last executing test programs: 26m0.79275384s ago: executing program 32 (id=38): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 25m27.153404483s ago: executing program 33 (id=248): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000002440)=ANY=[@ANYBLOB="666f7263652c6e6c733d6575632d6a702c626172726965722c747970653d883b7f382c756d61736b3d30303030303030303030303030303030303030303030362c666f7263652c626172726965722c747970653d49d388242c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c005dc15e246d930a23b5f4093707c10226afb28f3e2838bb917886a27afece1cbcf9ae2d32c2c3f5bf4bb6fcd73d5c59e463cd173c188e1eefaba6fceaeb5840cbeb145a56ad674e7f2f8c49eaf5b1c65eb6d762300b8c5c2ff69671e6b209000000"], 0x0, 0x6e7, &(0x7f0000000100)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00T\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="200002c0", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000020000100"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 13m54.982599972s ago: executing program 34 (id=6089): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0xa0, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_NEWDST={0x84, 0x13, [{0x400}, {0x400, 0x0, 0x1}, {0x47f50, 0x0, 0x1}, {0x1ff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x7}, {0x9, 0x0, 0x1}, {0x200}, {0x8}, {0x6}, {0x9}, {0x580, 0x0, 0x1}, {0x6}, {0xff48d}, {0x1, 0x0, 0x1}, {0x4}, {0x63}, {0x6}, {0xffff, 0x0, 0x1}, {0xf}, {0x2, 0x0, 0x1}, {0x694, 0x0, 0x1}, {0xffffb}, {0x7}, {0x5}, {0x3, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xfe60, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x14}]}]}, 0xa0}}, 0x0) 13m14.405352078s ago: executing program 35 (id=6267): syz_mount_image$exfat(&(0x7f0000000700), &(0x7f00000001c0)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x1, 0x1501, &(0x7f0000002a80)="$eJzs3AuYzlW7MPD7Xmv9GdOkp0kOw1rr/vOkwTJJkkOKHJIkSZKcEpImSRISQ0gSkpwPk+QwhOQwjUnjfD7knDR5pUmSkJzC+q7pbW/vu3v3297f2/581577d13rmnXPeu71rDX3zDz/9b+u5/m+x8i6zevVakpE8C/Bv35JAYAYABgCANcBQAAAleIrxeeOF5CY8q89CftzPZJ2tVfAriauf97G9c/buP55G9c/b+P6521c/7yN65+3cf0Zy8u2zyl2Pbe82/j+f17Gr///i+SUn/z1xvI39vxvpHD98zauf97G9c/buP55G9c/b+P6/+9X85+Mcf3zNq4/Y3nZ1b7/zO3qtqv9+8cYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjLG84569QAPBv/au9LsYYY4wxxhhjjP15fP6rvQLGGGOMMcYYY4z9z0MQIEFBAPkgP8RAAYiFayAOroWCcB1E4HqIhxugENwIhaEIFIVikADFoQRoMGCBIISSUAqicBOUhpshEcpAWSgHDspDEtwCFeBWqAi3QSW4HSrDHVAFqkI1qA53Qg24C+6GmlAL7oHaUAfqQj24F+rDfdAA7oeG8AA0ggehMTwETeBhaAqPQDN4FJrDY9ACHoeW0ApaQxto+3+V/zL0gVegL/SDFOgPA+BVGAiDYDC8BkPgdRgKb8AweBOGwwgYCW/BKHgbRsM7MAbGwjgYDxNgIkyCyTAFpkIqvAvT4D2YDu/DDJgJs2A2pMEcmAsfwDyYDwvgQ1gIH8EiWAxLYCmkw8eQAcsgEz6B5fApZMEKWAmrYDWsgbWwDtbDBtgIm2AzbIGtsA22w2ewA3bCLtgNe2Av7IPPYT98AQfgS8iGr/6b+Wf/Q35PBAQUKFChwnyYD2MwBmMxFuMwDgtiQYxgBOMxHgthISyMhbEoFsUETMASWAINGiQkLIklMYpRLI2lMRETsSyWRYcOkzAJK+CtWBErYiWshJWxMlbBqlgVq2N1rIE18G6EKgHUwtpYG+tiXbwX78X7sAE2wIbYEBthI2yMjbEJNsGm2BSbYTNsjs2xBbbAltgSW2NrbIttsR22w/bYHjtiR+yEnbAzdsZkTMYu2AW7Ylfsht2wO3bHHtgDe2Iv7IUv48v4Cr6C/bC26I8DcAAOxIEHcv8YXsPXcSi+gW/gmzgcR+BIfAvfwrdxNJ7BMTgWx+E4rCEm4iScjCSmYiqm4jSchtNxOs7AmTgTZ2MazsG5OBfn4Xycjx/iQvwIP8LFuBiXYjqmYwYuw0zMxOV4FrNwBa7EVbga1+BqXIfrcR1uxE24EbfgFtyG2/Az/Ax34k7cjbtxL+7Fz/Fz/AK/wOGYjdl4EA/iITyEh/Ew5mAOHsEjeBSP4jE8hsfxOJ7Ak3gKT+JpPI1n8Cyew3N4AS/gRXwx4dtme8tsGA4ilxJK5BP5RIyIEbEiVsSJOFFQFBQRERHxIl4UEoVEYVFYFBVFRYJIECVECWGEESRCUVKUFFERFaVFaZEoEkVZUVY44USSSBIVRAVRUVQUlcTtorK4Q1QRVUUHV11UFzVER3e3qClqiVqitqgj6op6op6oL+qLBqKBaCgaikaikWgsHhJNRH8cjI+I3Mo0FyOwhRiJLUUr0Vq0EW/jE6KdGI3tRQfRUTwlxuIY7CzauWTxrOgiJmFX8byYjC+I7mIq9hAviZ6il+gtXhZ9RHvXV/QTM7C/GCBm40AxSAwWr4l5WEfkVqyueFMMFyPESPGWWIpvi9HiHTFGjBXjxHgxQUwUk8RkMUVMFaniXTFNvCemi/fFDDFTzBKzRZqYI+aKD8Q8MV8sEB+KheIjsUgsFkvEUpEuPhYZYpnIFJ+I5eJTkSVWiJVilVgt1oi1Yp1YLzaIjWKT2Cy2iK1im9guPhM7xE6xS+wWe8ResU98LvaLL8QB8aXIFl+Jg+Iv4pD4WhwW34gc8a04Ir4TR8X34pj4QRwXP4oT4qQ4JX4Sp8XP4ow4K86J8+KC+EVcFJfEZeEFSJRCSqlkIPPJ/DJGFpCx8hoZJ6+VBeV1MiKvl/HyBllI3igLyyKyqCwmE2RxWUJqaaSVJENZUpaSUXmTLC1vlomyjCwry0kny8skeYusIG+VFeVtspK8XVaWd8gqsqqsJqvLO2UNeZe8W9aUteQ9srasI+vKevJeWV/eJxvI+2VD+YBsJB+UjeVDsol8WDaVj8hm8lHZXD4mW8jHZUvZSraWbWRb+YRsJ5+U7WUH2VE+JTvJp2Vn+YxMls/KLvI52VU+L7vJF2R3+aLsIV+SPWUv2Vtekpell31lP5ki+8sB8lU5UA6Sg+Vrcoh8XQ6Vb8hh8k05XI6QI+VbcpR8W46W78gxcqwcJ8fLCXKinCQnyylyqkyV78pp8j05Xb4vZ8iZcpacLdPkHDn4t5kW/Bfy3/sH+cN+ffZtcrv8TO6QO+UuuVvukXvlPrlP7pf75QF5QGbLbHlQHpSH5CF5WB6WOTJHHpFH5FF5VB6Tx+RxeVyekCflefmTPC1/lmfkWXlWnpcX5AV58befAShUQkmlVKDyqfwqRhVQseoaFaeuVQXVdSqirlfx6gZVSN2oCqsiqqgqphJUcVVCaWWUVaRCVVKVUlF1kyqtblaJqowqq8opp8qrJHXLv5z/R+trq9qqdqqdaq/aq46qo+qkOqnOqrNKVsmqi+qiuqquqpvqprqr7qqH6qF6qp6qt+qt+qg+qq/qq1JUihqgXlUD1SA1WL2mhqjX1VA1VA1Tw9RwNVyNVCPVKDVKjVaj1Rg1Ro1T49QENUFNUpPUFDVFpapUNU1NU9PVdDVDzVCz1CyVptLUXDVXzVPz1AK1QC1UC9UitUgtUUtUukpXGSpDZapMtVwtV1lqhVqhVqlVao1ao9apdWqD2qA2qU1qi9qistR2tV3tUDvULrVL7VF71D61T+1X+9UBdUBlq2x1UB1Uh9QhdVgdVjkqRx1RR9RRdVQdU8fUcXVcnVAn1Cl1Sp1Wp9UZdUadU+fUBXVBXVQX1WV1OfeyLxCBCFSggnxBviAmiAlig9ggLogLCgYFg0gQCeKD+KBQcGNQOCgSFA2KBQlB8aBEoAMT2ICCMCgZlAqiwU1B6eDmIDEoE5QNygUuKB8kBbcEFYJbg4rBbUGl4PagcnBHUCWoGlQLqgd3BjWCu4K7g5pBreCeoHZQJ6gb1AvuDeoH9wUNgvuDhsEDQaPgwaBx8FDQJHg4aBo8EjQLHg2aB48FLYLHg5ZBq6B10CZo+6fO7/2ZIk+6vrqfTtH99QD9qh6oB+nB+jU9RL+uh+o39DD9ph6uR+iR+i09Sr+tR+t39Bg9Vo/T4/UEPVFP0pP1FD1Vp+p39TT9np6u39cz9Ew9S8/WaXqOnqs/0PP0fL1Af6gX6o/0Ir1YL9FLdbr+WGfoZTpTf6KX6091ll6hV+pVerVeo9fqdXq93qA36k16s96it+pterv+TO/QO/UuvVvv0Xv1Pv253q+/0Af0lzpbf6UP6r/oQ/prfVh/o3P0t/qI/k4f1d/rY/oHfVz/qE/ok/qU/kmf1j/rM/qsPqfP6wv6F31RX9KXtc+9uM99eTfKKJPP5DMxJsbEmlgTZ+JMQVPQREzExJt4U8gUMoVNYVPUFDUJJsGUMCVMLjJkSpqSJmqiprQpbRJNoilryhpnnEkySaaCqWAqmoqmkqlkKpvKpoqpYqqZauZOc6e5y9xlapqa5h5zj6lj6ph6pp6pb+qbBqaBaWgamkamkWlsGpsmpolpapqaZqaZaW6amxamhWlpWprWprVpa9qadqadaW/am46mo+lkOpnOprNJNsmmi+liupquppvpZrqb7qaH6WF6mp6mt+lt+pg+pq/pa1JMihlgBpiBZqAZbAabIWaIGWqGmmFmmBlfYVPN3JPTKDPKjDajzRgz1owz480EM9FMMpPNFDPVpJpUM81MM9PNdDPDzDCzzCyTZtLMXDPXzDPzzAKzwCw0C80is8gsMUtMukk3GSbDZJpMs9wsN1kmy6w0K81qs9qsNWvNerPebDQbzWaz2Ww1W812s93sMDvMLrPL7DF7zD6zz+w3+80Bc8Bkm+yY3w535rA5bHJMjjlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86ZC+YXc9FcMpeNNzFWQKy9xsbZa21Be52NsQXs38ZFbTGbYIvbElbbwrbI38XGWptoy9iytpx1trxNsrf8Lq5iq9pqtrq909awd9m7fxfXt/fZBvZ+29A+YOvZe/8ubmQftI3tY7aJfdw2ta1sM9vGNreP2Rb2cdvStrKtbRvbyT5tO9tnbLJ91naxz/0uzrDL7Hq7wW60m+x++4U9Z8/bo/Z7e8H+YvvafnaIfd0OtW/YYfZNO9yO+F08zo63E+xEO8lOtlPs1N/Fs+xsm2bn2Ln2AzvPzv9dnG4/tgttpl1kF9sldumvce6aMu0ndrn91GbZFXalXWVX2zV2rV3372tdZbfYrXab3Wc/tzvsTrvL7rZ77N5f49x9HLBf2mz7lT1iv7OH7Nf2sD1mc+y3v8a5+wP4wR63P9oT9qQ9ZX+yp+3P9ow9++v+c/f+k71kL1tvgZAESVIUUD7KTzFUgGLpGoqja6kgXUcRup7i6QYqRDdSYSpCRakYJVBxKkGaDFkiCqkklaIo3USl6WZKpDJUlsqRo/KURLdQBbqVKtJtVIlup8p0B1WhqlSNqtOdVIPuorupJtWie6g21aG6VI/upfp0HzWg+6khPUCN6EFqTA9RE3qYmtIj1Iwepeb0GLWgx6kltaLW1Iba0hPUjp6k9tSBOtJT1Imeps70DCXTs9SFnqOu9Dx1oxeoO71IPegl6km9qDe9TH3oFepL/SiF+tMAepUG0iAaTK/REHqdhtIbNIzepOE0gkbSWzSK3qbR9A6NobE0jsbTBJpIk2gyTaGplErv0jR6j6bT+zSDZtIsmk1pNIfm0gc0j+bTAvqQFtJHtIgW0xJaSun0MWXQMsqkT2g5fUpZtIJW0ipaTWtoLa2j9bSBNtIm2kxbaCtto+30Ge2gnbSLdtMe2kv76HPaT1/QAfqSsukrOkh/oUP0NR2mbyiHvqUj9B0dpe/pGP1Ax+lHOkEn6RT9RKfpZzpDZ+kcnacL9AtdpEt0mTxBiKEIZajCIMwX5g9jwgJhbHhNGBdeGxYMrwsj4fVhfHhDWCi8MSwcFgmLhsXChLB4WCLUoQltSGEYlgxLhdHwprB0eHOYGJYJy4blQheWD5PCW8IK4a1hxfC2sFJ4e1g5vCOsElYNH3ugenhnWCO8K7w7rBnWCu8Ja4d1wrphvfDesH54X9ggvD9sGD4QVgwfDBuHD4VNwofDpuEjYbPw0bB5+FjYInw8bBm2CluHbcK24RNhu/DJsH3YIewYPhV2Cp8OO4fPhMnhs2GX8Lk/HE8J+4cDwlfDV0Pv75dLokuj6dGPoxnRZdHM6CfR5dFPo1nRFdGV0VXR1dE10bXRddH10Q3RjdFN0c3RLdGt0W1R7+vlB4dOOOmUC1w+l9/FuAIu1l3j4ty1rqC7zkXc9S7e3eAKuRtdYVfEFXXFXIIr7ko47YyzjlzoSrpSLupucqXdzS7RlXFlXTnnXHmX5Nq4tq6ta+eedO1dB9fRPeWeck+7p90z7hn3rOvinnNd3fOum3vBdXcvuhfdS66n6+V6u5ddH/eK6+v6uRSX4ga4AW6gG+gGu8FuiBvihrqhbpgb5oa74W6kG+lGuVFutBvtxrgxbpwb5ya4CW6Sm+SmuCku1aW6aW6am+6muxluhpvlZrk0l+bmurlunpvnFrgFbmHiQrfILXJL3BKX7tJdhstwmS7TLXfLXZbLcivdSrfarXZr3Vq33q13G91Gt9ltdlvdVrfdbXc73A63y+1ye9wet8/tc/vdfnfAHXDZLtsddAfdIXfIHXbfuBz3rTvivnNH3ffumPvBHXc/uhPupDvlfnKn3c/ujDvrzrnz7oL7xV10l9xl511q5N3ItMh7kemR9yMzIjMjsyKzI2mROZG5kQ8i8yLzIwsiH0YWRj6KLIosjiyJLI2kRz6OZESWRTIjn0SWRz6NZEVWRFZGVkVWR9ZEvC++I/QlfSkf9Tf50v5mn+jL+LK+nHe+vE/yt/gK/lZf0d/mK/nbfWV/h6/iq/pq/nHf0rfyrX0b39Y/4dv5J31738F39E/5Tv5p39k/45P9s76Lf8539c/7bv4F392/6Hv4l3xP38v39i/7Pv4V39f38ym+vx/gX/UD/SA/2L/mh/jX/VD/hh/m3/TD/Qg/0r/lR/m3/Wj/jh/jx/pxfryf4Cf6SX6yn+Kn+lT/rp/m3/PT/ft+hp/pZ/nZPs3P8XP9B36en+8X+A/9Qv+RX+QX+yV+qU/3H/sMv8xn+k/8cv+pz/Ir/Eq/yq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zW/3n/kdfqff5Xf7PX6v3+c/9/v9F/6A/9Jn+6/8Qf8Xf8h/7Q/7b3yO/9Yf8d/5o/57f8z/4I/7H/0Jf9Kf8j/50/5nf8af9ef8eX/B/+Iv+kv+8n/1PWv5/ifvpTPGGGOM/f8v9Q/G+/+D74nfWq4BAHDtzmI5fzsuAWBz4b/2B4mEThEAeLZfj0f+rdWunZKS8ttjsyQEpRYDQORK/q+XaL/FK6AjPA3J0AEq/MP1DRK9LtAfzB+9HSD2b3Ji/voxB/9h/lv/k/mfeGpcRuXwXPw/mX8xQGKpKzkF4Ep8Zf6K/8n8Rdr9wfoLfJ0K0P5vcuLgSnxl/iR4Ep6D5L97JGOMMcYYY4wx9leDRLVulHsihn9+Pk9QV3Lyw5X4j87njDHGGGOMMcYYu/pe6NX7mSeSkzt04w53uMOdf+9c7f9MjDHGGGOMsT/blYv+q70SxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMs7/p/8XFiV3uPjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG2NX2fwIAAP//sN45jQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x40, 0x0) fcntl$setlease(r0, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 13m0.138362688s ago: executing program 36 (id=6345): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 11m47.857714705s ago: executing program 37 (id=6734): syz_emit_ethernet(0x66, &(0x7f0000000200)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @local}}}}}}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) 9m10.050075713s ago: executing program 9 (id=7752): syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000480)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x101341, 0x69) 9m8.78155086s ago: executing program 9 (id=7757): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000000)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5, 0x3, '\f'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x810) 9m8.320610216s ago: executing program 9 (id=7760): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x406}, 0x40020000) close(0x3) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) 9m7.868765198s ago: executing program 9 (id=7762): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a55414, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 9m7.39216728s ago: executing program 9 (id=7765): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000001280)=[{&(0x7f0000000180)=""/4091, 0xffb}], 0x1) close(r0) write$cgroup_int(r1, &(0x7f0000000140), 0xfffffdef) 9m6.501591921s ago: executing program 9 (id=7771): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000240)=[@clear_death={0x4008630a, 0x3}], 0x0, 0x0, 0x0}) 9m5.501803438s ago: executing program 38 (id=7771): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000240)=[@clear_death={0x4008630a, 0x3}], 0x0, 0x0, 0x0}) 2m12.460187749s ago: executing program 1 (id=10705): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x1, 0x6, 0x2, &(0x7f0000000040)={0xc, "810556c721393f4084c89ea7f77d040b00"}}) 2m10.53922768s ago: executing program 1 (id=10719): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000000c0), 0x4) 2m10.200184711s ago: executing program 1 (id=10723): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 2m8.119462802s ago: executing program 1 (id=10738): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x2002009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121542, 0x60) 2m6.900830856s ago: executing program 1 (id=10749): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000001040)={[{@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp932'}}], [{@flag='sync'}, {@flag='rw'}]}, 0x1, 0x1536, &(0x7f0000001700)="$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") syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1217, &(0x7f0000002200)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) 2m5.942031632s ago: executing program 1 (id=10759): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {0x0, r2}}, 0x18) 2m5.027187202s ago: executing program 39 (id=10759): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {0x0, r2}}, 0x18) 1m18.138036909s ago: executing program 3 (id=11022): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x24, r0, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 1m17.751391113s ago: executing program 3 (id=11026): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d800", 0x2}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, &(0x7f0000000080)=0xc) 1m16.657616192s ago: executing program 3 (id=11038): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x20040010) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x4, 0x1, 0x0, 0xfbb}, 0x100}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x68}}, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m16.248915655s ago: executing program 3 (id=11043): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==") mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@volatile}, {@xino_off, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file1\x00', 0x14b041, 0x2) 1m15.668899787s ago: executing program 3 (id=11048): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0x5, 0x7, 0x6}}}}]}, 0x48}}, 0x0) 1m14.76694018s ago: executing program 3 (id=11055): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b722c64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a41856102000000000000006357ee95fffb99cde923a6c2e7eee552c60119e2822287367b0526cec2098d6ef88304699e83b0d070ad82774d8cc230dc844fa4ed26ec244085d833e4e2309d01aea46150e5d791371358a8ecd02c1e8795d500af4694cc800962a672fd461d94ad695620623ccf81ae84a48df7d0ffafbb72f694c5e1bb70d4b394fd631e5801e7"], 0x3, 0x2bf, &(0x7f0000001480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r0, r0, 0x0, 0xe3aa6ea) 1m13.883047721s ago: executing program 40 (id=11055): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b722c64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a41856102000000000000006357ee95fffb99cde923a6c2e7eee552c60119e2822287367b0526cec2098d6ef88304699e83b0d070ad82774d8cc230dc844fa4ed26ec244085d833e4e2309d01aea46150e5d791371358a8ecd02c1e8795d500af4694cc800962a672fd461d94ad695620623ccf81ae84a48df7d0ffafbb72f694c5e1bb70d4b394fd631e5801e7"], 0x3, 0x2bf, &(0x7f0000001480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r0, r0, 0x0, 0xe3aa6ea) 44.480623957s ago: executing program 4 (id=11217): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffff}) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) 43.791753822s ago: executing program 4 (id=11221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000000f8"], 0xfce) 42.095517477s ago: executing program 4 (id=11231): mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x50}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) 41.800642105s ago: executing program 4 (id=11232): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800, &(0x7f0000000080)={[{@nouid32}, {@errors_remount}, {@grpjquota}, {@sysvgroups}, {@grpjquota}]}, 0x1, 0x4f7, &(0x7f0000000cc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) 40.620229063s ago: executing program 4 (id=11236): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000040), 0x1000, r0}, 0x38) 39.432731954s ago: executing program 4 (id=11239): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000bc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 38.520564714s ago: executing program 41 (id=11239): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000bc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 5.69307025s ago: executing program 6 (id=11410): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000003c0)=0x9) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 5.16227057s ago: executing program 8 (id=11411): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 4.416398138s ago: executing program 0 (id=11415): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040c4}, 0x4c004) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), 0x0}) 3.958146217s ago: executing program 0 (id=11416): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@map_fd={0x18, 0x1, 0x1, 0x0, r1}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 3.956671413s ago: executing program 5 (id=11417): r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x80079a3) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) lseek(r0, 0x80000, 0x4) 3.526724174s ago: executing program 0 (id=11420): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) r1 = dup2(r0, r0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) syz_fuse_handle_req(r1, &(0x7f0000003400)="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", 0x2000, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, &(0x7f0000000180)=""/171, 0xab) 2.821969025s ago: executing program 2 (id=11423): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) 2.781939672s ago: executing program 7 (id=11424): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) close(0x4) file_getattr(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300), 0xb7, 0x1000) 2.516820027s ago: executing program 0 (id=11425): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002540)="955232d6c924037daed352087a08237337131faef13945bfaaa58d01e5f858e96271cde18577054eb145e62abd8150646072c75137606c9eca87c894182ee54fa975990ac5f7b8f2ced1bc37588f08efcfba84054e1bf5de3ae4fe95d64222f92b12be73478c249144accca8d10df2f204b2905167cb97972c40265e6b4af404adc8f6cf85253346cfeb6eb585e3f0692ab9d35d7850e3d62a948b5c9b", 0x9d}, {&(0x7f00000001c0)="96607e121729ff5ba084661b14fc7202e7b510092e7dbe48014c2be7983a4e4e11a8906105f36f652d7135bda20b8a9abb9b959973ca1f755aa9e545c8fb8876d07fa49e24824ff971", 0x49}, {&(0x7f0000000500)="648a6282c6e91b973836904a4a88affa0c371dd1b9c133c5e594714579d6bb3addfd43e78272aef64427ce5467d6994320cf139092452c7944ddab49e459f7e0c73f890e9e2463bd3390e20b1e472bd2aedb47094547a767a098a94a402e6aba65c0ef07eaa87f8663c763d9bb491243eb129eec434e5603956c8333a6ecdf4d3a601b9c8d3d63e3a4a57b38033e2b004f6c3e45f1645c3b7ca0d5ba5eea059b5aa4f0f80ac66904076cc60e47e1afc7d81ad937dee5efc0580e38d96cf0f53808f37d5a8811b07165e8b9aabceac06e4fa7f7668b8832877783a727a1fa8b972bfaeb232cf3e9b500965820f4adf64f1e5eddd65f5734fb43644347e98af7eb6abe95dcb6ed1acc22c8abdd5ea116242d5b7b2ecff3d9c635bce6a377112b4adbd75b71fcc8a6e3693c82ed7fd11ad63683cc89f0a35b", 0x137}, {&(0x7f00000007c0)="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", 0xde5}], 0x4}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000640)="fb", 0x1}], 0x1}}], 0x2, 0x4044805) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x8000000000025a5, 0x0) 2.401250287s ago: executing program 8 (id=11426): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x90887}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) 2.354579768s ago: executing program 6 (id=11427): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000440)='./file0/../file0/../file0\x00', &(0x7f00000004c0)='devpts\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 2.352672111s ago: executing program 2 (id=11428): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000002ec0)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0xfffd, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x22, 0x8016, 0x69, 0x0, 0x60, 0x2, 0x0, @empty, @broadcast}, "14f3305280f125e6"}}, 0xfdef) 2.292411703s ago: executing program 7 (id=11429): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000180)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)="00ff03076003008cb89e08f088a8", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.121865964s