last executing test programs: 7m40.863367105s ago: executing program 32 (id=909): r0 = socket$inet6(0xa, 0x1, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x18}, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x8}, {0x1ff, 0x0, 0x4, 0xffffffffffffffff}, 0x1, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@loopback, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x8, @empty, 0x7}, 0x1c) 5m27.12667505s ago: executing program 33 (id=1443): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 3m4.068469656s ago: executing program 5 (id=1983): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x101, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) 3m2.536961712s ago: executing program 5 (id=1988): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x2a0}, 0x1, 0x0, 0x0, 0x10}, 0x2880) 3m1.874058725s ago: executing program 5 (id=1991): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 3m0.584647526s ago: executing program 5 (id=1994): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 2m56.406072968s ago: executing program 5 (id=2005): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {}, {@nojournal_checksum}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}]}, 0xfd, 0x574, &(0x7f0000000cc0)="$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") rename(&(0x7f0000000000)='./file2\x00', &(0x7f00000005c0)='./file0/file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 2m54.790449036s ago: executing program 5 (id=2007): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a6a038, &(0x7f0000002cc0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1fc1ca7, 0x0, 0x83, 0x0, &(0x7f0000000080)) 2m39.521072126s ago: executing program 34 (id=2007): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$eJzs3c9vI1cdAPDvTOLd7G6KU0CoVKJUtGi3grU3DW0jhKBc4FQJKPclJE4UxY6j2CmbqKKp+A8QEkicOHFB4g9AQj3wB6BKleCCOCBAIARbOCABHTTjsZp17CTQrJ3Gn4/04vfm1/e9sfw8M36ZCWBqPRkRL0bETEQ8ExHVcnpapjjspXy5t++/upqnJLLs5b8mkZTT+tvKy7MRcaNcbS4ivvbliG8mx+N29g+2VprNxm5ZrndbO/XO/sHtzdbKRmOjsb20tPj88gvLzy3fyUrvqZ0L/cyPv/T5n3/6W7+7++db386r9bmPRCUG2nGeek2vFPuiL99Huw8j2ATMlO2pTLoiAACcSX6M/8GI+ERx/F+NmeJobsDMJGoGAAAAnJfsC/Px7yQiAwAAAC6tNCLmI0lr5ViA+UjTK+W1gQ/H9bTZ7nQ/td7e217L50UsRCVd32w27pRjhReikuTlxXKMbb/87EB5KSIejYjvVa8V5dpqu7k24WsfAAAAMC1uDJz//6OaFvnTDfk/AQAAAODiWhhZAAAAAC4Lp/wAAABw+Q2e/7vfPwAAAFwqX3nppTxl/edfr72yv7fVfuX2WqOzVWvtrdZW27s7tY12e6O4Z1/rtO012+2dz8T23r16t9Hp1jv7B3db7b3t7t3NBx6BDQAAAIzRox9/49dJRBx+9lqRorwPIMAD/jDpCgDnyVA/mF7u4g3TqzLpCgATl5wy3+AdAAB4/7v50eO///ef/+/aAFxuxvoAwPTx+z9Mr4oRgDC1ZstrAB/oFa+OWm7k7/+/PGukLIt4s3p0iuuLAAAwXvNFStJaeR4wH2laq0U8EpEuRCVZ32w27pTnB7+qVq7m5cVizeTUMcMAAAAAAAAAAAAAAAAAAAAAAAAAQE+WJZEBAAAAl1pE+qekuJt/xM3q0/OD1weuJP+sxh/Lwg9f/v69lW53dzGf/rfiWV5XIqL7g3L6syMfHwYAAACct+Rw5KzeeXr5ujjWWgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBd6+/+pqP40z7l++GBELw+LPxlzxOheViLj+9yRmj6yXRMTMOcQ/fD0iHhsWP4l3suy1KGsxLP61hxx/odg1w+OnEXHjHOLDNHsj739eHPb5S+PJ4nX452+2TO/V6P4vLSM/VvRzw/qfR45trTU0xuNv/bTey1WOx3894vHZ4f1Pv/9NRsR/6tjW/pVl2fH43/j6wcGo9mc/irg59PsneSBWvdvaqXf2D25vtlY2GhuN7aWlxeeXX1h+bvlOfX2z2Sj/Do3x3Y/97J1R8fP2Xx8S/7e/6fW/J7X/6VEbHfCft+7d/1Ave+wNyOPfemro9+9cjIiflt99nyzz+fyb/fxhL3/UEz9584mT2r82Yv+f9v7fOmP7n/nqd35/xkUBgDHo7B9srTSbjd0TMnNnWOb9mPnF3IWoxv+YyV7rvXMXpT7/byY/Wn13Sr9VF6BiRzLZWGJdLY7nz7rWlTG1faLdEgAA8BC8e9A/6ZoAAAAAAAAAAAAAAAAAAADA9BrHrdQGYx5OpqkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACf6bwAAAP//8yDcjQ==") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a6a038, &(0x7f0000002cc0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1fc1ca7, 0x0, 0x83, 0x0, &(0x7f0000000080)) 2m36.831401177s ago: executing program 1 (id=2055): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf, 0x2}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x5}]}}}]}, 0x44}}, 0x0) 2m36.18366054s ago: executing program 1 (id=2056): syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000001b80)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x0) getdents64(r0, &(0x7f0000000280)=""/59, 0x3b) getdents64(r0, 0x0, 0x300) 2m34.957434594s ago: executing program 1 (id=2060): r0 = syz_io_uring_setup(0x1db9, &(0x7f0000000000)={0x0, 0xacbb, 0x2, 0x1, 0x61}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x0, 0x44}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f0000000280)={0x0, 0x1}, 0x1) 2m34.15161536s ago: executing program 1 (id=2061): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) setreuid(0x0, 0xee00) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) 2m33.299588277s ago: executing program 1 (id=2066): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {}, {@nojournal_checksum}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}]}, 0xfd, 0x574, &(0x7f0000000cc0)="$eJzs3U1rG0cfAPD/ylLenOexAyG0PZRADk0JkWO7LykUkh5LGxpo76mwFRMsR8GSQ+wGmhyaSy8lFEppoPQD9N5j6Bfopwi0gVCCaQ+l4LLyylFsyW+RIyX6/WDtGe1KM6PZ/2pmV2IDGFjH0z+5iFcj4pskYqRlXT6ylcdXt1t+fHMqXZJYWfn0zyTOrXutJPs/nGVeiYhfv4o4ldtYbm1xabZUqZTns/xYfe7aWG1x6fSVudJMeaZ8dWJy8uzbkxPvvftO19r65sW/v//k/odnvz6x/N3PD4/cTeJ8HM7Wpe3qQhG3WjPHS/9mqUKcX7fheBcK6ydJryvArgxlcV6I9BgwEkNZ1AMvvy8jYgUYUIn4hwHVHAc05/Zdmge/MB59sDoB2tj+/Oq5kTjQmBsdWk6emhml893RLpSflvHLH/fupktsfh7i4BZ5gB25dTsizuTzG49/SXb8270zjZPHm1tfxqB9/kAv3U/HP8mtiA3xn1sb/0Sb8c9wm9jdja3jP/ewC8V0lI7/3m87/l07dI0OZbn/NcZ8heTylUr5TET8PyJORmF/mt/ses7Z5Qcrnda1jv/SJS2/ORbM6vEwv//p50yX6qVnaXOrR7cjXms7/k3W+j9p0//p+3Fxm2UcK997vdO6rdu/t1Z+inijbf8/uaKVbH59cqyxP4w194qN/rpz7LdO5fe6/Wn/H9q8/aNJ6/Xa2s7L+PHAP+VO63a7/+9LPmuk92WP3SjV6/PjEfuSj/PD6x+fePLcZr65fdr+kyfax/9m+386+fp8m+2/c/ROx037of+nd9T/O088+OiLHzqVv73+f6uROpk9sp3j33Yr+CzvHQAAAAAAAPSbXEQcjiRXXEvncsXi6vc7jsahXKVaq5+6XF24Oh2N38qORiHXvNI90vJ9iPHs+7DN/MS6/GREHImIb4cONvLFqWpluteNBwAAAAAAAAAAAAAAAAAAgD4x3OH3/6nfh3pdO2DPNW5ssL/XtQB6Yctb/nfjTk9AX9oy/oGX1s7j35kBeFn4/IfBJf5hcIl/GFzbjf/CyB5XBHjufP7D4BL/AAAAAAAAAAAAAAAAAAAAAAAAAAAA0FUXL1xIl5Xlxzen0vz09cWF2er109Pl2mxxbmGqOFWdv1acqVZnKuXiVHVuq9erVKvXxidi4cZYvVyrj9UWly7NVReu1i9dmSvNlC+VC8+lVQAAAAAAAAAAAAAAAAAAAPBiqS0uzZYqlfK8RMfEueiLauxlA1ft6un5fmmFRFcTPT4wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECL/wIAAP//AzIzTA==") rename(&(0x7f0000000000)='./file2\x00', &(0x7f00000005c0)='./file0/file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 2m32.329605984s ago: executing program 0 (id=2071): r0 = syz_io_uring_setup(0x1db9, &(0x7f0000000000)={0x0, 0xacbb, 0x2, 0x1, 0x61}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x0, 0x44}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f0000000280)={0x0, 0x1}, 0x1) 2m32.064020946s ago: executing program 1 (id=2074): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) sendto$packet(r0, &(0x7f0000000100)="3f031c00eee8140006001e0089e9aaa911d7c2290f00888e1327c9167c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000080)={0xc9, 0x0, r1, 0x1, 0x4, 0x6, @multicast}, 0x14) 2m31.659460828s ago: executing program 0 (id=2076): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb0000009}) epoll_pwait2(r1, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) 2m31.05460807s ago: executing program 0 (id=2077): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m30.307222523s ago: executing program 0 (id=2079): ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') sendfile(r0, r1, 0x0, 0xfff2) 2m29.933659133s ago: executing program 4 (id=2081): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) r0 = syz_usb_connect(0x3, 0x10e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e67e350e010000062404"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 2m29.503993971s ago: executing program 0 (id=2083): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {}, {@nojournal_checksum}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}]}, 0xfd, 0x574, &(0x7f0000000cc0)="$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") rename(&(0x7f0000000000)='./file2\x00', &(0x7f00000005c0)='./file0/file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 2m28.084286389s ago: executing program 0 (id=2084): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="26003300d0000000ffffffffffff0802110000005050505050500000000425030a9d003e"], 0x4c}}, 0x0) 2m27.028839955s ago: executing program 4 (id=2085): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0xa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @empty}, {0x2, 0xfff9, 0x8, @empty, 0xffffffff}, r1, 0x9dffffff}}, 0x48) 2m26.239612386s ago: executing program 4 (id=2087): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000002000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 2m25.483069411s ago: executing program 4 (id=2088): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xebd53000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, 0x0, 0x0) 2m16.384261126s ago: executing program 35 (id=2074): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) sendto$packet(r0, &(0x7f0000000100)="3f031c00eee8140006001e0089e9aaa911d7c2290f00888e1327c9167c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000080)={0xc9, 0x0, r1, 0x1, 0x4, 0x6, @multicast}, 0x14) 2m16.320597204s ago: executing program 4 (id=2093): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {}, {@nojournal_checksum}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}]}, 0xfd, 0x574, &(0x7f0000000cc0)="$eJzs3U1rG0cfAPD/ylLenOexAyG0PZRADk0JkWO7LykUkh5LGxpo76mwFRMsR8GSQ+wGmhyaSy8lFEppoPQD9N5j6Bfopwi0gVCCaQ+l4LLyylFsyW+RIyX6/WDtGe1KM6PZ/2pmV2IDGFjH0z+5iFcj4pskYqRlXT6ylcdXt1t+fHMqXZJYWfn0zyTOrXutJPs/nGVeiYhfv4o4ldtYbm1xabZUqZTns/xYfe7aWG1x6fSVudJMeaZ8dWJy8uzbkxPvvftO19r65sW/v//k/odnvz6x/N3PD4/cTeJ8HM7Wpe3qQhG3WjPHS/9mqUKcX7fheBcK6ydJryvArgxlcV6I9BgwEkNZ1AMvvy8jYgUYUIn4hwHVHAc05/Zdmge/MB59sDoB2tj+/Oq5kTjQmBsdWk6emhml893RLpSflvHLH/fupktsfh7i4BZ5gB25dTsizuTzG49/SXb8270zjZPHm1tfxqB9/kAv3U/HP8mtiA3xn1sb/0Sb8c9wm9jdja3jP/ewC8V0lI7/3m87/l07dI0OZbn/NcZ8heTylUr5TET8PyJORmF/mt/ses7Z5Qcrnda1jv/SJS2/ORbM6vEwv//p50yX6qVnaXOrR7cjXms7/k3W+j9p0//p+3Fxm2UcK997vdO6rdu/t1Z+inijbf8/uaKVbH59cqyxP4w194qN/rpz7LdO5fe6/Wn/H9q8/aNJ6/Xa2s7L+PHAP+VO63a7/+9LPmuk92WP3SjV6/PjEfuSj/PD6x+fePLcZr65fdr+kyfax/9m+386+fp8m+2/c/ROx037of+nd9T/O088+OiLHzqVv73+f6uROpk9sp3j33Yr+CzvHQAAAAAAAPSbXEQcjiRXXEvncsXi6vc7jsahXKVaq5+6XF24Oh2N38qORiHXvNI90vJ9iPHs+7DN/MS6/GREHImIb4cONvLFqWpluteNBwAAAAAAAAAAAAAAAAAAgD4x3OH3/6nfh3pdO2DPNW5ssL/XtQB6Yctb/nfjTk9AX9oy/oGX1s7j35kBeFn4/IfBJf5hcIl/GFzbjf/CyB5XBHjufP7D4BL/AAAAAAAAAAAAAAAAAAAAAAAAAAAA0FUXL1xIl5Xlxzen0vz09cWF2er109Pl2mxxbmGqOFWdv1acqVZnKuXiVHVuq9erVKvXxidi4cZYvVyrj9UWly7NVReu1i9dmSvNlC+VC8+lVQAAAAAAAAAAAAAAAAAAAPBiqS0uzZYqlfK8RMfEueiLauxlA1ft6un5fmmFRFcTPT4wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECL/wIAAP//AzIzTA==") rename(&(0x7f0000000000)='./file2\x00', &(0x7f00000005c0)='./file0/file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 2m14.767792459s ago: executing program 4 (id=2095): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x442, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b40)={r0, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f00000008c0)='./file2\x00', &(0x7f0000000900)=[0x2], 0x0, 0x0, 0x7, 0x0, r1}}, 0x40) 2m13.049308822s ago: executing program 6 (id=2099): syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) rmdir(&(0x7f0000000100)='./file0\x00') 2m12.799589021s ago: executing program 36 (id=2084): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="26003300d0000000ffffffffffff0802110000005050505050500000000425030a9d003e"], 0x4c}}, 0x0) 2m12.110180993s ago: executing program 6 (id=2101): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r0, 0x0, 0x4, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r1, 0xe) 2m11.011701598s ago: executing program 6 (id=2102): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0xd, 0x1, 0x0, "ac9ea3c75608cf7a74445673c1f1fe7bb3fe9603a055824fd5df22e9bd6c89a0"}) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc22d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x1a0, 0x40, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x3, 0x4, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x745}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x89, 0x6, 0x2}}}}}]}}]}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) 2m8.732660469s ago: executing program 6 (id=2103): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='z\n'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff738}, 0x94) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c666c7573682c646d61736b3d30303030303030303030303030303030303137373737372c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c757466383d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d312c726f6469722c696f636861727365743d757466382c666d61736b3d30303030303030303030303030303030303030303030342c646d61736b3d30303030303030303030303030303030303030303030372c757466383d312c726f6469722c73686f72746e616d653d77696e39352c726f6469722c00743ccfec81d6c7d05b0f2a54ddce151ec4cbbaacb9552647fd950fedfdc024b3953e7669bc9d4f66e3beaecb80fe73633280b1d3e82023d4f5c7f5a4989406c0f0d0cf537f132dc1e63d84a17532cb78ae7a368bc0029207b9b166705972f4e8dad041e6be170bf43057b456d43f100c53b471aa6c8e3751", @ANYRES16=0x0], 0x1, 0x2c2, &(0x7f00000006c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 2m7.800557585s ago: executing program 6 (id=2104): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {}, {@nojournal_checksum}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}]}, 0xfd, 0x574, &(0x7f0000000cc0)="$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") rename(&(0x7f0000000000)='./file2\x00', &(0x7f00000005c0)='./file0/file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 2m6.889694479s ago: executing program 6 (id=2105): pipe(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) read$hiddev(r0, &(0x7f00000000c0)=""/37, 0x25) write$binfmt_script(r1, 0x0, 0xb) write$FUSE_INIT(r1, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x8000000, 0x420, 0x89, 0x5, 0x70, 0x7, 0x0, 0x0, 0x40, 0x6}}, 0x50) 1m59.414700992s ago: executing program 37 (id=2095): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x442, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b40)={r0, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f00000008c0)='./file2\x00', &(0x7f0000000900)=[0x2], 0x0, 0x0, 0x7, 0x0, r1}}, 0x40) 1m51.4024052s ago: executing program 38 (id=2105): pipe(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) read$hiddev(r0, &(0x7f00000000c0)=""/37, 0x25) write$binfmt_script(r1, 0x0, 0xb) write$FUSE_INIT(r1, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x8000000, 0x420, 0x89, 0x5, 0x70, 0x7, 0x0, 0x0, 0x40, 0x6}}, 0x50) 6.349452902s ago: executing program 9 (id=2405): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003300)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @empty}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 5.531336594s ago: executing program 9 (id=2410): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000540)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/17, 0x11, 0x2, 0x4, 0x9, 0x4, 0xc08}}, 0x120) read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 5.29556886s ago: executing program 2 (id=2411): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'erspan0\x00', 0x0}) r0 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) 5.029929684s ago: executing program 7 (id=2412): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x4, @multicast, 'lo\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd29, 0x2, {0x0, 0x0, 0x0, 0x0, 0x190c7}, [@IFLA_IFNAME={0x14, 0x3, 'hsr0\x00'}, @IFLA_MTU={0x8, 0x4, 0x9}]}, 0x3c}}, 0x0) 4.837055778s ago: executing program 8 (id=2413): r0 = eventfd2(0x43, 0x1) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb, 0x0, 