5813] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 314.592186][ T5813] [ 314.592186][ T5813] -> #4 (&disk->open_mutex){+.+.}-{3:3}: [ 314.599967][ T5813] __mutex_lock_common+0x1e5/0x2400 [ 314.605653][ T5813] mutex_lock_nested+0x17/0x20 [ 314.610908][ T5813] blkdev_get_by_dev+0x162/0xa50 [ 314.616337][ T5813] blkdev_get_by_path+0x1b8/0x2e0 [ 314.621853][ T5813] block2mtd_setup2+0x3d8/0xd90 [ 314.627193][ T5813] block2mtd_setup+0x1f/0x40 [ 314.632279][ T5813] param_attr_store+0x20a/0x300 [ 314.637619][ T5813] module_attr_store+0x5b/0x80 [ 314.642873][ T5813] kernfs_fop_write_iter+0x3a8/0x500 [ 314.648650][ T5813] vfs_write+0x748/0xd70 [ 314.653386][ T5813] ksys_write+0x153/0x260 [ 314.658207][ T5813] do_syscall_64+0x4c/0xa0 [ 314.663115][ T5813] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 314.669509][ T5813] [ 314.669509][ T5813] -> #3 (param_lock){+.+.}-{3:3}: [ 314.676679][ T5813] __mutex_lock_common+0x1e5/0x2400 [ 314.682368][ T5813] mutex_lock_nested+0x17/0x20 [ 314.687622][ T5813] param_attr_show+0xc6/0x170 [ 314.692789][ T5813] module_attr_show+0x52/0x70 [ 314.697954][ T5813] sysfs_kf_seq_show+0x316/0x4c0 [ 314.703382][ T5813] seq_read_iter+0x460/0xc50 [ 314.708478][ T5813] vfs_read+0x75e/0xd50 [ 314.713129][ T5813] ksys_read+0x153/0x260 [ 314.717881][ T5813] do_syscall_64+0x4c/0xa0 [ 314.722790][ T5813] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 314.729176][ T5813] [ 314.729176][ T5813] -> #2 (&of->mutex){+.+.}-{3:3}: [ 314.736350][ T5813] __mutex_lock_common+0x1e5/0x2400 [ 314.742040][ T5813] mutex_lock_nested+0x17/0x20 [ 314.747311][ T5813] kernfs_seq_start+0x55/0x3c0 [ 314.752566][ T5813] seq_read_iter+0x387/0xc50 [ 314.757649][ T5813] vfs_read+0x75e/0xd50 [ 314.762317][ T5813] ksys_read+0x153/0x260 [ 314.767050][ T5813] do_syscall_64+0x4c/0xa0 [ 314.771957][ T5813] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 314.778342][ T5813] [ 314.778342][ T5813] -> #1 (&p->lock){+.+.}-{3:3}: [ 314.785339][ T5813] __mutex_lock_common+0x1e5/0x2400 [ 314.791029][ T5813] mutex_lock_nested+0x17/0x20 [ 314.796285][ T5813] seq_read_iter+0x9d/0xc50 [ 314.801279][ T5813] __kernel_read+0x51d/0x980 [ 314.806360][ T5813] integrity_kernel_read+0x86/0xd0 [ 314.811962][ T5813] ima_calc_file_hash+0x946/0x1940 [ 314.817565][ T5813] ima_collect_measurement+0x335/0x7e0 [ 314.823512][ T5813] process_measurement+0x1185/0x1c20 [ 314.829294][ T5813] ima_file_check+0xc7/0x110 [ 314.834375][ T5813] path_openat+0x27cf/0x2fb0 [ 314.839456][ T5813] do_filp_open+0x1df/0x400 [ 314.844450][ T5813] do_sys_openat2+0x14b/0x500 [ 314.849617][ T5813] __x64_sys_openat+0x135/0x160 [ 314.854976][ T5813] do_syscall_64+0x4c/0xa0 [ 314.859885][ T5813] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 314.866271][ T5813] [ 314.866271][ T5813] -> #0 (&iint_mutex_key[depth]){+.+.}-{3:3}: [ 314.874509][ T5813] __lock_acquire+0x38f7/0x7d40 [ 314.879855][ T5813] lock_acquire+0x19f/0x400 [ 314.884849][ T5813] __mutex_lock_common+0x1e5/0x2400 [ 314.890537][ T5813] mutex_lock_nested+0x17/0x20 [ 314.895796][ T5813] process_measurement+0x724/0x1c20 [ 314.901487][ T5813] ima_file_check+0xc7/0x110 [ 314.906567][ T5813] path_openat+0x27cf/0x2fb0 [ 314.911649][ T5813] do_filp_open+0x1df/0x400 [ 314.916640][ T5813] do_sys_openat2+0x14b/0x500 [ 314.921808][ T5813] __x64_sys_openat+0x135/0x160 [ 314.927155][ T5813] do_syscall_64+0x4c/0xa0 [ 314.932065][ T5813] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 314.938455][ T5813] [ 314.938455][ T5813] other info that might help us debug this: [ 314.938455][ T5813] [ 314.948670][ T5813] Chain exists of: [ 314.948670][ T5813] &iint_mutex_key[depth] --> (work_completion)(&lo->rootcg_work) --> sb_writers#3 [ 314.948670][ T5813] [ 314.963749][ T5813] Possible unsafe locking scenario: [ 314.963749][ T5813] [ 314.971165][ T5813] CPU0 CPU1 [ 314.976497][ T5813] ---- ---- [ 314.981832][ T5813] rlock(sb_writers#3); [ 314.986064][ T5813] lock((work_completion)(&lo->rootcg_work)); [ 314.994710][ T5813] lock(sb_writers#3); [ 315.001355][ T5813] lock(&iint_mutex_key[depth]); [ 315.006351][ T5813] [ 315.006351][ T5813] *** DEADLOCK *** [ 315.006351][ T5813] [ 315.014479][ T5813] 1 lock held by udevd/5813: [ 315.019036][ T5813] #0: ffff88807e590460 (sb_writers#3){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 315.028139][ T5813] [ 315.028139][ T5813] stack backtrace: [ 315.033999][ T5813] CPU: 0 PID: 5813 Comm: udevd Not tainted syzkaller #0 [ 315.040905][ T5813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 315.050947][ T5813] Call Trace: [ 315.054205][ T5813] [ 315.057114][ T5813] dump_stack_lvl+0x188/0x250 [ 315.061782][ T5813] ? load_image+0x410/0x410 [ 315.066260][ T5813] ? show_regs_print_info+0x20/0x20 [ 315.071429][ T5813] ? print_circular_bug+0x12b/0x1a0 [ 315.076600][ T5813] check_noncircular+0x2f8/0x400 [ 315.081508][ T5813] ? look_up_lock_class+0x71/0x110 [ 315.086597][ T5813] ? print_deadlock_bug+0x5d0/0x5d0 [ 315.091766][ T5813] ? lockdep_lock+0xf1/0x1f0 [ 315.096332][ T5813] ? hlock_conflict+0x59/0x1f0 [ 315.101066][ T5813] ? mark_lock+0x94/0x320 [ 315.105382][ T5813] ? _find_first_zero_bit+0xd1/0xf0 [ 315.110554][ T5813] __lock_acquire+0x38f7/0x7d40 [ 315.115383][ T5813] ? lockdep_lock+0x1f0/0x1f0 [ 315.120032][ T5813] ? verify_lock_unused+0x140/0x140 [ 315.125222][ T5813] ? __lock_acquire+0x35cf/0x7d40 [ 315.130223][ T5813] lock_acquire+0x19f/0x400 [ 315.134702][ T5813] ? process_measurement+0x724/0x1c20 [ 315.140048][ T5813] ? __might_sleep+0xf0/0xf0 [ 315.144614][ T5813] ? read_lock_is_recursive+0x10/0x10 [ 315.149961][ T5813] __mutex_lock_common+0x1e5/0x2400 [ 315.155135][ T5813] ? process_measurement+0x724/0x1c20 [ 315.160494][ T5813] ? integrity_inode_get+0x412/0x560 [ 315.165766][ T5813] ? process_measurement+0x724/0x1c20 [ 315.171111][ T5813] ? process_measurement+0x70c/0x1c20 [ 315.176471][ T5813] ? mutex_lock_io_nested+0x60/0x60 [ 315.181644][ T5813] ? up_write+0x1b6/0x410 [ 315.185946][ T5813] mutex_lock_nested+0x17/0x20 [ 315.190700][ T5813] process_measurement+0x724/0x1c20 [ 315.195874][ T5813] ? ima_file_mmap+0x140/0x140 [ 315.200609][ T5813] ? tomoyo_check_path_number_acl+0x280/0x280 [ 315.206657][ T5813] ima_file_check+0xc7/0x110 [ 315.211218][ T5813] ? ima_bprm_check+0x200/0x200 [ 315.216040][ T5813] ? vfs_open+0x2b/0x80 [ 315.220172][ T5813] path_openat+0x27cf/0x2fb0 [ 315.224761][ T5813] ? do_filp_open+0x400/0x400 [ 315.229434][ T5813] do_filp_open+0x1df/0x400 [ 315.233911][ T5813] ? vfs_tmpfile+0x300/0x300 [ 315.238476][ T5813] ? _raw_spin_unlock+0x24/0x40 [ 315.243300][ T5813] ? alloc_fd+0x59e/0x650 [ 315.247602][ T5813] do_sys_openat2+0x14b/0x500 [ 315.252253][ T5813] ? __lock_acquire+0x7d40/0x7d40 [ 315.257254][ T5813] ? do_sys_open+0xe0/0xe0 [ 315.261658][ T5813] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 315.267614][ T5813] ? lock_chain_count+0x20/0x20 [ 315.272443][ T5813] __x64_sys_openat+0x135/0x160 [ 315.277267][ T5813] do_syscall_64+0x4c/0xa0 [ 315.281670][ T5813] ? clear_bhb_loop+0x30/0x80 [ 315.286322][ T5813] ? clear_bhb_loop+0x30/0x80 [ 315.290985][ T5813] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 315.296852][ T5813] RIP: 0033:0x7f43b152c407 [ 315.301241][ T5813] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 315.320821][ T5813] RSP: 002b:00007fff9dacfa20 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 315.329224][ T5813] RAX: ffffffffffffffda RBX: 00007f43b143e880 RCX: 00007f43b152c407 [ 315.337170][ T5813] RDX: 00000000000a0241 RSI: 00007fff9dad06e0 RDI: ffffffffffffff9c [ 315.345116][ T5813] RBP: 0000559907251b60 R08: 0000000000000000 R09: 0000000000000000 [ 315.353063][ T5813] R10: 0000000000000124 R11: 0000000000000202 R12: 00005599071d4830 [ 315.361006][ T5813] R13: 00007fff9dad06e0 R14: 00007fff9dad02e0 R15: 00007fff9dacfee0 [ 315.368956][ T5813] [ 315.465572][ T25] audit: type=1800 audit(2000000076.570:130): pid=5813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 315.522182][ T25] audit: type=1800 audit(2000000076.570:131): pid=5813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 315.548603][ T25] audit: type=1800 audit(2000000076.570:132): pid=5813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 315.571009][ T25] audit: type=1800 audit(2000000076.570:133): pid=5813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="udevd" name="/run/udev/data/b7:3" dev="tmpfs" ino=10927 res=0 errno=0 [ 315.594162][ T25] audit: type=1800 audit(2000000077.660:134): pid=4286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 315.615137][ T25] audit: type=1800 audit(2000000077.660:135): pid=4286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35938 res=0 errno=0 [ 315.636274][ T25] audit: type=1800 audit(2000000077.660:136): pid=4286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="udevd" name="/run/udev/data/b7:7" dev="tmpfs" ino=10964 res=0 errno=0 [ 316.889427][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.895698][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.033118][ T25] kauditd_printk_skb: 15 callbacks suppressed [ 322.033127][ T25] audit: type=1800 audit(2000000084.310:152): pid=14992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="dhcpcd" name="/lib/dhcpcd/dhcpcd-run-hooks" dev="sda1" ino=273 res=0 errno=0 [ 322.387345][ T25] audit: type=1800 audit(2000000084.670:153): pid=14993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="dhcpcd" name="/lib/dhcpcd/dhcpcd-run-hooks" dev="sda1" ino=273 res=0 errno=0 [ 322.416415][ T25] audit: type=1800 audit(2000000084.700:154): pid=14994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="dhcpcd" name="/lib/dhcpcd/dhcpcd-run-hooks" dev="sda1" ino=273 res=0 errno=0 [ 323.181522][ T25] audit: type=1800 audit(2000000085.460:155): pid=14995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="dhcpcd" name="/lib/dhcpcd/dhcpcd-run-hooks" dev="sda1" ino=273 res=0 errno=0 [ 323.495749][ T25] audit: type=1800 audit(2000000085.770:156): pid=14996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="dhcpcd" name="/lib/dhcpcd/dhcpcd-run-hooks" dev="sda1" ino=273 res=0 errno=0 [ 323.574097][ T25] audit: type=1800 audit(2000000085.850:157): pid=14997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="dhcpcd" name="/lib/dhcpcd/dhcpcd-run-hooks" dev="sda1" ino=273 res=0 errno=0 [ 323.791011][ T25] audit: type=1800 audit(2000000086.070:158): pid=14998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="dhcpcd" name="/lib/dhcpcd/dhcpcd-run-hooks" dev="sda1" ino=273 res=0 errno=0