ago: executing program 5 (id=11430): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x34, r1, 0x7, 0x2, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x400d4) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 1.911959651s ago: executing program 6 (id=11431): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x7f8404caeb85699d}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.910123907s ago: executing program 0 (id=11432): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000000, 0x4c033, 0xffffffffffffffff, 0x8000000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 1.510671128s ago: executing program 5 (id=11433): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], 0x0, 0x0, 0x0, 0xffffffffffffffff}) 1.454039987s ago: executing program 7 (id=11434): syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4810, &(0x7f00000004c0)=ANY=[], 0x3, 0x2d4, &(0x7f0000000ac0)="$eJzs3T1rFEEcx/Hf7F2SywNx8yABy2jASjQ2YhMJ8T1YqKi5E0KOCBrxoQrWInaKvZ212FjaWAWtRSsrX0C6lZ2dvewl+3RJ7pYk3w/csbrzn/nP3T7MHGxGAE6t5ZXfH6/+DV9Gqqkm6brkSWpIdUlnNdd4urG5ttluNfMqqtmI8GUURZp9ZVY3WmmhYZyNcPzwX3VNJP8P/REEQfDnZy2/zJmBpYOK2LM/hSeNuLPT7m8MPLP+2Ko6gYqZHe3ouSarzgMAUC13//fcfX7Cjd89T1pwt/0Tdf/fqTqBiiXu/3aWFZjw+7UDfbM737NTuPqopHiWmKzjZneNmW0NKzqyugaYpmhWaXPxRh+utVuXVh+1m55eaclJFJu1783o0I2lZZswn5NsioLactgee0NhHxYz8p85SIvvek+lw3w32+au8fVBzc74rx7YT8R+U77N2+8ERPlfzq5xPHwbe2ZLZfRyyjZyzrWgL59K9LKRPiPp5Dml7h8I/DjPt8M5UdN7oqLeXcnunY2aSY1aLIiaTUa5K6c7mrMjDy6j23uYN+aWmdc/fdZKYvzvhZ/2gsqcmWEZW9IdGbn9qduSfonEvFLpo6yh3L2v9UDXNPnkxcv1++1263HZja+/eigcbyz31ET2Ru0w4XHPD5/Gvo1gJKr66GuONup9qzm5ER8wg2jrlG8oe9dWuXpqGtF6fM3sR6pRzekDpdEjuUCheonL49ztqpNBFcJriInmf3YkH43qbth94env23H6kNLG6UFR5bbG93e2o+lDYm6wO1idtu9jPc3gxrNncIk+5M65zl+ULuS0+K27Wt/leUKYFf3QPX7/BwAAAAAAAAAAAAAAAAAAOG7KPQ/gHm854JMhFXcRAAAAAAAAAAAAAAAAAAAAAIBjL2/9X7tGZsH6v/GTAdnr/yb+qnfx+r9Ly3Hx/ev/5i9SC6Bn/wMAAP//e6F1RA==") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) unlink(&(0x7f0000000040)='./file1\x00') pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 1.442859538s ago: executing program 2 (id=11435): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000a00000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) 1.33879738s ago: executing program 8 (id=11436): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0xaad80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000001c0)) 1.329361228s ago: executing program 0 (id=11437): r0 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r0) 1.073096864s ago: executing program 2 (id=11438): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.071180324s ago: executing program 6 (id=11439): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x90) write(r0, &(0x7f0000000000)='~', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) listns(&(0x7f0000000000)={0x20, 0x0, 0x7, 0x8000000, 0x0, 0xd}, 0x0, 0x8, 0x0) 1.011202031s ago: executing program 7 (id=11440): r0 = socket(0x1, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={0x0, 0x2710}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000005c0)=""/5, 0x5}], 0x1}}], 0x2, 0x0, 0x0) 1.00578188s ago: executing program 5 (id=11441): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f00000000c0)="cc60d55a", 0x4, 0x3b40, 0x0, 0x0) 871.121162ms ago: executing program 8 (id=11442): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @private=0xa010102}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmsg$inet(r0, &(0x7f00000027c0)={&(0x7f0000002300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000002640)=[{&(0x7f0000002340)='\r', 0x1}], 0x1}, 0x20000800) 640.084626ms ago: executing program 6 (id=11443): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x64}]}]}, 0x28}}, 0x0) 634.874322ms ago: executing program 7 (id=11444): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r2, 0x5}, &(0x7f0000000040)=0x8) 622.04978ms ago: executing program 5 (id=11445): r0 = socket$inet6(0xa, 0x3, 0xff) shutdown(r0, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xfffe, 0x3, @mcast1, 0x6}, 0x1c) r1 = dup2(r0, r0) write$tun(r1, 0x0, 0x3c) 602.81448ms ago: executing program 2 (id=11446): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={0x0}) 455.764061ms ago: executing program 8 (id=11447): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x701, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 217.869463ms ago: executing program 6 (id=11448): ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000200"]) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 171.567764ms ago: executing program 5 (id=11449): r0 = userfaultfd(0x80001) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x501}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000b9f000/0x2000)=nil, &(0x7f0000d76000/0x3000)=nil, 0x2000}) 145.79418ms ago: executing program 7 (id=11450): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r1, 0x0, &(0x7f00009e6000/0x2000)=nil, 0x2000, 0x200000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x1000000}) 89.302547ms ago: executing program 2 (id=11451): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtclass={0x24, 0x28, 0x721, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x4}, {0x7}, {0xfff1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4004) 0s ago: executing program 8 (id=11452): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) kernel console output (not intermixed with test programs): ota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 1503.696189][ T647] (syz.3.10454,647,1):ocfs2_acquire_dquot:904 ERROR: status = -5 [ 1503.710520][ T647] (syz.3.10454,647,1):ocfs2_mknod:318 ERROR: status = -5 [ 1503.719282][ T647] (syz.3.10454,647,1):ocfs2_mknod:506 ERROR: status = -5 [ 1503.727916][ T647] (syz.3.10454,647,1):ocfs2_create:679 ERROR: status = -5 [ 1504.087054][ T642] Process accounting resumed [ 1504.180997][T21955] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1504.283142][ T642] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264) [ 1504.305644][T23355] ocfs2: Unmounting device (7,3) on (node local) [ 1504.314958][ T642] FAT-fs (loop5): Filesystem has been set read-only [ 1504.369213][ T5779] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1504.526914][ T5779] usb 2-1: Using ep0 maxpacket: 8 [ 1504.552517][ T5779] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1504.598490][ T5779] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1504.618641][ T5779] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1504.630524][ T5779] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1504.642240][ T5779] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1504.680879][ T5779] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1504.719739][T26801] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264) [ 1504.743514][ T5779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.088729][ T5779] usb 2-1: GET_CAPABILITIES returned 0 [ 1505.111209][ T5779] usbtmc 2-1:16.0: can't read capabilities [ 1505.230348][ T677] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1505.338883][T30181] usb 2-1: USB disconnect, device number 57 [ 1505.433268][ T679] loop5: detected capacity change from 0 to 24 [ 1505.474394][ T679] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1505.532560][ T679] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1506.052057][ T694] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10472'. [ 1506.119233][ T694] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10472'. [ 1506.309005][ T705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10477'. [ 1506.791505][ T717] ieee802154 phy0 wpan0: encryption failed: -22 [ 1509.015389][T21476] kernel read not supported for file /dsp1 (pid: 21476 comm: kworker/0:3) [ 1509.754933][ T798] loop4: detected capacity change from 0 to 4096 [ 1509.792905][ T798] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1510.004592][ T798] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1510.050315][ T798] ntfs3(loop4): ino=1a, mi_enum_attr [ 1510.080351][ T798] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 1510.150678][ T798] ntfs3(loop4): ino=5, "/" ntfs_readdir [ 1510.382153][ T814] netlink: 'syz.7.10525': attribute type 1 has an invalid length. [ 1510.423961][ T814] netlink: 'syz.7.10525': attribute type 7 has an invalid length. [ 1510.454713][ T814] netlink: 'syz.7.10525': attribute type 8 has an invalid length. [ 1510.476775][ T814] netlink: 208 bytes leftover after parsing attributes in process `syz.7.10525'. [ 1510.492371][ T814] NCSI netlink: No device for ifindex 119 [ 1510.950498][ T825] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1510.991282][ T825] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1511.149770][ T829] loop6: detected capacity change from 0 to 128 [ 1511.192417][ T829] EXT4-fs (loop6): filesystem is read-only [ 1511.280876][ T829] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: writeback. [ 1511.714267][ T821] loop4: detected capacity change from 0 to 32768 [ 1511.884930][ T821] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1512.304301][ T839] binder: 837:839 ioctl 4018620d 0 returned -22 [ 1512.851066][T21898] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1513.566919][T21955] ocfs2: Unmounting device (7,4) on (node local) [ 1513.954744][ T866] ip6gretap0: entered promiscuous mode [ 1514.002028][ T863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1514.091933][ T866] ip6gretap0: left promiscuous mode [ 1514.315927][ T872] vivid-008: disconnect [ 1514.344847][ T870] vivid-008: reconnect [ 1514.741268][ T884] netlink: 'syz.7.10553': attribute type 12 has an