0x6}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001200010720f800000000000007000000", @ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.66973993s ago: executing program 3 (id=2414): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000014c0)=0x92, 0x4) bind$can_raw(r0, &(0x7f0000001580), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000001c0), 0x4) 4.340397s ago: executing program 2 (id=2415): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001cc0)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.918459481s ago: executing program 7 (id=2416): r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x2) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000080)={"5381d6dc", 0x2, 0x6, 0x1, 0x400, 0x7, "9ad7f18bee5970ebb85649ef55e24c", "1012e304", "6ef1fee9", "a88bb21f", ["5c294bd54bdbcc454ec4fe2a", "1e823e1929dad85f7c58b964", "0cefddcd3a6e078d00c07b4e", "faf2b69f1b22666ad990e013"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000840)={0x3, 0x3, 0x9, 0x6, 0xf1e, 0x6, "991deb753abfea8f408844d477546aef", 0x2, 0x36, 0xe2, 0x7, 0xc, 0xad, 0xee}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000480)={'\x00', 0x0, 0x5, 0x0, 0x2, 0x9, '\x00', "249e4502", "9e068dd9", '\x00', ["fdffcf89171100bb08844f10", "d78cb8b0ff00000000fc00", "0000effffffff700c00500", "000000000000000400"]}) 3.847001304s ago: executing program 8 (id=2417): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e24, 0x4, @empty, 0x1f}}}, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 3.846779497s ago: executing program 9 (id=2418): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@broadcast, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) 3.774265582s ago: executing program 3 (id=2419): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2002, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9938) close(0x3) 3.416133727s ago: executing program 2 (id=2420): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x8, 0x7, 0x7fffffff}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0x3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 3.148802184s ago: executing program 7 (id=2421): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$sock(r1, &(0x7f0000006fc0)=[{{0x0, 0x0, &(0x7f0000004580)=[{&(0x7f0000000300)="d8", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004880)=[{&(0x7f0000004740)="3dee", 0x2}], 0x1}}], 0x2, 0xc000) 2.96509709s ago: executing program 8 (id=2422): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x3, 0x2) 2.925939025s ago: executing program 3 (id=2423): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) 2.85783575s ago: executing program 9 (id=2424): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)=0x180004) write$binfmt_elf32(r0, 0x0, 0x4cd) 2.567998425s ago: executing program 2 (id=2425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5c}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) 2.35479757s ago: executing program 7 (id=2426): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = epoll_create(0xea3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0xb0000001}) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @empty}, 0x10) 2.249443418s ago: executing program 8 (id=2427): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085000000d000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.099840302s ago: executing program 3 (id=2428): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d03420008000200", @ANYBLOB="358742", @ANYRES8=r0], 0x44}, 0x1, 0x0, 0x0, 0x6cb3fe8b19b50fba}, 0x0) 1.842341204s ago: executing program 2 (id=2429): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f023, 0xfffffffe}) 1.498741294s ago: executing program 8 (id=2430): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x27}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000240)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.419615654s ago: executing program 7 (id=2431): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081", 0x7}], 0x1}, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00010002"], 0x8) 1.358714751s ago: executing program 3 (id=2432): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) 943.305365ms ago: executing program 2 (id=2433): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x2, 0x100010008, 0x6, 0x0, 0x2, 0x7fffffff}, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x14, 0x2f, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 751.495481ms ago: executing program 9 (id=2434): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x800000001ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000280)={0x23, 0x3, 0x10, 0x4008, 0x0, 0x3, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, 0x0) 523.690643ms ago: executing program 7 (id=2435): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x1a, &(0x7f0000000440)=@string={0x1a, 0x3, "f1a7fc4b485c29f6e6cc7e1e58301c29d1c33f1eb4b9bf0c"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 502.523489ms ago: executing program 8 (id=2436): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket(0x23, 0x5, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000008}) 444.034082ms ago: executing program 3 (id=2437): ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 0s ago: executing program 9 (id=2438): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0xfffffffffffffff8) kernel console output (not intermixed with test programs): aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 695.347023][ T5581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.442767][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.457242][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 697.521492][T11313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 697.555596][T11475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1986'. [ 697.614241][T11313] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 697.660591][T11313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 697.760882][T11313] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 697.796227][T11313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 697.909266][T11313] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 697.952287][T11313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 698.049281][T11313] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 698.235616][T11482] loop1: detected capacity change from 0 to 1024 [ 698.315807][T11482] EXT4-fs: Ignoring removed orlov option [ 698.446113][T11482] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 699.145952][ T5581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.500686][T11313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.775015][T11313] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.902329][ T3228] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.909843][ T3228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.061357][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.068907][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.612236][T11506] loop1: detected capacity change from 0 to 512 [ 700.724095][T11506] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1996: Invalid inode bitmap blk 4 in block_group 0 [ 700.838801][T11506] loop1: lost filesystem error report for type 5 error -117 [ 700.842196][T11506] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 701.038856][T11088] kernel write not supported for file /snd/seq (pid: 11088 comm: kworker/0:0) [ 701.063560][T11506] EXT4-fs (loop1): shut down requested (2) [ 701.455915][ T5581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.149146][T11088] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 702.341180][T11088] usb 5-1: Using ep0 maxpacket: 16 [ 702.377322][T11088] usb 5-1: config 166 has an invalid interface number: 177 but max is 1 [ 702.417158][T11088] usb 5-1: config 166 has an invalid interface number: 34 but max is 1 [ 702.449940][T11088] usb 5-1: config 166 has no interface number 0 [ 702.486895][T11088] usb 5-1: config 166 has no interface number 1 [ 702.506974][T11088] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 702.550556][T11088] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 702.630821][T11088] usb 5-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 702.668736][T11088] usb 5-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 702.727396][T11088] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 702.796192][T11088] usb 5-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 702.837366][T11088] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 702.895652][T11088] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 702.926411][T11088] usb 5-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 702.969717][T11534] program syz.1.2003 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 702.986458][T11088] usb 5-1: config 166 interface 177 has no altsetting 0 [ 703.025585][T11088] usb 5-1: config 166 interface 34 has no altsetting 0 [ 703.062188][T11088] usb 5-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 703.091147][T11088] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.138911][T11088] usb 5-1: Product: syz [ 703.162675][T11088] usb 5-1: Manufacturer: syz [ 703.189747][T11088] usb 5-1: SerialNumber: syz [ 703.353056][T11532] loop6: detected capacity change from 0 to 4096 [ 703.533961][T11088] ums-realtek 5-1:166.177: USB Mass Storage device detected [ 703.739330][T11088] ums-realtek 5-1:166.34: USB Mass Storage device detected [ 703.895957][T11542] loop5: detected capacity change from 0 to 1024 [ 704.014445][T11088] ums-realtek 5-1:166.34: probe with driver ums-realtek failed with error -5 [ 704.089498][T11542] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 704.147573][T11088] uvcvideo 5-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 704.155477][T11088] uvcvideo 5-1:166.34: No valid video chain found. [ 704.185712][T11088] usb 5-1: USB disconnect, device number 18 [ 705.182128][T11313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 705.512290][ T9622] EXT4-fs error (device loop5): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 705.634705][T11565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2009'. [ 705.887136][T11313] veth0_vlan: entered promiscuous mode [ 706.038463][T11313] veth1_vlan: entered promiscuous mode [ 706.052899][ T9622] EXT4-fs error (device loop5): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 706.241544][T11570] input: syz1 as /devices/virtual/input/input18 [ 706.508740][T11313] veth0_macvtap: entered promiscuous mode [ 706.590738][T11313] veth1_macvtap: entered promiscuous mode [ 706.695161][ T9622] EXT4-fs error (device loop5): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 706.833219][T11313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 706.971981][T11313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 706.999400][ T10] kernel write not supported for file /snd/seq (pid: 10 comm: kworker/0:1) [ 707.112422][ T34] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.156775][ T34] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.190834][ T34] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.246320][ T9622] EXT4-fs error (device loop5): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 707.291681][ T34] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.755531][T11586] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip_vti0, syncid = 4, id = 0 [ 707.829467][ T9622] EXT4-fs error (device loop5): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 708.299077][ T9622] EXT4-fs error (device loop5): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 708.988725][ T9622] EXT4-fs error (device loop5): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 709.460898][ T9622] EXT4-fs error (device loop5): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 709.645677][T11602] loop4: detected capacity change from 0 to 4096 [ 710.123117][ T9622] EXT4-fs error (device loop5): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 710.307667][T11088] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 710.510939][T11088] usb 2-1: Using ep0 maxpacket: 16 [ 710.569126][T11088] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 710.633978][T11088] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 710.679249][T11088] usb 2-1: config 166 has no interface number 0 [ 710.711002][T11088] usb 2-1: config 166 has no interface number 1 [ 710.730540][ T9622] EXT4-fs error (device loop5): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 710.744541][T11088] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 710.808616][T11088] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 710.836617][T11088] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 710.861067][T11088] usb 2-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 710.895756][T11088] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 710.964961][T11088] usb 2-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 711.031480][T11088] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 711.100839][T11088] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 711.140701][T11088] usb 2-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 711.218204][T11088] usb 2-1: config 166 interface 177 has no altsetting 0 [ 711.268775][T11088] usb 2-1: config 166 interface 34 has no altsetting 0 [ 711.348917][T11088] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 711.412642][T11088] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.470243][T11088] usb 2-1: Product: syz [ 711.500613][T11088] usb 2-1: Manufacturer: syz [ 711.533057][T11088] usb 2-1: SerialNumber: syz [ 711.555496][ T9622] EXT4-fs error (device loop5): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 711.934883][T11088] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 712.172265][T11088] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 712.345256][ T9622] EXT4-fs error (device loop5): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 712.442988][T11088] ums-realtek 2-1:166.34: probe with driver ums-realtek failed with error -5 [ 712.570633][T11088] uvcvideo 2-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 712.597750][T11088] uvcvideo 2-1:166.34: No valid video chain found. [ 712.706322][T11088] usb 2-1: USB disconnect, device number 18 [ 712.923891][ T9622] EXT4-fs error (device loop5): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 713.471603][ T9622] EXT4-fs error (device loop5): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 714.067251][ T9622] EXT4-fs error (device loop5): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 714.197755][T11088] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 714.334848][T10600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.377053][T10600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.422612][T11088] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.475811][T11088] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.523071][T11088] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 714.561532][T11088] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.613633][ T9622] EXT4-fs error (device loop5): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 714.634240][T11088] usb 2-1: config 0 descriptor?? [ 714.710374][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.742563][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.911935][ T24] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 715.104843][ T24] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 715.146961][ T24] usb 7-1: config 0 has no interface number 0 [ 715.166438][T11088] playstation 0003:054C:0BA0.001E: unknown main item tag 0x0 [ 715.192278][ T24] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 715.197687][T11088] playstation 0003:054C:0BA0.001E: unknown main item tag 0x0 [ 715.234950][ T9622] EXT4-fs error (device loop5): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 715.253891][T11088] playstation 0003:054C:0BA0.001E: unknown main item tag 0x0 [ 715.266762][T11088] playstation 0003:054C:0BA0.001E: unknown main item tag 0x0 [ 715.267999][ T24] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 715.277385][T11088] playstation 0003:054C:0BA0.001E: unknown main item tag 0x0 [ 715.361620][T11088] playstation 0003:054C:0BA0.001E: unknown main item tag 0x0 [ 715.371302][ T24] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 715.388794][T11088] playstation 0003:054C:0BA0.001E: unknown main item tag 0x0 [ 715.439456][T11088] playstation 0003:054C:0BA0.001E: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.1-1/input0 [ 715.450101][ T24] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 715.504345][ T24] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 715.555003][ T24] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 715.584986][T11088] playstation 0003:054C:0BA0.001E: Invalid reportID received, expected 18 got 179 [ 715.618446][ T24] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 715.627614][T11088] playstation 0003:054C:0BA0.001E: Failed to retrieve DualShock4 pairing info: -22 [ 715.627852][T11088] playstation 0003:054C:0BA0.001E: Failed to get MAC address from DualShock4 [ 715.628027][T11088] playstation 0003:054C:0BA0.001E: Failed to create dualshock4. [ 715.696333][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.741181][T11088] playstation 0003:054C:0BA0.001E: probe with driver playstation failed with error -22 [ 715.749216][ T24] usb 7-1: config 0 descriptor?? [ 715.752191][ T9622] EXT4-fs error (device loop5): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 715.805741][T11667] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 715.828022][T11088] usb 2-1: USB disconnect, device number 19 [ 715.858680][T11667] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 715.946505][ T24] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 716.165016][T11671] fido_id[11671]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 716.263209][T11088] usb 7-1: USB disconnect, device number 10 [ 716.332756][T11088] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 716.495426][ T9622] EXT4-fs error (device loop5): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 716.999689][ T9622] EXT4-fs error (device loop5): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 717.134902][T11678] loop0: detected capacity change from 0 to 4096 [ 717.548763][ T9622] EXT4-fs error (device loop5): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 718.173502][ T9622] EXT4-fs error (device loop5): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 718.709761][ T9622] EXT4-fs error (device loop5): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 718.812371][T11692] loop4: detected capacity change from 0 to 1024 [ 718.832095][T11694] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2040'. [ 718.877972][T11692] EXT4-fs: Ignoring removed orlov option [ 719.011429][T11692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 719.297308][ T9622] EXT4-fs error (device loop5): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 719.573761][ T5589] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.745499][ T9622] EXT4-fs error (device loop5): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 719.901737][T11088] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 720.088453][T11088] usb 7-1: Using ep0 maxpacket: 32 [ 720.152197][T11088] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.208382][T11088] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.231209][ T9622] EXT4-fs error (device loop5): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 720.284799][T11088] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.347649][T11088] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 720.435854][T11088] usb 7-1: config 0 interface 0 has no altsetting 0 [ 720.478186][T11088] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 720.553265][T11088] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.577314][T11710] netlink: 'syz.1.2048': attribute type 12 has an invalid length. [ 720.605271][T11088] usb 7-1: config 0 descriptor?? [ 720.618087][T11710] netlink: 'syz.1.2048': attribute type 2 has an invalid length. [ 720.653009][T11710] netlink: 'syz.1.2048': attribute type 1 has an invalid length. [ 720.701840][T11710] netlink: 'syz.1.2048': attribute type 37 has an invalid length. [ 720.718255][ T10] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 720.747155][T11710] netlink: 'syz.1.2048': attribute type 2 has an invalid length. [ 720.784381][T11710] netlink: 340 bytes leftover after parsing attributes in process `syz.1.2048'. [ 720.827961][T11710] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.925933][ T10] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 720.956452][ T10] usb 1-1: config 0 has no interface number 0 [ 720.977792][ T10] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 721.026820][ T10] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 721.057790][ T10] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 721.101274][ T10] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 721.131608][T11088] hid-thrustmaster 0003:044F:B65D.001F: unknown main item tag 0x0 [ 721.169977][T11088] hid-thrustmaster 0003:044F:B65D.001F: unknown main item tag 0x0 [ 721.183739][ T10] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 721.214117][T11088] hid-thrustmaster 0003:044F:B65D.001F: unknown main item tag 0x0 [ 721.251626][ T10] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 721.267296][T11088] hid-thrustmaster 0003:044F:B65D.001F: unknown main item tag 0x0 [ 721.288311][T11088] hid-thrustmaster 0003:044F:B65D.001F: unknown main item tag 0x0 [ 721.300109][ T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 721.358478][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.389063][T11088] hid-thrustmaster 0003:044F:B65D.001F: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.6-1/input0 [ 721.438335][ T10] usb 1-1: config 0 descriptor?? [ 721.445827][T11088] hid-thrustmaster 0003:044F:B65D.001F: Wrong number of endpoints? [ 721.479750][T11708] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 721.518438][ C0] hid-thrustmaster 0003:044F:B65D.001F: Unknown packet type 0x0, unable to proceed further with wheel init [ 721.546814][T11708] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 721.624271][ T10] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 721.720680][T11715] Falling back ldisc for ttyS3. [ 721.744879][ T10] usb 7-1: USB disconnect, device number 11 [ 721.971863][ C1] ldusb 1-1:0.55: usb_submit_urb failed (-1) [ 721.980095][ T807] usb 1-1: USB disconnect, device number 17 [ 721.993417][ T5586] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 722.009773][ T5586] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 722.019982][ T5586] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 722.034930][ T5586] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 722.059682][ T5586] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 722.103308][ T807] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 722.276719][T11716] fido_id[11716]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 722.959043][T11730] loop6: detected capacity change from 0 to 128 [ 723.054392][T11730] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 723.102083][T11730] ext4 filesystem being mounted at /106/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 723.654356][ T9900] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 723.768104][T11738] loop0: detected capacity change from 0 to 2048 [ 723.912383][T11741] loop1: detected capacity change from 0 to 256 [ 723.925955][T11738] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 724.033255][T11741] exfat: Deprecated parameter 'utf8' [ 724.045648][T11738] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 724.084211][T11741] exfat: Deprecated parameter 'namecase' [ 724.120462][T11741] exfat: Deprecated parameter 'utf8' [ 724.128160][ T4871] Bluetooth: hci2: command tx timeout [ 724.239998][T11741] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 724.512266][ T9622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.517114][T11313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.573693][T11746] loop4: detected capacity change from 0 to 2048 [ 724.619074][T11326] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.779553][T11746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 724.866960][T11746] ext4 filesystem being mounted at /437/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 724.979275][T11326] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.293643][T11326] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.512988][ T5589] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.647062][T11326] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.081765][T11761] Falling back ldisc for ttyS3. [ 726.208213][ T4871] Bluetooth: hci2: command tx timeout [ 726.837417][T11771] loop1: detected capacity change from 0 to 1024 [ 726.939458][T11326] bridge_slave_1: left allmulticast mode [ 726.966051][T11771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 726.995426][T11326] bridge_slave_1: left promiscuous mode [ 727.039688][T11326] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.204316][T11326] bridge_slave_0: left allmulticast mode [ 727.234388][T11326] bridge_slave_0: left promiscuous mode [ 727.268855][T11326] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.104323][ T5581] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 728.291582][ T4871] Bluetooth: hci2: command tx timeout [ 728.502641][T11791] loop4: detected capacity change from 0 to 128 [ 728.647271][ T5581] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 728.652045][T11326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 728.770657][T11326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 728.815980][T11326] bond0 (unregistering): Released all slaves [ 728.923470][T11787] sch_tbf: burst 0 is lower than device veth0_macvtap mtu (1514) ! [ 729.370747][ T5581] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 729.594228][T11326] mac80211_hwsim hwsim16 wlan0 (unregistering): left allmulticast mode [ 730.042479][ T5581] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 730.330322][T11326] hsr_slave_0: left promiscuous mode [ 730.369892][ T4871] Bluetooth: hci2: command tx timeout [ 730.384996][T11326] hsr_slave_1: left promiscuous mode [ 730.410197][T11326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 730.419980][T11326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 730.475223][T11326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 730.508719][T11326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 730.578819][T11088] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 730.645340][ T5581] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 730.682269][T11326] veth1_macvtap: left promiscuous mode [ 730.693601][T11326] veth0_macvtap: left promiscuous mode [ 730.712400][T11326] veth1_vlan: left promiscuous mode [ 730.730005][T11326] veth0_vlan: left promiscuous mode [ 730.787106][T11812] loop0: detected capacity change from 0 to 1024 [ 730.805130][T11088] usb 5-1: Using ep0 maxpacket: 8 [ 730.838691][T11088] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 730.900535][T11088] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 730.972372][T11812] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 731.008358][T11088] usb 5-1: config 135 has no interface number 0 [ 731.058292][T11088] usb 5-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 731.116700][T11088] usb 5-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 731.187123][T11088] usb 5-1: config 135 interface 230 has no altsetting 0 [ 731.244039][ T5581] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 731.248807][T11088] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 731.371987][T11088] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.392151][T11088] usb 5-1: Product: syz [ 731.404668][T11088] usb 5-1: Manufacturer: syz [ 731.433887][T11088] usb 5-1: SerialNumber: syz [ 731.543611][T11088] uvcvideo 5-1:135.230: Found Unit with invalid ID 0 [ 731.738440][T11088] uvcvideo 5-1:135.230: Found UVC 0.00 device syz (18ec:3288) [ 731.763306][T11088] uvcvideo 5-1:135.230: No valid video chain found. [ 731.812093][ T5581] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 731.968158][T11088] usb 5-1: USB disconnect, device number 19 [ 732.132696][T11313] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 732.321011][ T5581] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 732.329797][T11326] team0 (unregistering): Port device team_slave_1 removed [ 732.429980][T11326] team0 (unregistering): Port device team_slave_0 removed [ 732.510148][T11313] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 732.778453][ T5581] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 733.021036][T11313] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 733.126889][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2082'. [ 733.299283][ T5581] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 733.628777][T11313] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 733.830572][ T5226] 8021q: adding VLAN 0 to HW filter on device eth9 [ 733.916915][ T5581] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 734.121279][T11313] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 734.165601][T11718] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.196958][T11718] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.233902][T11718] bridge_slave_0: entered allmulticast mode [ 734.270300][T11718] bridge_slave_0: entered promiscuous mode [ 734.349776][T11718] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.373740][ T5581] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 734.391011][T11718] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.419915][T11718] bridge_slave_1: entered allmulticast mode [ 734.463995][T11718] bridge_slave_1: entered promiscuous mode [ 734.615117][T11313] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 734.768565][T11718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.811294][ T5581] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 734.835998][T11718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.972084][T11313] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 735.193786][T11718] team0: Port device team_slave_0 added [ 735.240719][ T5581] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 735.270358][T11718] team0: Port device team_slave_1 added [ 735.470525][T11313] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 735.585689][T11718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.606269][T11718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.685234][T11718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.723261][T11718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.743966][T11718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.776744][ T5581] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 735.849060][T11718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.955922][T11313] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 