invalid length. [ 1514.816645][ T884] netlink: 'syz.7.10553': attribute type 29 has an invalid length. [ 1514.857655][ T884] netlink: 148 bytes leftover after parsing attributes in process `syz.7.10553'. [ 1515.088690][ T894] loop5: detected capacity change from 0 to 64 [ 1515.169595][ T894] hfs: node is corrupted: leaf_head 11, leaf_tail 5 [ 1515.378394][T15441] block nbd2: Receive control failed (result -32) [ 1516.399073][ T928] loop5: detected capacity change from 0 to 64 [ 1516.791294][ T900] loop3: detected capacity change from 0 to 32768 [ 1516.861956][ T900] [ 1516.861956][ T900] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1516.861956][ T900] [ 1516.943587][ T900] ERROR: (device loop3): diWrite: ixpxd invalid [ 1516.943587][ T900] [ 1517.056848][ T900] ERROR: (device loop3): txAbort: [ 1517.056848][ T900] [ 1517.215106][ T900] ERROR: (device loop3): dtSearch: stack overrun! [ 1517.215106][ T900] [ 1517.261240][ T955] loop4: detected capacity change from 0 to 1024 [ 1517.333199][ T900] btstack dump: [ 1517.372177][ T900] bn = 0, index = 0 [ 1517.374295][ T955] hfsplus: invalid length 1280 has been corrected to 255 [ 1517.417081][ T900] bn = 0, index = 0 [ 1517.463742][ T961] hfsplus: invalid length 1280 has been corrected to 255 [ 1517.526959][ T900] bn = 0, index = 0 [ 1517.548504][ T900] bn = 0, index = 0 [ 1517.578687][ T900] bn = 0, index = 0 [ 1517.612781][ T900] bn = 0, index = 0 [ 1517.637426][ T900] bn = 0, index = 0 [ 1517.658198][ T900] bn = 0, index = 0 [ 1517.673401][ T900] jfs_lookup: dtSearch returned -5 [ 1517.882139][T23355] [ 1517.882139][T23355] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1517.882139][T23355] [ 1517.927582][T23355] [ 1517.927582][T23355] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1517.927582][T23355] [ 1518.162645][ T973] netlink: 'syz.4.10588': attribute type 10 has an invalid length. [ 1518.197288][ T973] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10588'. [ 1518.265118][ T973] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1518.520760][ T957] loop5: detected capacity change from 0 to 32768 [ 1518.547814][ T957] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.10579 (957) [ 1518.621242][ T957] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1518.677413][ T957] BTRFS info (device loop5): using crc32c checksum algorithm [ 1518.904945][ T957] BTRFS info (device loop5): enabling ssd optimizations [ 1518.932333][ T957] BTRFS info (device loop5): turning on flush-on-commit [ 1518.972271][ T957] BTRFS info (device loop5): enabling free space tree [ 1518.972866][ T997] netlink: 'syz.3.10591': attribute type 1 has an invalid length. [ 1519.006942][ T957] BTRFS info (device loop5): enabling auto defrag [ 1519.033505][ T957] BTRFS info (device loop5): use lzo compression, level 1 [ 1519.081982][ T957] BTRFS info (device loop5): max_inline set to 4096 [ 1519.276678][ T30] audit: type=1800 audit(1780321219.654:468): pid=957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.10579" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 1519.339726][ T30] audit: type=1800 audit(1780321219.704:469): pid=957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.10579" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 1519.533240][ T971] loop1: detected capacity change from 0 to 32768 [ 1519.633641][ T971] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1519.815323][ T971] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 1519.858343][ T971] XFS (loop1): Tail block (0x29) overwrite detected. Updated to 0x30 [ 1519.900137][ T971] XFS (loop1): Ending clean mount [ 1520.190516][ T971] XFS (loop1): User initiated shutdown received. [ 1520.230272][ T971] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x139/0x1a0 (fs/xfs/xfs_fsops.c:465). Shutting down filesystem. [ 1520.274133][ T1025] XFS (loop1): Error -5 reserving per-AG metadata reserve pool. [ 1520.294464][ T971] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 1520.524852][ T5633] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1521.144955][ T1042] loop4: detected capacity change from 0 to 512 [ 1521.158610][ T5629] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1521.239899][ T30] audit: type=1326 audit(1780321221.604:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1026 comm="syz.6.10601" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8d439ce59 code=0x7fc00000 [ 1521.473302][ T1042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1521.802746][ T1059] loop6: detected capacity change from 0 to 2048 [ 1522.510224][T21955] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1522.600738][ T1076] loop5: detected capacity change from 0 to 128 [ 1522.696856][ T1076] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1522.757074][ T5779] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1522.817410][ T1076] ext4 filesystem being mounted at /1854/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1522.863256][ T1082] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1522.937150][ T5779] usb 4-1: Using ep0 maxpacket: 8 [ 1522.950814][ T5779] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1522.973799][ T5779] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1523.062675][ T5779] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1523.107776][ T5779] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1523.124021][ T5779] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1523.163775][ T5629] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1523.212599][ T1090] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10619'. [ 1523.259409][ T5779] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1523.300406][ T5779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.537905][ T5779] usb 4-1: GET_CAPABILITIES returned 0 [ 1523.549197][ T1096] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.10622'. [ 1523.561158][ T5779] usbtmc 4-1:16.0: can't read capabilities [ 1523.593120][ T1096] openvswitch: netlink: Message has 5 unknown bytes. [ 1523.840508][ T5779] usb 4-1: USB disconnect, device number 29 [ 1523.983285][ T1099] loop5: detected capacity change from 0 to 4096 [ 1524.040966][ T1099] NILFS (loop5): invalid segment: Checksum error in segment payload [ 1524.074693][ T1099] NILFS (loop5): trying rollback from an earlier position [ 1524.148294][ T1099] NILFS (loop5): recovery complete [ 1524.169625][ T1102] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1524.221396][ T77] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1524.781825][ T1087] loop6: detected capacity change from 0 to 32768 [ 1524.797605][ T1108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10627'. [ 1524.857813][ T1087] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1524.877075][ T1111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10627'. [ 1525.222087][ T1116] loop5: detected capacity change from 0 to 512 [ 1525.313252][ T1116] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1526.010447][ T1128] batadv0: entered promiscuous mode [ 1526.051768][ T1128] dummy0: entered promiscuous mode [ 1526.069453][ T1130] loop3: detected capacity change from 0 to 256 [ 1526.098395][ T1130] exfat: Deprecated parameter 'utf8' [ 1526.136066][ T1130] exfat: Deprecated parameter 'utf8' [ 1526.184994][ T1130] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1526.200243][ T1128] hsr1: entered promiscuous mode [ 1526.230028][ T1128] hsr1: entered allmulticast mode [ 1526.245864][ T1128] batadv0: entered allmulticast mode [ 1526.260137][ T1128] dummy0: entered allmulticast mode [ 1526.274855][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1526.313476][ T1132] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10635'. [ 1526.563901][T21898] ocfs2: Unmounting device (7,6) on (node local) [ 1527.663264][ T5779] hid_parser_main: 446 callbacks suppressed [ 1527.663300][ T5779] hid-generic 0006:0004:0009.0065: unknown main item tag 0x0 [ 1527.682421][ T5779] hid-generic 0006:0004:0009.0065: unknown main item tag 0x0 [ 1527.695096][ T5779] hid-generic 0006:0004:0009.0065: unknown main item tag 0x0 [ 1527.722538][ T5779] hid-generic 0006:0004:0009.0065: unknown main item tag 0x0 [ 1527.746813][ T5779] hid-generic 0006:0004:0009.0065: unknown main item tag 0x0 [ 1527.764813][ T5779] hid-generic 0006:0004:0009.0065: unknown main item tag 0x0 [ 1527.793963][ T5779] hid-generic 0006:0004:0009.0065: unknown main item tag 0x0 [ 1527.824618][ T5779] hid-generic 0006:0004:0009.0065: unknown main item tag 0x0 [ 1527.854153][ T5779] hid-generic 0006:0004:0009.0065: unknown main item tag 0x0 [ 1527.892915][ T5779] hid-generic 0006:0004:0009.0065: unknown main item tag 0x0 [ 1527.957082][ T5779] hid-generic 0006:0004:0009.0065: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1528.266862][ T1144] loop3: detected capacity change from 0 to 32768 [ 1528.280670][ T1172] fido_id[1172]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1528.417276][ T1144] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1528.494905][ T1144] XFS (loop3): Ending clean mount [ 1528.617065][ T1192] batman_adv: batadv0: Adding interface: macsec0 [ 1528.627057][ T1144] XFS (loop3): User initiated shutdown received. [ 1528.644537][ T1144] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x139/0x1a0 (fs/xfs/xfs_fsops.c:465). Shutting down filesystem. [ 1528.667456][ T1192] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1528.751776][ T1144] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 1528.781884][ T1192] batman_adv: batadv0: Interface activated: macsec0 [ 1528.976903][T23355] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1529.718041][ T1206] loop5: detected capacity change from 0 to 2048 [ 1529.874094][ T1206] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1529.946381][ T1206] ext4 filesystem being mounted at /1864/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1530.052734][ T30] audit: type=1800 audit(1780321231.423:471): pid=1206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.10664" name="file3" dev="loop5" ino=16 res=0 errno=0 [ 1530.278693][ T1190] loop6: detected capacity change from 0 to 32768 [ 1530.334739][ T1190] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.10657 (1190) [ 1530.418219][ T1206] fs-verity (loop5, inode 16): Error -4 building Merkle tree [ 1530.447811][ T1190] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1530.484475][ T1190] BTRFS info (device loop6): using crc32c checksum algorithm [ 1530.680530][ T1190] BTRFS info (device loop6): enabling ssd optimizations [ 1530.709512][ T1190] BTRFS info (device loop6): turning on flush-on-commit [ 1530.769128][ T1190] BTRFS info (device loop6): enabling free space tree [ 1530.789480][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1530.798907][ T1190] BTRFS info (device loop6): enabling auto defrag [ 1530.799843][ T1190] BTRFS info (device loop6): use lzo compression, level 1 [ 1530.799886][ T1190] BTRFS info (device loop6): max_inline set to 4096 [ 1530.958752][ T30] audit: type=1800 audit(1780321232.323:472): pid=1190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.10657" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 1531.044159][ T30] audit: type=1800 audit(1780321232.323:473): pid=1190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.10657" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 1531.299846][T21898] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1531.583475][ T1248] loop1: detected capacity change from 0 to 512 [ 1531.752737][ T1248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1531.829281][ T1258] input input75: cannot allocate more than FF_MAX_EFFECTS effects [ 1532.038457][ T1260] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10676'. [ 1532.138771][ T1260] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1532.277594][ T1260] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1532.373264][ T1260] bond0 (unregistering): Released all slaves [ 1533.771906][ T5633] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1535.507327][ T1329] batadv0: entered promiscuous mode [ 1535.539823][ T5779] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1535.559902][ T1329] dummy0: entered promiscuous mode [ 1535.601952][ T1329] debugfs: 'hsr1' already exists in 'hsr' [ 1535.613937][ T1329] Cannot create hsr debugfs directory [ 1535.700989][ T1329] hsr1: entered promiscuous mode [ 1535.732267][ T1329] hsr1: entered allmulticast mode [ 1535.749715][ T5779] usb 2-1: Using ep0 maxpacket: 32 [ 1535.759445][ T1329] batadv0: entered allmulticast mode [ 1535.761808][ T1333] loop3: detected capacity change from 0 to 1024 [ 1535.784854][ T1329] dummy0: entered allmulticast mode [ 1535.792298][ T5779] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1535.824777][ T5779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.913873][ T1333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1535.931748][ T5779] usb 2-1: config 0 descriptor?? [ 1536.209314][ T5779] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1536.269540][ T5779] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1536.314958][ T5779] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1536.370787][ T5779] usb 2-1: media controller created [ 1536.547355][T23355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1536.594266][ T5779] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1536.687093][ T5779] az6027: usb out operation failed. (-71) [ 1536.709309][ T5779] az6027: usb out operation failed. (-71) [ 1536.721776][ T5779] stb0899_attach: Driver disabled by Kconfig [ 1536.761879][ T5779] az6027: no front-end attached [ 1536.761879][ T5779] [ 1536.810177][ T5779] az6027: usb out operation failed. (-71) [ 1536.843793][ T5779] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1536.860406][ T1354] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10717'. [ 1536.889798][ T5779] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input77 [ 1536.988040][ T5779] dvb-usb: schedule remote query interval to 400 msecs. [ 1537.023970][ T5779] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1537.092271][ T5779] usb 2-1: USB disconnect, device number 58 [ 1537.471308][ T5779] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1539.647396][ T1411] loop1: detected capacity change from 0 to 512 [ 1539.664613][ T1411] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1539.727266][ T1411] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.10738: bad orphan inode 131083 [ 1539.752633][ T1411] loop1: lost filesystem error report for type 5 error -117 [ 1539.791444][ T1411] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1540.619963][ T5633] EXT4-fs error (device loop1): htree_dirblock_to_tree:1077: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1541.214892][ T1434] netlink: set zone limit has 4 unknown bytes [ 1541.520755][T31859] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1541.753782][ T1451] loop3: detected capacity change from 0 to 1024 [ 1541.852396][ T1451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1542.271673][T11110] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.330104][T23355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1542.709062][ T1462] netlink: 64 bytes leftover after parsing attributes in process `syz.5.10772'. [ 1543.067895][T28611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1543.081130][T11110] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.097784][T28611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1543.114285][T28611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1543.124404][T28611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1543.132391][T28611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1543.267865][T11110] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.367307][T11110] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.720845][T11110] bridge_slave_0: left allmulticast mode [ 1543.734735][T11110] bridge_slave_0: left promiscuous mode [ 1543.752705][T11110] bridge0: port 1(bridge_slave_0) entered disabled state [ 1544.390507][T11110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1544.408308][T11110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1544.422846][T11110] bond0 (unregistering): Released all slaves [ 1544.448838][T11110] bond1 (unregistering): Released all slaves [ 1544.478982][T11110] bond2 (unregistering): Released all slaves [ 1544.587240][ T5289] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1544.717403][T11110] tipc: Disabling bearer [ 1544.767107][T11110] tipc: Left network mode [ 1544.884891][ T1464] lo speed is unknown, defaulting to 1000 [ 1544.912992][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1544.919581][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.236694][T15441] Bluetooth: hci5: command tx timeout [ 1545.628226][T11110] IPVS: stopping backup sync thread 9868 ... [ 1545.820363][T11110] batman_adv: batadv0: Removing interface: macvtap2 [ 1546.040016][ T1464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1546.048845][ T1464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1546.058906][ T1464] bridge_slave_0: entered allmulticast mode [ 1546.069263][ T1464] bridge_slave_0: entered promiscuous mode [ 1546.084813][ T1464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1546.095773][ T1464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.127733][ T1464] bridge_slave_1: entered allmulticast mode [ 1546.141064][ T1464] bridge_slave_1: entered promiscuous mode [ 1546.233132][ T1464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1546.254131][ T1464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1546.268826][T11110] batadv0: left promiscuous mode [ 1546.274689][T11110] dummy0: left promiscuous mode [ 1546.299280][T11110] hsr_slave_0: left promiscuous mode [ 1546.306797][T11110] hsr_slave_1: left promiscuous mode [ 1546.312779][T11110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1546.321597][T11110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1546.332726][T11110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1546.344979][T11110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1546.364572][T11110] veth1_macvtap: left promiscuous mode [ 1546.371717][T11110] veth0_macvtap: left promiscuous mode [ 1546.377549][T11110] veth1_vlan: left promiscuous mode [ 1546.382861][T11110] veth0_vlan: left promiscuous mode [ 1546.484389][T11110] pim6reg (unregistering): left allmulticast mode [ 1547.038045][ T5289] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1547.083960][ T1464] team0: Port device team_slave_0 added [ 1547.100889][ T1464] team0: Port device team_slave_1 added [ 1547.188158][ T1464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1547.195260][ T1464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1547.229399][ T1464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1547.244693][ T1464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1547.256683][ T1464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1547.291596][ T1464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1547.291620][T15441] Bluetooth: hci5: command tx timeout [ 1547.442272][ T1464] hsr_slave_0: entered promiscuous mode [ 1547.451782][ T1464] hsr_slave_1: entered promiscuous