736.227707][ T5581] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 736.322856][T11718] hsr_slave_0: entered promiscuous mode [ 736.346626][T11718] hsr_slave_1: entered promiscuous mode [ 736.389236][T11718] debugfs: 'hsr0' already exists in 'hsr' [ 736.429957][T11718] Cannot create hsr debugfs directory [ 736.455123][T11313] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 736.764927][ T5581] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 736.885083][T11849] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 736.907827][T11849] syzkaller1: linktype set to 825 [ 737.243606][ T5581] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 737.441963][T11313] EXT4-fs error: 1 callbacks suppressed [ 737.442032][T11313] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 737.830608][ T5581] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 737.990311][T11313] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 738.208944][T11718] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 738.259401][T11718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 738.284971][T11718] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 738.313943][ T5581] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 738.344975][T11718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 738.369990][T11718] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 738.379697][T11313] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 738.415414][T11718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 738.453068][T11718] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 738.513490][T11718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 738.624701][ T5581] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 738.735736][T11313] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 738.764450][ T5226] 8021q: adding VLAN 0 to HW filter on device eth10 [ 738.893139][ T5581] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 738.986473][T11313] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 739.214655][T11313] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 739.248471][ T5581] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 739.364194][T11718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.500349][T11718] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.575375][T10600] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.582962][T10600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.597305][T11313] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 739.635097][ T5581] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 739.658131][T10600] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.665592][T10600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.022052][T11313] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 740.069863][ T5581] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 740.397577][T11313] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 740.460229][ T5581] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 740.724747][T11313] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 740.820825][ T5581] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 741.259672][ T5581] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 741.774804][ T5581] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 741.810083][ T5226] 8021q: adding VLAN 0 to HW filter on device eth11 [ 742.561182][T11313] EXT4-fs error: 4 callbacks suppressed [ 742.561252][T11313] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 742.638911][T11718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.875001][T11313] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 743.214837][T11313] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 743.375351][ T5581] EXT4-fs error: 4 callbacks suppressed [ 743.375423][ T5581] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 743.586281][T11313] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 743.819716][T11903] loop4: detected capacity change from 0 to 1024 [ 744.025861][T11903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 744.294666][T11313] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 744.854866][T11718] veth0_vlan: entered promiscuous mode [ 745.064618][T11718] veth1_vlan: entered promiscuous mode [ 745.088367][T11313] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 745.270281][ T5586] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 745.288904][ T5586] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 745.308808][ T5586] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 745.326196][ T5586] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 745.345572][ T5586] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 745.714935][ T5589] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 745.784533][T11718] veth0_macvtap: entered promiscuous mode [ 745.860682][T11718] veth1_macvtap: entered promiscuous mode [ 745.923445][T11313] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 746.046611][ T5226] 8021q: adding VLAN 0 to HW filter on device eth12 [ 746.219400][T11718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 746.402918][T11718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 746.405945][ T5589] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 746.431252][T11929] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2098'. [ 746.492054][T11313] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 746.575790][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.603174][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.702194][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.750846][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.127167][ T5589] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 747.139573][T11313] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 747.412542][T11919] Bluetooth: hci4: command tx timeout [ 747.883199][ T5589] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 748.525432][ T6266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.630954][ T5589] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 748.724322][ T138] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.867409][ T4871] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 748.884852][ T4871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 748.896053][ T4871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 748.914601][ T4871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 748.931425][ T4871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 749.055284][ T138] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.399550][ T5589] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 749.444767][ T138] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.488101][ T4871] Bluetooth: hci4: command tx timeout [ 749.505739][T11956] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 749.679011][T11956] usb 7-1: Using ep0 maxpacket: 32 [ 749.718480][T11956] usb 7-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 137, changing to 11 [ 749.776771][T11956] usb 7-1: config 1 interface 0 has no altsetting 0 [ 749.839982][T11956] usb 7-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.40 [ 749.865196][ T138] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.870092][T11956] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.916356][T11956] usb 7-1: Product: syz [ 749.928161][T11956] usb 7-1: Manufacturer: syz [ 749.938348][T11956] usb 7-1: SerialNumber: syz [ 750.051117][ T5589] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 750.267836][T11956] usbhid 7-1:1.0: can't add hid device: -71 [ 750.312325][T11956] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 750.348478][T11956] usb 7-1: USB disconnect, device number 12 [ 750.695311][ T5589] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 751.007884][ T4871] Bluetooth: hci1: command tx timeout [ 751.333841][T11972] loop6: detected capacity change from 0 to 256 [ 751.386620][ T5589] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 751.424639][T11972] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 751.529702][ T138] bridge_slave_1: left allmulticast mode [ 751.556179][T11972] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 751.567802][ T4871] Bluetooth: hci4: command tx timeout [ 751.590515][ T138] bridge_slave_1: left promiscuous mode [ 751.625514][ T138] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.675724][T11313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.714993][ T138] bridge_slave_0: left allmulticast mode [ 751.768087][ T138] bridge_slave_0: left promiscuous mode [ 751.806731][ T138] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.006479][ T5589] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 752.315304][T11978] loop6: detected capacity change from 0 to 1024 [ 752.325670][ T5589] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 752.416069][T11978] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 752.573612][ T5589] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 752.855309][ T5589] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 753.004590][ T138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 753.032450][ T9900] EXT4-fs error (device loop6): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 753.079951][ T138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 753.089084][ T4871] Bluetooth: hci1: command tx timeout [ 753.101238][ T5589] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 753.123846][ T138] bond0 (unregistering): Released all slaves [ 753.392183][ T9900] EXT4-fs error (device loop6): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 753.400991][ T138] IPVS: stopping master sync thread 7302 ... [ 753.459971][ T138] IPVS: stopping backup sync thread 11586 ... [ 753.567144][ T5589] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 753.654894][ T4871] Bluetooth: hci4: command tx timeout [ 753.829375][ T9900] EXT4-fs error (device loop6): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 753.914146][ T138] mac80211_hwsim hwsim6 wlan0 (unregistering): left allmulticast mode [ 753.995433][ T5589] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 754.340744][ T9900] EXT4-fs error (device loop6): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 754.341901][ T138] hsr_slave_0: left promiscuous mode [ 754.430971][ T138] hsr_slave_1: left promiscuous mode [ 754.452700][ T138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.460687][ T138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.471478][ T138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.479418][ T138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.491512][ T138] batman_adv: batadv0: Removing interface: virt_wifi0 [ 754.556922][ T138] veth1_macvtap: left promiscuous mode [ 754.556949][ T5589] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 754.566818][ T138] veth0_macvtap: left promiscuous mode [ 754.591098][ T9900] EXT4-fs error (device loop6): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 754.598846][ T138] veth1_vlan: left promiscuous mode [ 754.631719][ T138] veth0_vlan: left promiscuous mode [ 754.955951][ T9900] EXT4-fs error (device loop6): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 754.981920][ T5589] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 755.171824][ T4871] Bluetooth: hci1: command tx timeout [ 755.326883][ T9900] EXT4-fs error (device loop6): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 755.682924][ T9900] EXT4-fs error (device loop6): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 755.930591][ T138] team0 (unregistering): Port device team_slave_1 removed [ 756.012605][ T138] team0 (unregistering): Port device team_slave_0 removed [ 756.083921][ T9900] EXT4-fs error (device loop6): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 756.466637][ T9900] EXT4-fs error (device loop6): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 756.690803][ T5589] EXT4-fs error: 5 callbacks suppressed [ 756.690874][ T5589] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 756.882209][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 756.891032][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.216742][ T138] IPVS: stop unused estimator thread 0... [ 757.235300][ T5589] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 757.263179][ T4871] Bluetooth: hci1: command tx timeout [ 757.475070][ T5226] 8021q: adding VLAN 0 to HW filter on device eth13 [ 757.896131][ T5589] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 757.913308][ T138] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.969611][T11916] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.004355][T11916] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.030934][T11916] bridge_slave_0: entered allmulticast mode [ 758.052951][T11916] bridge_slave_0: entered promiscuous mode [ 758.174896][ T138] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.226516][T11916] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.245305][T11916] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.247817][ T9900] EXT4-fs error: 3 callbacks suppressed [ 758.247881][ T9900] EXT4-fs error (device loop6): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 758.264525][T11916] bridge_slave_1: entered allmulticast mode [ 758.283387][ T5589] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 758.299994][T11916] bridge_slave_1: entered promiscuous mode [ 758.593790][ T5589] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 758.594036][ T138] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.615063][ T9900] EXT4-fs error (device loop6): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 758.715776][T11916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.848971][ T138] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.912947][T11916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.952759][ T5589] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 758.953360][ T9900] EXT4-fs error (device loop6): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 759.015281][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.055934][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.265972][ T5589] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 759.271173][ T9900] EXT4-fs error (device loop6): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 759.342773][T11916] team0: Port device team_slave_0 added [ 759.537130][ T5589] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 759.628104][ T9900] EXT4-fs error (device loop6): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 759.654018][T11916] team0: Port device team_slave_1 added [ 759.794677][T11949] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.830053][T11949] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.852897][ T5589] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 759.858569][T11949] bridge_slave_0: entered allmulticast mode [ 759.918146][T11949] bridge_slave_0: entered promiscuous mode [ 759.944792][T11949] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.958090][T11949] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.973091][ T9900] EXT4-fs error (device loop6): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 759.990909][T11949] bridge_slave_1: entered allmulticast mode [ 760.001926][T11949] bridge_slave_1: entered promiscuous mode [ 760.165774][ T5589] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 760.200363][ T9900] EXT4-fs error (device loop6): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 