mode [ 1547.470313][ T1464] debugfs: 'hsr0' already exists in 'hsr' [ 1547.478161][ T1464] Cannot create hsr debugfs directory [ 1547.534783][T11110] IPVS: stop unused estimator thread 0... [ 1548.449122][ T5289] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1548.743889][ T1464] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1548.762597][ T1464] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1548.773011][ T1464] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1548.789232][ T1464] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1548.802696][ T1464] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1548.815891][ T1464] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1548.824766][ T1464] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1548.840856][ T1464] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1549.006948][ T1464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1549.043059][ T1464] 8021q: adding VLAN 0 to HW filter on device team0 [ 1549.067668][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 1549.074896][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1549.111023][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.118360][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1549.367653][T15441] Bluetooth: hci5: command tx timeout [ 1549.402681][ T5289] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1549.900272][ T1464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1550.004399][ T1464] veth0_vlan: entered promiscuous mode [ 1550.043142][ T1464] veth1_vlan: entered promiscuous mode [ 1550.094940][ T1464] veth0_macvtap: entered promiscuous mode [ 1550.111532][ T1464] veth1_macvtap: entered promiscuous mode [ 1550.140741][ T1464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1550.162011][ T1464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1550.203188][T21272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1550.213202][T21272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1550.223557][T21272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1550.242968][T21272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1550.559444][T22052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1550.590483][T22052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1550.641189][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1550.668063][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1550.958214][ T1579] binder: 1578:1579 ioctl c018620c 200000000240 returned -1 [ 1551.039034][ T1586] netlink: 220 bytes leftover after parsing attributes in process `syz.7.10776'. [ 1551.096851][T26801] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1551.118558][ T1586] netlink: 'syz.7.10776': attribute type 2 has an invalid length. [ 1551.228069][T21476] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1551.287322][T26801] usb 4-1: Using ep0 maxpacket: 32 [ 1551.309006][T26801] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1551.362515][T26801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.417985][T21476] usb 5-1: Using ep0 maxpacket: 32 [ 1551.429039][T26801] usb 4-1: config 0 descriptor?? [ 1551.447070][T15441] Bluetooth: hci5: command tx timeout [ 1551.457327][T21476] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1551.495884][T21476] usb 5-1: config 0 has no interface number 0 [ 1551.547770][T21476] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1551.593940][T21476] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.642086][T21476] usb 5-1: Product: syz [ 1551.681464][T21476] usb 5-1: Manufacturer: syz [ 1551.707480][T21476] usb 5-1: SerialNumber: syz [ 1551.721969][T26801] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1551.749447][T21476] usb 5-1: config 0 descriptor?? [ 1551.788702][T21476] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1551.808558][T26801] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1551.854017][T26801] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1551.883845][T26801] usb 4-1: media controller created [ 1552.000335][T26801] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1552.017783][T21476] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1552.064457][T21476] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1552.123083][T26801] az6027: usb out operation failed. (-71) [ 1552.149141][T26801] az6027: usb out operation failed. (-71) [ 1552.164875][T26801] stb0899_attach: Driver disabled by Kconfig [ 1552.229898][T26801] az6027: no front-end attached [ 1552.229898][T26801] [ 1552.290453][T26801] az6027: usb out operation failed. (-71) [ 1552.378705][T26801] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1552.429926][T26801] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input78 [ 1552.552605][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1552.560398][T26801] dvb-usb: schedule remote query interval to 400 msecs. [ 1552.560860][ T1570] usb 5-1: USB disconnect, device number 24 [ 1552.622095][T26801] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1552.717541][T26801] usb 4-1: USB disconnect, device number 30 [ 1552.906971][ T1570] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1553.033205][ T1570] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1553.099614][ T1570] quatech2 5-1:0.51: device disconnected [ 1553.103529][ T1624] loop2: detected capacity change from 0 to 2048 [ 1553.297639][ T1624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1553.371223][T26801] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1553.386928][ T1624] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1553.603294][ T1634] loop6: detected capacity change from 0 to 2048 [ 1553.723284][ T1634] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1553.828329][ T1464] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1553.844654][ T30] audit: type=1800 audit(1780321255.213:474): pid=1634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.10783" name="file1" dev="loop6" ino=1415 res=0 errno=0 [ 1554.228343][ T1651] netlink: 'syz.2.10786': attribute type 9 has an invalid length. [ 1554.274599][ T1651] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.10786'. [ 1554.598798][ T1630] loop5: detected capacity change from 0 to 32768 [ 1554.829704][ T1630] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1555.046783][ T1630] VFS: Lookup of '' in ocfs2 loop5 would have caused loop [ 1555.453606][T22052] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1555.834585][ T5629] ocfs2: Unmounting device (7,5) on (node local) [ 1557.089250][ T1711] loop2: detected capacity change from 0 to 512 [ 1557.160029][ T1712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10810'. [ 1557.177204][ T1711] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1557.254169][ T1712] netlink: 'syz.3.10810': attribute type 6 has an invalid length. [ 1557.309031][ T1711] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:482: comm syz.2.10809: Invalid block bitmap block 0 in block_group 0 [ 1557.386846][ T1711] loop2: lost filesystem error report for type 5 error -117 [ 1557.389006][ T1711] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1557.396613][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1557.396648][ C0] EXT4-fs (loop2): initial error at time 1780321258: ext4_read_block_bitmap_nowait:482 [ 1557.396692][ C0] EXT4-fs (loop2): last error at time 1780321258: ext4_read_block_bitmap_nowait:482 [ 1557.478974][ T1711] loop2: lost filesystem error report for type 5 error -117 [ 1557.481280][ T1711] EXT4-fs error (device loop2): ext4_clear_blocks:874: inode #11: comm syz.2.10809: attempt to clear invalid blocks 983261 len 1 [ 1557.576245][ T1711] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1557.594276][ T1711] EXT4-fs error (device loop2): __ext4_get_inode_loc:4884: comm syz.2.10809: Invalid inode table block 0 in block_group 0 [ 1557.641463][ T1711] loop2: lost filesystem error report for type 5 error -117 [ 1557.647165][ T1711] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1557.770769][ T1711] loop2: lost filesystem error report for type 5 error -117 [ 1557.771315][ T1711] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 1557.808167][ T1711] loop2: lost filesystem error report for type 5 error -117 [ 1557.812109][ T1711] EXT4-fs error (device loop2): __ext4_get_inode_loc:4884: comm syz.2.10809: Invalid inode table block 0 in block_group 0 [ 1557.963564][ T1711] loop2: lost filesystem error report for type 5 error -117 [ 1557.966967][ T1711] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1558.042272][ T1711] loop2: lost filesystem error report for type 5 error -117 [ 1558.042754][ T1711] EXT4-fs error (device loop2): ext4_truncate:4690: inode #11: comm syz.2.10809: mark_inode_dirty error [ 1558.094958][ T1711] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1558.100200][ T1711] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 1558.194688][ T1711] loop2: lost filesystem error report for type 5 error -117 [ 1558.201441][ T1711] EXT4-fs error (device loop2): __ext4_get_inode_loc:4884: comm syz.2.10809: Invalid inode table block 0 in block_group 0 [ 1558.271832][ T1711] loop2: lost filesystem error report for type 5 error -117 [ 1558.272555][ T1711] EXT4-fs (loop2): 1 truncate cleaned up [ 1558.364885][ T1711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1558.465747][ T1570] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1558.658426][ T1570] usb 6-1: Using ep0 maxpacket: 16 [ 1558.680291][ T1570] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1558.704899][ T1570] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1558.769939][ T1570] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1558.823847][ T1570] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1558.859624][ T1754] loop6: detected capacity change from 0 to 256 [ 1558.881814][ T1570] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.918412][ T1570] usb 6-1: Product: syz [ 1558.932220][ T1570] usb 6-1: Manufacturer: syz [ 1558.953791][ T1754] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x397ce3e3, utbl_chksum : 0xe619d30d) [ 1558.960486][ T1757] ubi0: attaching mtd0 [ 1558.973282][ T1464] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1558.985978][ T1570] usb 6-1: SerialNumber: syz [ 1559.073453][ T1757] ubi0 error: ubi_attach_mtd_dev: bad VID header (67043335) or data offsets (67043399) [ 1559.086297][ T1570] usb 6-1: 0:2 : does not exist [ 1559.118704][ T1754] exFAT-fs (loop6): valid_size(150994954) is greater than size(10) [ 1559.310514][ T30] audit: type=1800 audit(1780321260.683:475): pid=1754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.10825" name="file1" dev="loop6" ino=1049435 res=0 errno=0 [ 1559.780614][ T1774] loop2: detected capacity change from 0 to 512 [ 1559.802017][ T1774] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1559.824971][ T1774] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #16: comm syz.2.10833: invalid indirect mapped block 4294967295 (level 0) [ 1559.842368][ T1774] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1559.842807][ T1774] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #16: comm syz.2.10833: invalid indirect mapped block 4294967295 (level 1) [ 1559.852491][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1559.852529][ C1] EXT4-fs (loop2): initial error at time 1780321261: ext4_free_branches:1020: inode 16 [ 1559.852588][ C1] EXT4-fs (loop2): last error at time 1780321261: ext4_free_branches:1020: inode 16 [ 1559.903360][ T5779] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1559.908466][ T1774] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1559.914118][ T1774] EXT4-fs (loop2): 1 orphan inode deleted [ 1560.017889][ T1570] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 1560.026986][ T1774] EXT4-fs (loop2): 1 truncate cleaned up [ 1560.031032][ T1774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1560.066782][ T5779] usb 4-1: Using ep0 maxpacket: 8 [ 1560.074467][ T5779] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1560.088809][ T5779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.143798][ T5779] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1560.192495][ T5779] pvrusb2: ********** [ 1560.209340][ T5779] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1560.278216][ T5779] pvrusb2: Important functionality might not be entirely working. [ 1560.288203][ T5779] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1560.332602][ T5779] pvrusb2: ********** [ 1560.381756][ T2362] pvrusb2: Invalid write control endpoint [ 1560.384242][ T1774] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1560.687390][T26010] usb 4-1: USB disconnect, device number 31 [ 1560.857849][ T1464] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1560.876254][ T1570] usb 6-1: USB disconnect, device number 65 [ 1561.201729][ T2362] pvrusb2: Invalid write control endpoint [ 1561.260875][ T2362] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1561.290753][T26372] udevd[26372]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1561.363442][ T2362] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1561.401907][ T1800] loop5: detected capacity change from 0 to 512 [ 1561.423015][ T2362] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1561.490949][ T1800] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 1561.502278][ T2362] pvrusb2: Device being rendered inoperable [ 1561.541674][ T2362] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1561.580231][ T2362] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1561.664328][ T2362] pvrusb2: Attached sub-driver cx25840 [ 1561.741753][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1561.856757][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1561.880018][ T1800] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm syz.5.10840: bg 0: block 104: invalid block bitmap [ 1561.971395][ T1800] loop5: lost filesystem error report for type 5 error -117 [ 1561.975485][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1561.989344][ C0] EXT4-fs (loop5): initial error at time 1780321263: ext4_validate_block_bitmap:431 [ 1561.998976][ C0] EXT4-fs (loop5): last error at time 1780321263: ext4_validate_block_bitmap:431 [ 1562.044842][ T1800] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1562.150143][ T1800] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #11: comm syz.5.10840: invalid indirect mapped block 1 (level 1) [ 1562.178098][ T1806] loop4: detected capacity change from 0 to 4096 [ 1562.213359][ T1814] loop2: detected capacity change from 0 to 256 [ 1562.231855][ T1800] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1562.292301][ T1800] EXT4-fs (loop5): 1 truncate cleaned up [ 1562.347969][ T1814] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x397ce3e3, utbl_chksum : 0xe619d30d) [ 1562.408315][ T1800] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1562.499375][ T1814] exFAT-fs (loop2): valid_size(150994954) is greater than size(10) [ 1562.552231][ T30] audit: type=1800 audit(1780321263.923:476): pid=1814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10844" name="file1" dev="loop2" ino=1049436 res=0 errno=0 [ 1563.456960][ T5779] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1563.547187][ T1836] loop2: detected capacity change from 0 to 1024 [ 1563.550035][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1563.604771][ T1836] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c01c, mo2=0002] [ 1563.618666][ T5779] usb 5-1: Using ep0 maxpacket: 8 [ 1563.622954][ T1836] System zones: 0-1, 3-12 [ 1563.677651][ T5779] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1563.689576][ T5779] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1563.700220][ T5779] usb 5-1: Product: syz [ 1563.707237][ T5779] usb 5-1: Manufacturer: syz [ 1563.711965][ T5779] usb 5-1: SerialNumber: syz [ 1563.722183][ T5779] usb 5-1: config 0 descriptor?? [ 1563.751129][ T1836] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1563.781859][ T5779] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1563.960722][ T1464] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 1564.113018][ T1843] loop5: detected capacity change from 0 to 256 [ 1564.128459][ T1843] exfat: Deprecated parameter 'namecase' [ 1564.173560][ T1843] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x20641574, utbl_chksum : 0xe619d30d) [ 1564.430113][ T5779] input: gspca_zc3xx as /devices/platform/dummy_hcd.4/usb5/5-1/input/input79 [ 1564.662563][ T1851] Set syz1 is full, maxelem 6117 reached [ 1564.727745][ T1570] usb 5-1: USB disconnect, device number 25 [ 1565.374683][ T1864] overlayfs: upper fs does not support tmpfile. [ 1565.693337][ T1872] serio: Serial port ttyS3 [ 1565.743433][ T1874] usb usb9: usbfs: process 1874 (syz.3.10862) did not claim interface 19 before use [ 1565.850415][ T1877] loop2: detected capacity change from 0 to 64 [ 1566.600555][ T30] audit: type=1326 audit(1780321523.965:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1893 comm="syz.7.10869" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f790a39ce59 code=0x0 [ 1567.222530][ T1901] loop2: detected capacity change from 0 to 40427 [ 1567.254367][ T1901] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 1567.261747][ T1901] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1567.272089][ T1901] F2FS-fs (loop2): build fault injection rate: 2 [ 1567.278558][ T1901] F2FS-fs (loop2): build fault injection type: 0x1f8 [ 1567.290171][ T1901] F2FS-fs (loop2): invalid crc value [ 1567.384860][ T1901] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1567.405815][ T1901] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1567.412953][ T1901] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1567.633080][ T1901] F2FS-fs (loop2): inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0xfe/0x2750 [ 1568.516342][ T1923] loop4: detected capacity change from 0 to 4096 [ 1569.778333][ T1956] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10888'. [ 1569.815198][ T1956] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10888'. [ 1570.087212][ T1960] loop3: detected capacity change from 0 to 4096 [ 1570.256817][T26801] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 1570.439703][T26801] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1570.465302][T21476] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1570.470953][T26801] usb 5-1: config 0 has no interface number 0 [ 1570.501656][T26801] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1570.548777][T26801] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1570.588301][T26801] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1570.623210][T26801] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1570.656530][T21476] usb 3-1: Using ep0 maxpacket: 32 [ 1570.669759][T26801] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1570.682910][T21476] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1570.702521][T21476] usb 3-1: config 0 has no interface number 0 [ 1570.708879][T26801] usb 5-1: Product: syz [ 1570.708922][T26801] usb 5-1: SerialNumber: syz [ 1570.744414][T21476] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1570.753028][T26801] usb 5-1: config 0 descriptor?? [ 