760.385640][T11916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.412013][T11916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.509296][T11916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 760.629906][ T9900] EXT4-fs error (device loop6): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 760.696161][T11949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.794593][T11949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.837145][T11916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 760.871022][T11916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.961410][T11916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.041225][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.068561][ T9900] EXT4-fs error (device loop6): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 761.092340][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.453890][T11919] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 761.470865][T11919] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 761.480185][T11919] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 761.503185][T11919] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 761.515166][T11919] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 761.543593][ T9900] EXT4-fs error (device loop6): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 761.694334][T11949] team0: Port device team_slave_0 added [ 761.718740][ T138] bridge_slave_1: left allmulticast mode [ 761.745403][ T138] bridge_slave_1: left promiscuous mode [ 761.781553][ T138] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.841990][ T138] bridge_slave_0: left allmulticast mode [ 761.881619][ T138] bridge_slave_0: left promiscuous mode [ 761.905998][ T138] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.776006][ T138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 762.828998][ T138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 762.858029][ T138] bond0 (unregistering): Released all slaves [ 762.994781][T11949] team0: Port device team_slave_1 added [ 763.098209][ T5226] 8021q: adding VLAN 0 to HW filter on device eth14 [ 763.552493][T11949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.568046][ T4871] Bluetooth: hci0: command tx timeout [ 763.593866][T11949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.643061][T11949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.693067][ T5589] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.743523][ T9900] EXT4-fs error: 5 callbacks suppressed [ 763.743591][ T9900] EXT4-fs error (device loop6): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 763.843835][T11916] hsr_slave_0: entered promiscuous mode [ 763.879592][T11916] hsr_slave_1: entered promiscuous mode [ 763.909441][T11916] debugfs: 'hsr0' already exists in 'hsr' [ 763.939675][T11916] Cannot create hsr debugfs directory [ 763.974244][T11949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.997663][T11949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.067029][T12051] loop7: detected capacity change from 0 to 4096 [ 764.079489][T11949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 764.131600][ T9900] EXT4-fs error (device loop6): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 764.483565][ T9900] EXT4-fs error (device loop6): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 764.868218][ T9900] EXT4-fs error (device loop6): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 765.026547][T11949] hsr_slave_0: entered promiscuous mode [ 765.056192][T11949] hsr_slave_1: entered promiscuous mode [ 765.071420][T11949] debugfs: 'hsr0' already exists in 'hsr' [ 765.089666][T11949] Cannot create hsr debugfs directory [ 765.156715][ T138] hsr_slave_0: left promiscuous mode [ 765.191594][ T138] hsr_slave_1: left promiscuous mode [ 765.206581][ T138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 765.219900][ T9900] EXT4-fs error (device loop6): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 765.228809][ T138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 765.268654][ T138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 765.284843][ T138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 765.343791][ T138] veth1_macvtap: left promiscuous mode [ 765.352088][ T138] veth0_macvtap: left promiscuous mode [ 765.367270][ T138] veth1_vlan: left promiscuous mode [ 765.376086][ T138] veth0_vlan: left promiscuous mode [ 765.544587][ T9900] EXT4-fs error (device loop6): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 765.651573][ T4871] Bluetooth: hci0: command tx timeout [ 765.793493][ T9900] EXT4-fs error (device loop6): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 765.824259][T12061] loop7: detected capacity change from 0 to 2048 [ 765.985828][T12061] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 766.164739][ T9900] EXT4-fs error (device loop6): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 766.435111][ T9900] EXT4-fs error (device loop6): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 766.715406][ T9900] EXT4-fs error (device loop6): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 766.874604][ T138] team0 (unregistering): Port device team_slave_1 removed [ 766.928937][ T138] team0 (unregistering): Port device team_slave_0 removed [ 767.731356][ T4871] Bluetooth: hci0: command tx timeout [ 769.200970][ T138] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.457997][T11919] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 769.464903][T12079] loop7: detected capacity change from 0 to 128 [ 769.473562][T11919] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 769.484364][T11919] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 769.497812][T11919] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 769.515875][T11919] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 769.807949][T11919] Bluetooth: hci0: command tx timeout [ 769.922634][ T138] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.252779][ T138] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.543246][ T138] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.612959][T11916] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 770.731461][T11916] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 770.773946][T11916] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 770.845946][T11916] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 771.059827][T11916] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 771.122743][T11916] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 771.152112][T11916] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 771.202536][T11916] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 771.570505][T11919] Bluetooth: hci3: command tx timeout [ 772.021286][T11949] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 772.082463][T11949] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 772.124657][ T5226] 8021q: adding VLAN 0 to HW filter on device eth15 [ 772.142266][ T9900] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.301578][T11949] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 772.425308][T11949] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 772.459280][T11949] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 772.515537][T11949] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 772.552420][T11949] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 772.616077][T11949] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 772.842322][ T138] bridge_slave_1: left allmulticast mode [ 772.872169][ T138] bridge_slave_1: left promiscuous mode [ 772.891845][ T138] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.958538][ T138] bridge_slave_0: left allmulticast mode [ 772.977757][ T138] bridge_slave_0: left promiscuous mode [ 772.984248][ T138] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.577066][ T138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 773.602634][ T138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 773.624442][ T138] bond0 (unregistering): Released all slaves [ 773.648414][T11919] Bluetooth: hci3: command tx timeout [ 773.862307][ T138] IPVS: stopping master sync thread 6196 ... [ 773.924439][T12033] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.937205][T12033] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.946258][T12033] bridge_slave_0: entered allmulticast mode [ 773.963096][T12033] bridge_slave_0: entered promiscuous mode [ 774.150748][T12033] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.168452][T12033] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.181730][T12033] bridge_slave_1: entered allmulticast mode [ 774.200872][T12033] bridge_slave_1: entered promiscuous mode [ 774.521292][T12033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 774.581552][ T138] mac80211_hwsim hwsim9 wlan0 (unregistering): left allmulticast mode [ 774.729989][T12033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.034932][T12033] team0: Port device team_slave_0 added [ 775.145367][ T138] hsr_slave_0: left promiscuous mode [ 775.163577][ T138] hsr_slave_1: left promiscuous mode [ 775.175548][ T138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 775.204591][ T138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.260980][ T138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 775.282954][ T138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 775.292881][T12121] loop7: detected capacity change from 0 to 128 [ 775.311467][ T138] batman_adv: batadv0: Removing interface: virt_wifi0 [ 775.394870][ T138] veth1_macvtap: left promiscuous mode [ 775.401303][ T138] veth0_macvtap: left promiscuous mode [ 775.407122][ T138] veth1_vlan: left promiscuous mode [ 775.413951][ T138] veth0_vlan: left promiscuous mode [ 775.728322][T11919] Bluetooth: hci3: command tx timeout [ 776.066545][T12123] loop7: detected capacity change from 0 to 1024 [ 776.374610][ T138] team0 (unregistering): Port device team_slave_1 removed [ 776.421399][ T138] team0 (unregistering): Port device team_slave_0 removed [ 776.880184][T12033] team0: Port device team_slave_1 added [ 777.178528][T12033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 777.185906][T12033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 777.261928][T12033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 777.362165][T12033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 777.377748][T12033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 777.419587][T12033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 777.807786][T11919] Bluetooth: hci3: command tx timeout [ 777.892617][ T1027] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.154595][T12033] hsr_slave_0: entered promiscuous mode [ 778.180324][T12033] hsr_slave_1: entered promiscuous mode [ 778.303125][ T1027] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.450217][T11916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.640532][ T1027] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.155944][ T1027] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.565505][ T5226] 8021q: adding VLAN 0 to HW filter on device eth16 [ 779.603496][T11916] 8021q: adding VLAN 0 to HW filter on device team0 [ 779.824279][T11949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.294554][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.302092][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.357402][T12076] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.388246][T12076] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.405013][T12076] bridge_slave_0: entered allmulticast mode [ 780.441824][T12076] bridge_slave_0: entered promiscuous mode [ 780.565766][T12076] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.594822][T12076] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.618406][T12076] bridge_slave_1: entered allmulticast mode [ 780.650990][T12076] bridge_slave_1: entered promiscuous mode [ 780.965227][T12161] netlink: 'syz.7.2127': attribute type 4 has an invalid length. [ 781.012708][ T3233] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.020242][ T3233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 781.076234][T12076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 781.101921][ T1027] bridge_slave_1: left allmulticast mode [ 781.110121][ T1027] bridge_slave_1: left promiscuous mode [ 781.122398][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.162226][ T1027] bridge_slave_0: left allmulticast mode [ 781.168772][ T1027] bridge_slave_0: left promiscuous mode [ 781.176016][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.563811][T12168] loop7: detected capacity change from 0 to 1024 [ 781.589359][T12168] EXT4-fs: Ignoring removed orlov option [ 781.733712][T12168] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 781.967386][T12168] EXT4-fs (loop7): shut down requested (2) [ 782.201397][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 782.260945][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 782.316074][T11718] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.326685][ T1027] bond0 (unregistering): Released all slaves [ 782.475584][T12076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.570686][T11949] 8021q: adding VLAN 0 to HW filter on device team0 [ 782.830162][T12182] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2129'. [ 782.960986][T12076] team0: Port device team_slave_0 added [ 782.998468][T12076] team0: Port device team_slave_1 added [ 783.324862][ T1027] mac80211_hwsim hwsim18 wlan0 (unregistering): left allmulticast mode [ 783.566366][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.573884][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.710098][T12076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.725512][T12076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.761196][T12076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.839283][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.846745][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 783.978409][ T1027] hsr_slave_0: left promiscuous mode [ 784.005516][ T1027] hsr_slave_1: left promiscuous mode [ 784.019801][ T1027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 784.027329][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 784.063097][ T1027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 784.082378][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.133038][ T1027] veth1_macvtap: left promiscuous mode [ 784.150638][ T1027] veth0_macvtap: left promiscuous mode [ 784.166916][ T1027] veth1_vlan: left promiscuous mode [ 784.176274][ T1027] veth0_vlan: left promiscuous mode [ 785.131527][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 785.157305][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 785.555334][T12076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 785.582100][T12076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.618482][T12076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.093480][T12033] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 786.125000][T12033] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 786.250757][T12033] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 786.286285][T12033] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 786.314047][T12033] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 786.360159][T12033] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 786.412802][T12076] hsr_slave_0: entered promiscuous mode [ 786.433260][T12076] hsr_slave_1: entered promiscuous mode [ 786.462028][T12076] debugfs: 'hsr0' already exists in 'hsr' [ 786.468026][T12076] Cannot create hsr debugfs directory [ 786.501099][T12033] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 786.546266][T12033] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 789.147882][T12033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.596570][T12033] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.619366][T12076] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 789.668803][T12076] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 789.699733][T12076] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 789.755953][T12076] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 789.837173][T12076] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 789.915222][T12076] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 789.967547][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.975024][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.037123][T12076] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 790.130966][T12076] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 790.192333][T11326] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.199879][T11326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.555030][T11916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.460181][T11949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.888167][T12076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 792.114680][T12076] 8021q: adding VLAN 0 to HW filter on device team0 [ 792.226919][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.234462][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 792.346944][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.354494][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 793.246712][T12293] vcan0: tx address claim with dest, not broadcast [ 793.442903][T11916] veth0_vlan: entered promiscuous mode [ 793.680277][T11916] veth1_vlan: entered promiscuous mode [ 793.956155][T12300] loop7: detected capacity change from 0 to 2048 [ 793.995448][T11949] veth0_vlan: entered promiscuous mode [ 794.065855][T12300] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 794.253954][T11949] veth1_vlan: entered promiscuous mode [ 794.499934][T11916] veth0_macvtap: entered promiscuous mode [ 794.601608][T11916] veth1_macvtap: entered promiscuous mode [ 794.911382][T12033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.136916][T11916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.172166][T11949] veth0_macvtap: entered promiscuous mode [ 795.322561][T11916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 795.389179][T11949] veth1_macvtap: entered promiscuous mode [ 795.584239][T11326] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.621030][T11326] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.712770][T11326] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.772717][T11326] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.896268][T11949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 796.143666][T11949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.343597][T12033] veth0_vlan: entered promiscuous mode [ 796.431907][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.463830][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.544868][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.588138][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.625609][ T5226] 8021q: adding VLAN 0 to HW filter on device eth17 [ 796.774656][T12033] veth1_vlan: entered promiscuous mode [ 797.292504][T12076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 797.666298][T12033] veth0_macvtap: entered promiscuous mode [ 797.794197][T12033] veth1_macvtap: entered promiscuous mode [ 798.127371][T12033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 798.352699][T12033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 798.613450][ T3233] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.645183][ T3233] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.690101][ T3233] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.773526][T12076] veth0_vlan: entered promiscuous mode [ 798.809675][ T3233] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.004297][T12076] veth1_vlan: entered promiscuous mode [ 799.584687][T12076] veth0_macvtap: entered promiscuous mode [ 799.699673][T12076] veth1_macvtap: entered promiscuous mode [ 799.993231][T12076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 800.158023][T12076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 800.379457][ T5698] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.430023][ T138] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.483509][ T138] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.524726][ T138] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.617367][ T5226] 8021q: adding VLAN 0 to HW filter on device eth18 [ 801.786693][T12401] loop7: detected capacity change from 0 to 4096 [ 802.362948][ T1027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.409716][ T1027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.724151][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.792104][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.222879][ T5698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.278779][ T5698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.560927][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.698726][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.571838][T12437] loop7: detected capacity change from 0 to 256 [ 804.753551][T12437] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 804.936207][T12441] loop9: detected capacity change from 0 to 764 [ 805.042950][T12441] rock: directory entry would overflow storage [ 805.085360][T12441] rock: sig=0x5245, size=8, remaining=5 [ 805.521385][ T4871] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 805.536424][ T4871] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 805.546599][ T4871] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 805.576574][ T4871] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 805.594673][ T4871] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 805.910413][T12453] loop7: detected capacity change from 0 to 64 [ 806.394514][T12459] loop9: detected capacity change from 0 to 256 [ 806.597063][T12459] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 806.789151][ T113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.843959][ T113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.222621][ T5698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.282180][ T5698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.647881][T11919] Bluetooth: hci5: command tx timeout [ 808.217408][ T5226] 8021q: adding VLAN 0 to HW filter on device eth19 [ 808.221542][T12473] mmap: syz.7.2161 (12473) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 808.723299][ T34] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.903723][ T34] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.195087][ T34] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.396227][T12489] loop9: detected capacity change from 0 to 256 [ 809.443649][T12489] vfat: Unknown parameter '01777777777777777777777' [ 809.512373][T12492] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2165'. [ 809.545496][ T34] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.602412][T12492] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2165'. [ 809.667912][ T5698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.722803][ T5698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.731497][T11919] Bluetooth: hci5: command tx timeout [ 810.402216][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.443175][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.991063][ T34] bridge_slave_1: left allmulticast mode [ 811.017705][ T34] bridge_slave_1: left promiscuous mode [ 811.057190][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.144138][ T34] bridge_slave_0: left allmulticast mode [ 811.168736][T11088] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 811.195038][ T34] bridge_slave_0: left promiscuous mode [ 811.259737][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.388819][T11088] usb 4-1: Using ep0 maxpacket: 16 [ 811.428903][T11088] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 811.506491][T11088] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 811.591709][T11088] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 811.651076][T11088] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.663878][T12517] loop2: detected capacity change from 0 to 1024 [ 811.683249][T11088] usb 4-1: Product: syz [ 811.713355][T11088] usb 4-1: Manufacturer: syz [ 811.720478][T12517] EXT4-fs: Ignoring removed orlov option [ 811.759061][T11088] usb 4-1: SerialNumber: syz [ 811.811233][T11088] usb 4-1: config 0 descriptor?? [ 811.825877][T11919] Bluetooth: hci5: command tx timeout [ 811.901523][T12517] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 812.003729][T11088] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 812.074916][T11088] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 812.644376][T11088] em28xx 4-1:0.0: chip ID is em2710 [ 812.644535][T12076] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.727183][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 812.786656][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 812.834156][ T34] bond0 (unregistering): Released all slaves [ 812.862306][T11088] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 812.911561][T11088] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 812.959946][T11088] em28xx 4-1:0.0: No AC97 audio processor [ 813.050953][T11088] usb 4-1: USB disconnect, device number 10 [ 813.112063][T11088] em28xx 4-1:0.0: Disconnecting em28xx [ 813.221934][T11088] em28xx 4-1:0.0: Freeing device [ 813.584557][ T5226] 8021q: adding VLAN 0 to HW filter on device eth20 [ 813.887900][T11919] Bluetooth: hci5: command tx timeout [ 814.633085][T12538] batman_adv: batadv0: Adding interface: vlan2 [ 814.650914][T12538] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 814.710865][T12538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.739237][T12538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.778065][T12538] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 815.044039][ T34] hsr_slave_0: left promiscuous mode [ 815.099014][ T34] hsr_slave_1: left promiscuous mode [ 815.146103][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 815.163353][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 815.205155][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 815.243188][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 815.350008][ T34] veth1_macvtap: left promiscuous mode [ 815.363952][ T34] veth0_macvtap: left promiscuous mode [ 815.381595][ T34] veth1_vlan: left promiscuous mode [ 815.410536][ T34] veth0_vlan: left promiscuous mode [ 817.126586][ T34] team0 (unregistering): Port device team_slave_1 removed [ 817.233325][ T34] team0 (unregistering): Port device team_slave_0 removed [ 818.304167][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.310913][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.661120][T12447] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.692474][T12447] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.708233][T12447] bridge_slave_0: entered allmulticast mode [ 819.733760][T12447] bridge_slave_0: entered promiscuous mode [ 819.795372][T12447] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.824747][T12447] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.868066][T12447] bridge_slave_1: entered allmulticast mode [ 819.900881][T12447] bridge_slave_1: entered promiscuous mode [ 820.206453][T12447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.301080][T12447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 820.539127][T12614] pimreg: entered allmulticast mode [ 820.575459][T12614] pimreg: left allmulticast mode [ 820.872948][T12447] team0: Port device team_slave_0 added [ 820.942154][T12447] team0: Port device team_slave_1 added [ 821.192355][T12447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 821.219293][T12447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.250198][T11088] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 821.339799][T12447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 821.396029][T12447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 821.425963][T12447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.487300][T12447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 821.510733][T11088] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 821.540033][T11088] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 821.569223][T11088] usb 4-1: config 1 has no interface number 0 [ 821.609895][T11088] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 821.672861][T11088] usb 4-1: New USB device found, idVendor=0525, idProduct=779d, bcdDevice= 0.40 [ 821.730785][T11088] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.762676][T11088] usb 4-1: Product: syz [ 821.775280][T11088] usb 4-1: Manufacturer: syz [ 821.803758][T11088] usb 4-1: SerialNumber: syz [ 821.887072][T11088] cdc_ncm 4-1:1.1: skipping garbage [ 821.913219][T11088] usb 4-1: selecting invalid altsetting 1 [ 821.972846][T12447] hsr_slave_0: entered promiscuous mode [ 822.001916][T12447] hsr_slave_1: entered promiscuous mode [ 822.034807][T12447] debugfs: 'hsr0' already exists in 'hsr' [ 822.055634][T12447] Cannot create hsr debugfs directory [ 822.112703][ T5226] 8021q: adding VLAN 0 to HW filter on device eth21 [ 822.717960][T11088] cdc_ncm 4-1:1.1: SET_NTB_FORMAT failed [ 822.768951][T11088] usb 4-1: selecting invalid altsetting 1 [ 822.794918][T11088] cdc_ncm 4-1:1.1: bind() failure [ 822.853604][T11088] usb 4-1: USB disconnect, device number 11 [ 823.128131][T11956] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 823.308241][T11956] usb 10-1: Using ep0 maxpacket: 32 [ 823.357969][T11956] usb 10-1: unable to get BOS descriptor or descriptor too short [ 823.387790][T11956] usb 10-1: config 230 has an invalid descriptor of length 0, skipping remainder of the config [ 823.422938][T11956] usb 10-1: config 230 has 1 interface, different from the descriptor's value: 3 [ 823.465055][T11956] usb 10-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 823.504361][T11956] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.557221][T11956] usb 10-1: Product: syz [ 823.602849][T11956] usb 10-1: Manufacturer: syz [ 823.627705][T11956] usb 10-1: SerialNumber: syz [ 823.989254][T11956] usb 10-1: unit 4 not found! [ 824.011293][T11956] usb 10-1: unit 0 not found! [ 824.494937][T12447] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 824.532119][T11956] usb 10-1: USB disconnect, device number 2 [ 824.619214][T12447] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 824.667236][T12447] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 824.785943][T12447] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 824.818573][T12533] udevd[12533]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:230.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 824.858288][T12447] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 824.936636][T12447] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 825.002963][T12447] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 825.109132][T12447] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 825.676146][T12666] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2216'. [ 826.733403][T12447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 827.013697][T12447] 8021q: adding VLAN 0 to HW filter on device team0 [ 827.173525][T10600] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.181022][T10600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.363394][ T113] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.371027][ T113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.607082][T12690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2225'. [ 828.262476][T12696] loop9: detected capacity change from 0 to 128 [ 828.348406][T12696] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 828.443786][T12696] hpfs: filesystem error: improperly stopped [ 828.498547][T12696] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 828.554077][T12696] hpfs: You really don't want any checks? You are crazy... [ 828.580003][T12696] hpfs: hpfs_map_sector(): read error [ 828.627969][T12696] hpfs: code page support is disabled [ 828.659967][T12696] hpfs: hpfs_map_4sectors(): unaligned read [ 828.697954][T12696] hpfs: hpfs_map_4sectors(): unaligned read [ 828.737666][T12696] hpfs: filesystem error: unable to find root dir [ 828.881079][T12696] hpfs: hpfs_map_4sectors(): unaligned read [ 828.887419][T12696] hpfs: hpfs_map_sector(): read error [ 829.416482][T12715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2233'. [ 829.501277][T12715] netlink: 190 bytes leftover after parsing attributes in process `syz.2.2233'. [ 830.254071][T11919] block nbd1: Receive control failed (result -32) [ 830.254075][ T4871] block nbd1: Receive control failed (result -32) [ 830.329447][T12029] block nbd1: NBD_DISCONNECT [ 830.334240][T12029] block nbd1: Send disconnect failed -32 [ 830.358089][T12029] block nbd1: Send disconnect failed -32 [ 830.365850][T12029] block nbd1: shutting down sockets [ 831.217956][T12737] loop9: detected capacity change from 0 to 128 [ 831.316312][T12533] udevd[12533]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 831.593437][T12746] loop7: detected capacity change from 0 to 8 [ 832.142325][ T5226] 8021q: adding VLAN 0 to HW filter on device eth22 [ 832.233093][T12750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2244'. [ 833.283431][T12447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 833.610414][ T4871] block nbd2: Receive control failed (result -32) [ 833.610414][T11919] block nbd2: Receive control failed (result -32) [ 833.742184][T12533] block nbd2: NBD_DISCONNECT [ 833.784582][T12533] block nbd2: Send disconnect failed -32 [ 833.818706][T12533] block nbd2: Send disconnect failed -32 [ 833.856965][T12533] block nbd2: shutting down sockets [ 834.365402][T12029] udevd[12029]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 836.316344][T12447] veth0_vlan: entered promiscuous mode [ 836.390003][T11961] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 836.401503][T12447] veth1_vlan: entered promiscuous mode [ 836.590366][T11961] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 836.602799][T11961] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.620552][T12447] veth0_macvtap: entered promiscuous mode [ 836.629150][T11961] usb 10-1: Product: syz [ 836.636923][T11961] usb 10-1: Manufacturer: syz [ 836.647639][T11961] usb 10-1: SerialNumber: syz [ 836.685026][T12447] veth1_macvtap: entered promiscuous mode [ 836.772992][T12447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 836.841641][T12447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 836.965048][ T3228] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.021415][ T3228] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.054585][ T3228] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.081514][ T3228] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.162022][T11961] rtl8150 10-1:1.0: couldn't reset the device [ 837.173737][T11961] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5 [ 837.207383][T11961] usb 10-1: USB disconnect, device number 3 [ 837.476780][ T5226] 8021q: adding VLAN 0 to HW filter on device eth23 [ 838.112574][T12823] loop7: detected capacity change from 0 to 2048 [ 838.316664][T12823] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 838.398838][T11088] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 838.432983][T12823] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 838.580476][T12823] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2261: bg 0: block 360: padding at end of block bitmap is not set [ 838.649288][T11088] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 838.671643][T12823] fs-verity (loop7, inode 13): ext4_end_enable_verity() failed with err -28 [ 838.693745][T11088] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.726569][T11088] usb 4-1: Product: syz [ 838.745214][T11088] usb 4-1: Manufacturer: syz [ 838.767340][T11088] usb 4-1: SerialNumber: syz [ 838.873363][T11919] block nbd3: Receive control failed (result -32) [ 838.873712][ T4871] block nbd3: Receive control failed (result -32) [ 839.015677][T12029] block nbd3: NBD_DISCONNECT [ 839.050297][T12029] block nbd3: Send disconnect failed -32 [ 839.103750][T12029] block nbd3: Send disconnect failed -32 [ 839.141352][T12029] block nbd3: shutting down sockets [ 839.303836][T11718] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 839.463430][T12029] udevd[12029]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 839.603918][T12842] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 839.653402][T11088] rtl8150 4-1:1.0: couldn't reset the device [ 839.692678][T11088] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 839.791244][T11088] usb 4-1: USB disconnect, device number 12 [ 839.872626][T12010] udevd[12010]: setting owner of /dev/bus/usb/004/012 to uid=0, gid=0 failed: No such file or directory [ 841.145975][T12865] pimreg: entered allmulticast mode [ 841.162659][T12860] loop7: detected capacity change from 0 to 1764 [ 841.187245][T12866] pimreg: left allmulticast mode [ 842.525434][ T5226] 8021q: adding VLAN 0 to HW filter on device eth24 [ 842.681559][ T1027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.727727][ T1027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.810962][ T3228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.844155][ T3228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.116712][T12886] loop9: detected capacity change from 0 to 128 [ 843.154926][T12886] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 843.223864][T12886] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 843.577088][T12894] pimreg: entered allmulticast mode [ 843.616357][T12894] pimreg: left allmulticast mode [ 843.660709][T11949] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 844.504790][T11919] block nbd4: Receive control failed (result -32) [ 844.504790][ T6856] block nbd4: Receive control failed (result -32) [ 844.636631][T12533] block nbd4: NBD_DISCONNECT [ 844.674514][T12533] block nbd4: Send disconnect failed -32 [ 844.704242][T12533] block nbd4: Send disconnect failed -32 [ 844.743736][T12533] block nbd4: shutting down sockets [ 845.765717][T12533] udevd[12533]: inotify_add_watch(7, /dev/nbd4, 10) failed: No such file or directory [ 845.984055][ T6856] Bluetooth: hci2: command 0x0406 tx timeout [ 846.833261][T12939] pimreg: entered allmulticast mode [ 846.864729][T12941] pimreg: left allmulticast mode [ 846.946213][T12942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2292'. [ 847.024271][T12945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2292'. [ 847.475112][ T5226] 8021q: adding VLAN 0 to HW filter on device eth25 [ 847.994970][T12956] loop8: detected capacity change from 0 to 1024 [ 848.026059][T12951] loop3: detected capacity change from 0 to 512 [ 848.039180][T12956] EXT4-fs: Ignoring removed nomblk_io_submit option [ 848.126774][T12956] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 848.140448][T12951] EXT4-fs: Ignoring removed mblk_io_submit option [ 848.191661][T12956] System zones: 0-1, 3-36 [ 848.258746][ T4871] block nbd5: Receive control failed (result -32) [ 848.259409][ T6856] block nbd5: Receive control failed (result -32) [ 848.293885][T12956] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 848.362027][T12951] EXT4-fs (loop3): orphan cleanup on readonly fs [ 848.475245][T12951] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 848.485838][T12951] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.2295: attempt to clear invalid blocks 2 len 1 [ 848.574167][T12951] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 848.577567][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 848.593597][ C0] EXT4-fs (loop3): initial error at time 1778564505: ext4_clear_blocks:876: inode 13 [ 848.603385][ C0] EXT4-fs (loop3): last error at time 1778564505: ext4_clear_blocks:876: inode 13 [ 848.669794][T12951] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 848.827836][T12951] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2295: invalid indirect mapped block 1819239214 (level 0) [ 848.924459][T12010] block nbd5: NBD_DISCONNECT [ 848.956180][T12010] block nbd5: Send disconnect failed -32 [ 848.974162][T12951] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 848.982639][T12951] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2295: invalid indirect mapped block 1819239214 (level 1) [ 849.030483][T12010] block nbd5: Send disconnect failed -32 [ 849.054530][T12951] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 849.072266][T12010] block nbd5: shutting down sockets [ 849.100628][T12951] EXT4-fs (loop3): 1 truncate cleaned up [ 849.112558][T12447] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.144279][T12951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 849.745538][T12993] Bluetooth: MGMT ver 1.23 [ 849.762519][T12993] Bluetooth: hci1: too big key_count value 25962 [ 850.023542][T12033] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 850.129929][ T6856] block nbd6: Receive control failed (result -32) [ 850.130301][ T4871] block nbd6: Receive control failed (result -32) [ 850.304556][T12036] block nbd6: NBD_DISCONNECT [ 850.340099][T12036] block nbd6: Send disconnect failed -32 [ 850.389550][T12036] block nbd6: Send disconnect failed -32 [ 850.442169][T12036] block nbd6: shutting down sockets [ 850.715077][T12029] udevd[12029]: inotify_add_watch(7, /dev/nbd5, 10) failed: No such file or directory [ 850.896478][T13000] loop9: detected capacity change from 0 to 128 [ 850.957888][T12010] udevd[12010]: inotify_add_watch(7, /dev/nbd6, 10) failed: No such file or directory [ 850.999482][T13003] loop3: detected capacity change from 0 to 256 [ 851.422344][T13009] pimreg: entered allmulticast mode [ 851.506157][T13009] pimreg: left allmulticast mode [ 851.724524][ T5226] 8021q: adding VLAN 0 to HW filter on device eth26 [ 852.025739][T13012] loop7: detected capacity change from 0 to 1024 [ 853.536538][T13029] loop7: detected capacity change from 0 to 512 [ 853.596491][T13029] EXT4-fs: Ignoring removed mblk_io_submit option [ 853.633140][ T6856] block nbd7: Receive control failed (result -32) [ 853.633411][ T4871] block nbd7: Receive control failed (result -32) [ 853.691588][T13029] EXT4-fs (loop7): orphan cleanup on readonly fs [ 853.751859][T13029] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 853.952712][T13029] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.2314: attempt to clear invalid blocks 2 len 1 [ 854.022772][T12029] block nbd7: NBD_DISCONNECT [ 854.078421][T12029] block nbd7: Send disconnect failed -32 [ 854.104024][T12029] block nbd7: Send disconnect failed -32 [ 854.120926][T13029] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 854.133639][T13029] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, [ 854.150005][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 854.150100][ C0] EXT4-fs (loop7): initial error at time 1778564510: ext4_clear_blocks:876: inode 13 [ 854.150248][ C0] EXT4-fs (loop7): last error at time 1778564510: ext4_clear_blocks:876: inode 13 [ 854.179444][T12029] block nbd7: shutting down sockets [ 854.184420][T13029] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 854.228856][T13043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2319'. [ 854.384735][T13029] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2314: invalid indirect mapped block 1819239214 (level 0) [ 854.514885][T13029] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 854.527635][T13029] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2314: invalid indirect mapped block 1819239214 (level 1) [ 854.691773][T13029] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 854.733207][T13029] EXT4-fs (loop7): 1 truncate cleaned up [ 854.753593][T12533] udevd[12533]: inotify_add_watch(7, /dev/nbd7, 10) failed: No such file or directory [ 854.773373][T13051] loop8: detected capacity change from 0 to 128 [ 854.884255][ T138] Bluetooth: hci4: Frame reassembly failed (-84) [ 854.897917][T13029] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 855.437066][T11718] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.796924][T13061] loop8: detected capacity change from 0 to 512 [ 855.966701][T13061] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 855.994919][T13061] ext4 filesystem being mounted at /11/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 856.219209][ T29] audit: type=1800 audit(1778564512.782:30): pid=13061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2324" name="file2" dev="loop8" ino=16 res=0 errno=0 [ 856.599777][T12447] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.931552][ T6856] Bluetooth: hci4: command 0xfc11 tx timeout [ 856.938375][ T4871] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 858.792972][T13105] Attempt to restore checkpoint with obsolete wellknown handles [ 859.041473][T13103] loop9: detected capacity change from 0 to 512 [ 859.109874][T13103] EXT4-fs: Ignoring removed mblk_io_submit option [ 859.234506][T13103] EXT4-fs (loop9): orphan cleanup on readonly fs [ 859.299987][T13103] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13 [ 859.363322][T13103] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.2336: attempt to clear invalid blocks 2 len 1 [ 859.443980][T13103] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 859.447562][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 859.463610][ C0] EXT4-fs (loop9): initial error at time 1778564516: ext4_clear_blocks:876: inode 13 [ 859.473471][ C0] EXT4-fs (loop9): last error at time 1778564516: ext4_clear_blocks:876: inode 13 [ 859.512604][T13103] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 859.560744][T13103] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.2336: invalid indirect mapped block 1819239214 (level 0) [ 859.710548][T13103] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 859.713438][T13103] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.2336: invalid indirect mapped block 1819239214 (level 1) [ 859.913186][T13103] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 859.921605][T13103] EXT4-fs (loop9): 1 truncate cleaned up [ 859.997601][T13122] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2343'. [ 860.032910][T13122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2343'. [ 860.060744][T13103] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 860.078442][T13125] Bluetooth: hci1: expected 21779 bytes, got 2 bytes [ 860.550906][T11949] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.942667][T13145] loop7: detected capacity change from 0 to 512 [ 862.062463][T13145] EXT4-fs warning (device loop7): ext4_xattr_inode_get:546: inode #11: comm syz.7.2354: ea_inode file size=6 entry size=6393 [ 862.142643][T13145] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #15: comm syz.7.2354: corrupted inode contents [ 862.195594][T13145] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 862.200009][T13145] EXT4-fs error (device loop7): ext4_dirty_inode:6587: inode #15: comm syz.7.2354: mark_inode_dirty error [ 862.209523][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 862.209614][ C0] EXT4-fs (loop7): initial error at time 1778564518: ext4_do_update_inode:5690: inode 15 [ 862.209770][ C0] EXT4-fs (loop7): last error at time 1778564518: ext4_do_update_inode:5690: inode 15 [ 862.482794][T13145] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 862.490656][T13145] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #15: comm syz.7.2354: corrupted inode contents [ 862.599688][T13145] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 862.601161][T13145] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3001: inode #15: comm syz.7.2354: mark_inode_dirty error [ 862.733468][T13145] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 862.735922][T13145] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3004: inode #15: comm syz.7.2354: mark inode dirty (error -117) [ 862.860301][T13145] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 862.861525][T13145] EXT4-fs warning (device loop7): ext4_evict_inode:287: xattr delete (err -117) [ 862.957923][T13145] EXT4-fs (loop7): 1 orphan inode deleted [ 862.960442][T13163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2358'. [ 863.017589][T13145] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 863.105975][T13164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2358'. [ 863.480832][T11718] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.842583][ T5673] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 864.037814][ T5673] usb 3-1: Using ep0 maxpacket: 32 [ 864.104872][ T5673] usb 3-1: config 51 has an invalid interface number: 208 but max is 0 [ 864.155940][ T5673] usb 3-1: config 51 has no interface number 0 [ 864.195117][T13181] loop9: detected capacity change from 0 to 1024 [ 864.202066][ T5673] usb 3-1: config 51 interface 208 has no altsetting 0 [ 864.266793][ T5673] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=8b.70 [ 864.314302][ T5673] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.361377][ T5673] usb 3-1: Product: syz [ 864.401042][ T5673] usb 3-1: Manufacturer: syz [ 864.429498][ T5673] usb 3-1: SerialNumber: syz [ 865.386133][ T5673] f81534a_ctrl 3-1:51.208: failed to enable ports: -71 [ 865.429311][ T5673] f81534a_ctrl 3-1:51.208: probe with driver f81534a_ctrl failed with error -71 [ 865.516671][ T5673] usb 3-1: USB disconnect, device number 14 [ 866.008222][T13201] loop8: detected capacity change from 0 to 1024 [ 866.234341][T13201] hfsplus: can't free extent: start 2889, count 1 [ 866.433268][T13204] pimreg: entered allmulticast mode [ 866.491549][T13205] pimreg: left allmulticast mode [ 866.593356][T13208] loop7: detected capacity change from 0 to 128 [ 866.658347][T13208] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 866.704882][T13208] hpfs: filesystem error: improperly stopped [ 866.725056][T13208] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 866.763389][T13208] hpfs: You really don't want any checks? You are crazy... [ 866.860062][T13208] hpfs: hpfs_map_sector(): read error [ 866.897359][T13208] hpfs: code page support is disabled [ 866.955609][T13208] hpfs: hpfs_map_4sectors(): unaligned read [ 866.994574][T13208] hpfs: hpfs_map_4sectors(): unaligned read [ 867.029761][T13208] hpfs: filesystem error: unable to find root dir [ 867.149804][T13208] hpfs: hpfs_map_4sectors(): unaligned read [ 867.156119][T13208] hpfs: hpfs_map_sector(): read error [ 868.503580][T13227] loop9: detected capacity change from 0 to 1024 [ 868.711423][T13227] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 868.992223][T11961] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 869.197373][T11961] usb 9-1: Using ep0 maxpacket: 8 [ 869.240802][T11961] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 869.286261][T11961] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.351967][T11949] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 869.454417][T11961] pvrusb2: Hardware description: Terratec Grabster AV400 [ 869.518607][T11961] pvrusb2: ********** [ 869.536659][T11961] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 869.579515][T11961] pvrusb2: Important functionality might not be entirely working. [ 869.617834][T11961] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 869.686578][T11961] pvrusb2: ********** [ 869.715543][ T2350] pvrusb2: Invalid write control endpoint [ 869.944236][T11961] usb 9-1: USB disconnect, device number 2 [ 870.143530][T13252] loop9: detected capacity change from 0 to 128 [ 870.197365][ T2350] pvrusb2: Invalid write control endpoint [ 870.242672][ T2350] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 870.322373][ T2350] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 870.355383][ T2350] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 870.408523][ T2350] pvrusb2: Device being rendered inoperable [ 870.444856][ T2350] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 870.487958][ T2350] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 870.556188][ T2350] pvrusb2: Attached sub-driver cx25840 [ 870.583794][ T2350] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 870.674479][ T2350] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 870.716400][T13256] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2390'. [ 871.568104][ T6856] Bluetooth: hci1: command 0x0406 tx timeout [ 872.372489][T13278] loop3: detected capacity change from 0 to 256 [ 872.526916][T13278] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 872.686825][T13278] exFAT-fs (loop3): start_clu is invalid cluster(0xffffffff) [ 872.746668][T13283] loop9: detected capacity change from 0 to 128 [ 874.328007][T13302] loop8: detected capacity change from 0 to 512 [ 874.789544][T11961] hid-generic 0002:0004:0009.0020: unknown main item tag 0x0 [ 874.848309][T11961] hid-generic 0002:0004:0009.0020: unknown main item tag 0x0 [ 874.900350][T11961] hid-generic 0002:0004:0009.0020: unknown main item tag 0x0 [ 874.967941][T11961] hid-generic 0002:0004:0009.0020: unknown main item tag 0x0 [ 875.010081][T11961] hid-generic 0002:0004:0009.0020: unknown main item tag 0x0 [ 875.080810][T11961] hid-generic 0002:0004:0009.0020: unknown main item tag 0x0 [ 875.140035][T11961] hid-generic 0002:0004:0009.0020: unknown main item tag 0x0 [ 875.175373][T11961] hid-generic 0002:0004:0009.0020: unknown main item tag 0x0 [ 875.220667][T11961] hid-generic 0002:0004:0009.0020: unknown main item tag 0x0 [ 875.271379][T11961] hid-generic 0002:0004:0009.0020: unknown main item tag 0x0 [ 875.360805][T11961] hid-generic 0002:0004:0009.0020: hidraw0: HID v0.04 Device [syz0] on syz0 [ 876.268609][T13316] fido_id[13316]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 876.319361][T13324] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2418'. [ 876.420060][T13324] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2418'. [ 879.747795][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 879.758086][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 879.783426][ T1310] ------------[ cut here ]------------ [ 879.789214][ T1310] WARNING: ./include/linux/skbuff.h:3242 at lowpan_xmit+0xa0e/0x1d00, CPU#1: aoe_tx0/1310 [ 879.799649][ T1310] Modules linked in: [ 879.803758][ T1310] CPU: 1 UID: 0 PID: 1310 Comm: aoe_tx0 Tainted: G W L syzkaller #0 PREEMPT(full) [ 879.814700][ T1310] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 879.820179][ T1310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 879.830517][ T1310] RIP: 0010:lowpan_xmit+0xa0e/0x1d00 [ 879.836032][ T1310] Code: fb 8b 7d d4 e8 b3 e2 25 f2 48 89 df e9 35 fd ff ff 44 89 f7 e8 a3 e2 25 f2 66 41 83 fd ff 0f 85 7f fd ff ff e8 53 c3 77 f1 90 <0f> 0b 90 80 7d c0 00 0f 84 3b 12 00 00 48 8b bd 00 ff ff ff 0f b7 [ 879.855963][ T1310] RSP: 0000:ffff8881089bb960 EFLAGS: 00010293 [ 879.862333][ T1310] RAX: ffffffff9088b66d RBX: 0000000000000000 RCX: ffff88810acda140 [ 879.870651][ T1310] RDX: 0000000000000000 RSI: 000000000000ffff RDI: 000000000000ffff [ 879.878896][ T1310] RBP: ffff8881089bbac0 R08: ffffea000000000f R09: 0000000000000000 [ 879.887038][ T1310] R10: ffff8881081bb8d8 R11: ffff88811adfa710 R12: ffff88810acdad00 [ 879.895285][ T1310] R13: 000000000000ffff R14: 0000000000000000 R15: ffff88811c221900 [ 879.903622][ T1310] FS: 0000000000000000(0000) GS:ffff8881aa711000(0000) knlGS:0000000000000000 [ 879.912836][ T1310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 879.919688][ T1310] CR2: 00000000570f821c CR3: 000000003cb4e000 CR4: 00000000003526f0 [ 879.927955][ T1310] Call Trace: [ 879.931345][ T1310] [ 879.934395][ T1310] ? validate_xmit_xfrm+0x84/0x19e0 [ 879.940006][ T1310] ? netif_skb_features+0x1bd3/0x1ea0 [ 879.945683][ T1310] ? kmsan_report+0x310/0x320 [ 879.950716][ T1310] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 879.957281][ T1310] ? __pfx_lowpan_xmit+0x10/0x10 [ 879.962560][ T1310] dev_hard_start_xmit+0x22f/0xa80 [ 879.968070][ T1310] __dev_queue_xmit+0x2990/0x5a00 [ 879.973307][ T1310] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 879.979769][ T1310] ? kmsan_get_metadata+0xf1/0x160 [ 879.985116][ T1310] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 879.991831][ T1310] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 879.998226][ T1310] ? __dev_queue_xmit+0x2d4/0x5a00 [ 880.003550][ T1310] ? kmsan_get_metadata+0xf1/0x160 [ 880.009112][ T1310] tx+0xb6/0x440 [ 880.012983][ T1310] ? __pfx_tx+0x10/0x10 [ 880.017364][ T1310] kthread+0x17d/0x370 [ 880.021870][ T1310] ? __pfx_default_wake_function+0x10/0x10 [ 880.028089][ T1310] kthread+0x53f/0x600 [ 880.032392][ T1310] ? __pfx_kthread+0x10/0x10 [ 880.037236][ T1310] ? __pfx_kthread+0x10/0x10 [ 880.042216][ T1310] ret_from_fork+0x20f/0x8d0 [ 880.047036][ T1310] ? __switch_to+0x573/0x7a0 [ 880.052023][ T1310] ? __pfx_kthread+0x10/0x10 [ 880.056850][ T1310] ret_from_fork_asm+0x1a/0x30 [ 880.062119][ T1310] [ 880.065292][ T1310] ---[ end trace 0000000000000000 ]--- [ 880.070972][ T1310] ===================================================== [ 880.078224][ T1310] BUG: KMSAN: uninit-value in lowpan_xmit+0xa6b/0x1d00 [ 880.085218][ T1310] lowpan_xmit+0xa6b/0x1d00 [ 880.090049][ T1310] dev_hard_start_xmit+0x22f/0xa80 [ 880.095310][ T1310] __dev_queue_xmit+0x2990/0x5a00 [ 880.100619][ T1310] tx+0xb6/0x440 [ 880.104323][ T1310] kthread+0x17d/0x370 [ 880.108772][ T1310] kthread+0x53f/0x600 [ 880.113018][ T1310] ret_from_fork+0x20f/0x8d0 [ 880.117819][ T1310] ret_from_fork_asm+0x1a/0x30 [ 880.122741][ T1310] [ 880.125125][ T1310] Uninit was stored to memory at: [ 880.130548][ T1310] lowpan_xmit+0x68f/0x1d00 [ 880.135188][ T1310] dev_hard_start_xmit+0x22f/0xa80 [ 880.140569][ T1310] __dev_queue_xmit+0x2990/0x5a00 [ 880.145759][ T1310] tx+0xb6/0x440 [ 880.149655][ T1310] kthread+0x17d/0x370 [ 880.153874][ T1310] kthread+0x53f/0x600 [ 880.158212][ T1310] ret_from_fork+0x20f/0x8d0 [ 880.162943][ T1310] ret_from_fork_asm+0x1a/0x30 [ 880.167966][ T1310] [ 880.170357][ T1310] Uninit was created at: [ 880.174816][ T1310] kmem_cache_alloc_node_noprof+0x3cd/0x12c0 [ 880.181145][ T1310] __alloc_skb+0x855/0x1190 [ 880.185915][ T1310] new_skb+0x4a/0x550 [ 880.190160][ T1310] aoecmd_cfg+0x2c2/0xb70 [ 880.194652][ T1310] discover_timer+0x64/0x80 [ 880.199519][ T1310] call_timer_fn+0x4c/0x510 [ 880.204188][ T1310] __run_timer_base+0x80a/0xdb0 [ 880.209363][ T1310] run_timer_softirq+0x3a/0x70 [ 880.214269][ T1310] handle_softirqs+0x171/0x7b0 [ 880.219361][ T1310] __irq_exit_rcu+0x9a/0x1e0 [ 880.224122][ T1310] irq_exit_rcu+0x12/0x20 [ 880.228751][ T1310] sysvec_apic_timer_interrupt+0x84/0x90 [ 880.234634][ T1310] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 880.240948][ T1310] [ 880.243372][ T1310] CPU: 1 UID: 0 PID: 1310 Comm: aoe_tx0 Tainted: G W L syzkaller #0 PREEMPT(full) [ 880.254246][ T1310] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 880.259704][ T1310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 880.269970][ T1310] ===================================================== [ 880.276975][ T1310] Disabling lock debugging due to kernel taint [ 880.283404][ T1310] Kernel panic - not syncing: kmsan.panic set ... [ 880.289934][ T1310] CPU: 1 UID: 0 PID: 1310 Comm: aoe_tx0 Tainted: G B W L syzkaller #0 PREEMPT(full) [ 880.300719][ T1310] Tainted: [B]=BAD_PAGE, [W]=WARN, [L]=SOFTLOCKUP [ 880.307219][ T1310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 880.317378][ T1310] Call Trace: [ 880.320732][ T1310] [ 880.323727][ T1310] __dump_stack+0x26/0x30 [ 880.328202][ T1310] dump_stack_lvl+0x50/0x1c0 [ 880.332922][ T1310] ? dump_stack+0x12/0x25 [ 880.337383][ T1310] dump_stack+0x1e/0x25 [ 880.341681][ T1310] vpanic+0x7b4/0x1430 [ 880.345923][ T1310] panic+0x15d/0x160 [ 880.350008][ T1310] kmsan_report+0x31a/0x320 [ 880.354684][ T1310] ? __msan_warning+0x1b/0x30 [ 880.359517][ T1310] ? lowpan_xmit+0xa6b/0x1d00 [ 880.364321][ T1310] ? dev_hard_start_xmit+0x22f/0xa80 [ 880.369739][ T1310] ? __dev_queue_xmit+0x2990/0x5a00 [ 880.375068][ T1310] ? tx+0xb6/0x440 [ 880.378938][ T1310] ? kthread+0x17d/0x370 [ 880.383315][ T1310] ? kthread+0x53f/0x600 [ 880.387718][ T1310] ? ret_from_fork+0x20f/0x8d0 [ 880.392625][ T1310] ? ret_from_fork_asm+0x1a/0x30 [ 880.397718][ T1310] ? kmsan_get_metadata+0xf1/0x160 [ 880.402988][ T1310] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 880.409472][ T1310] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 880.415698][ T1310] ? report_bug+0x196/0x1d0 [ 880.420422][ T1310] ? lowpan_xmit+0xa10/0x1d00 [ 880.425235][ T1310] ? lowpan_xmit+0xa0e/0x1d00 [ 880.430033][ T1310] ? handle_bug+0xb2/0x230 [ 880.434645][ T1310] ? exc_invalid_op+0x1f/0x50 [ 880.439497][ T1310] ? kmsan_get_metadata+0xf1/0x160 [ 880.444781][ T1310] __msan_warning+0x1b/0x30 [ 880.449422][ T1310] lowpan_xmit+0xa6b/0x1d00 [ 880.454064][ T1310] ? validate_xmit_xfrm+0x84/0x19e0 [ 880.459409][ T1310] ? netif_skb_features+0x1bd3/0x1ea0 [ 880.464942][ T1310] ? kmsan_report+0x310/0x320 [ 880.469783][ T1310] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 880.476282][ T1310] ? __pfx_lowpan_xmit+0x10/0x10 [ 880.481350][ T1310] dev_hard_start_xmit+0x22f/0xa80 [ 880.486638][ T1310] __dev_queue_xmit+0x2990/0x5a00 [ 880.491797][ T1310] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 880.498021][ T1310] ? kmsan_get_metadata+0xf1/0x160 [ 880.503291][ T1310] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 880.509784][ T1310] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 880.515997][ T1310] ? __dev_queue_xmit+0x2d4/0x5a00 [ 880.521244][ T1310] ? kmsan_get_metadata+0xf1/0x160 [ 880.526546][ T1310] tx+0xb6/0x440 [ 880.530247][ T1310] ? __pfx_tx+0x10/0x10 [ 880.534540][ T1310] kthread+0x17d/0x370 [ 880.538751][ T1310] ? __pfx_default_wake_function+0x10/0x10 [ 880.544714][ T1310] kthread+0x53f/0x600 [ 880.548939][ T1310] ? __pfx_kthread+0x10/0x10 [ 880.553677][ T1310] ? __pfx_kthread+0x10/0x10 [ 880.558423][ T1310] ret_from_fork+0x20f/0x8d0 [ 880.563165][ T1310] ? __switch_to+0x573/0x7a0 [ 880.567922][ T1310] ? __pfx_kthread+0x10/0x10 [ 880.572685][ T1310] ret_from_fork_asm+0x1a/0x30 [ 880.577636][ T1310] [ 880.581013][ T1310] Kernel Offset: disabled [ 880.585384][ T1310] Rebooting in 86400 seconds..