1570.797176][T21476] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1570.822559][T26801] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 1570.839056][T26801] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input80 [ 1570.855515][T21476] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1570.892246][T21476] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.953425][T21476] usb 3-1: config 0 descriptor?? [ 1571.354403][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1571.363441][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1571.373326][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1571.382683][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1571.391843][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1571.400801][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1571.409528][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1571.417107][T26801] usb 5-1: USB disconnect, device number 26 [ 1571.424828][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1571.424881][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1571.518769][T26801] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1571.647847][T21476] uclogic 0003:28BD:0094.0066: pen parameters not found [ 1571.689088][T21476] uclogic 0003:28BD:0094.0066: interface is invalid, ignoring [ 1571.779297][T21476] usb 3-1: USB disconnect, device number 36 [ 1573.382843][ T2034] loop6: detected capacity change from 0 to 1024 [ 1574.034709][ T2047] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 1574.200119][ T2052] loop6: detected capacity change from 0 to 512 [ 1574.227235][ T2052] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 1574.277171][ T2052] EXT4-fs error (device loop6): ext4_validate_block_bitmap:431: comm syz.6.10917: bg 0: block 104: invalid block bitmap [ 1574.324995][ T1122] Bluetooth: hci6: Frame reassembly failed (-84) [ 1574.428910][ T2052] fserror_report: 1 callbacks suppressed [ 1574.428945][ T2052] loop6: lost filesystem error report for type 5 error -117 [ 1574.486106][ T2052] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1574.502493][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1574.502537][ C0] EXT4-fs (loop6): initial error at time 1780321531: ext4_validate_block_bitmap:431 [ 1574.502582][ C0] EXT4-fs (loop6): last error at time 1780321531: ext4_validate_block_bitmap:431 [ 1574.644621][ T2052] loop6: lost filesystem error report for type 5 error -117 [ 1574.647875][ T2052] EXT4-fs error (device loop6): ext4_free_branches:1020: inode #11: comm syz.6.10917: invalid indirect mapped block 1 (level 1) [ 1574.741374][ T2052] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1574.807638][ T2052] EXT4-fs (loop6): 1 truncate cleaned up [ 1574.977669][ T2052] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1574.999265][ T2071] loop4: detected capacity change from 0 to 256 [ 1575.024157][ T2071] exfat: Deprecated parameter 'utf8' [ 1575.053306][ T2071] exfat: Deprecated parameter 'namecase' [ 1575.083274][ T2071] exfat: Deprecated parameter 'namecase' [ 1575.133956][ T2071] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1575.723196][T21898] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1576.087120][T15441] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1576.099635][ T2049] Bluetooth: hci6: command 0x1003 tx timeout [ 1576.652613][ T2099] loop3: detected capacity change from 0 to 512 [ 1576.758224][ T2099] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1577.546261][ T1570] usb 6-1: new low-speed USB device number 66 using dummy_hcd [ 1577.730304][ T1570] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1577.773486][ T1570] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1577.811831][ T2128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10955'. [ 1577.838422][ T1570] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1577.910396][ T1570] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1577.938713][ T1570] usb 6-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 1577.989394][ T1570] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.072966][ T1570] usb 6-1: config 0 descriptor?? [ 1578.119964][ T2117] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1578.615608][T31700] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 1578.639857][ T1570] hid_parser_main: 7 callbacks suppressed [ 1578.639892][ T1570] betop 0003:11C2:2208.0067: unknown main item tag 0x3 [ 1578.661712][ T1570] betop 0003:11C2:2208.0067: unknown main item tag 0x0 [ 1578.681052][ T1570] betop 0003:11C2:2208.0067: unknown main item tag 0x0 [ 1578.689157][ T1570] betop 0003:11C2:2208.0067: unknown main item tag 0x0 [ 1578.700995][ T1570] betop 0003:11C2:2208.0067: unknown main item tag 0x0 [ 1578.728808][ T1570] betop 0003:11C2:2208.0067: unknown main item tag 0x0 [ 1578.748344][ T1570] betop 0003:11C2:2208.0067: unknown main item tag 0x0 [ 1578.775214][ T1570] betop 0003:11C2:2208.0067: unknown main item tag 0x0 [ 1578.824953][T31700] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1578.835596][ T1570] betop 0003:11C2:2208.0067: hidraw0: USB HID v0.04 Device [HID 11c2:2208] on usb-dummy_hcd.5-1/input0 [ 1578.867017][T31700] usb 3-1: config 0 has no interface number 0 [ 1578.883605][ T1570] betop 0003:11C2:2208.0067: no inputs found [ 1578.897306][T31700] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1578.940855][ T1570] usb 6-1: USB disconnect, device number 66 [ 1578.973151][T31700] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1579.021009][T31700] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1579.064310][T31700] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1579.084305][T31700] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1579.104640][T31700] usb 3-1: Product: syz [ 1579.120915][T31700] usb 3-1: SerialNumber: syz [ 1579.161541][T31700] usb 3-1: config 0 descriptor?? [ 1579.186656][T31700] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 1579.223681][T31700] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input81 [ 1579.303810][ T2151] fido_id[2151]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1579.368294][ T2049] Bluetooth: hci6: command 0x1003 tx timeout [ 1579.386882][T15441] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1579.594904][ T2159] loop3: detected capacity change from 0 to 256 [ 1579.985543][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1579.992905][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1580.000121][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1580.009042][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1580.016279][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1580.023555][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1580.031552][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1580.041014][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1580.048394][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1580.056187][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1580.073643][ T2163] loop4: detected capacity change from 0 to 1024 [ 1580.090338][ T1570] usb 3-1: USB disconnect, device number 37 [ 1580.097848][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1580.144250][ T2163] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1580.203819][ T1570] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1580.281801][ T30] audit: type=1800 audit(1780321537.655:478): pid=2163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10953" name="file2" dev="loop4" ino=840 res=0 errno=0 [ 1580.860540][ T2179] loop3: detected capacity change from 0 to 512 [ 1580.907934][ T2179] EXT4-fs: Ignoring removed oldalloc option [ 1581.002338][ T2179] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.10960: Parent and EA inode have the same ino 15 [ 1581.105281][ T2179] loop3: lost filesystem error report for type 5 error -117 [ 1581.125126][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1581.138987][ C0] EXT4-fs (loop3): initial error at time 1780321538: ext4_xattr_inode_iget:436 [ 1581.148131][ C0] EXT4-fs (loop3): last error at time 1780321538: ext4_xattr_inode_iget:436 [ 1581.163575][ T2185] team0: Device ipvlan1 failed to register rx_handler [ 1581.184408][ T2179] EXT4-fs (loop3): 1 orphan inode deleted [ 1581.279377][ T2179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1581.412529][ T30] audit: type=1800 audit(1780321538.775:479): pid=2179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10960" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1581.664377][T23355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1582.977081][ T2222] loop2: detected capacity change from 0 to 4096 [ 1583.610529][ T2212] loop3: detected capacity change from 0 to 32768 [ 1583.670246][ T2212] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.10970 (2212) [ 1583.742506][ T2212] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1583.771940][ T2212] BTRFS info (device loop3): using crc32c checksum algorithm [ 1584.028946][ T2212] BTRFS info (device loop3): enabling ssd optimizations [ 1584.070074][ T2212] BTRFS info (device loop3): turning on async discard [ 1584.128492][ T2212] BTRFS info (device loop3): enabling free space tree [ 1584.259313][ T30] audit: type=1800 audit(1780321541.625:480): pid=2212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10970" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 1584.339053][ T2261] loop4: detected capacity change from 0 to 2048 [ 1584.372335][ T2261] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 1584.399515][T15441] block nbd3: Receive control failed (result -32) [ 1584.449506][ T2261] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1584.489948][ T2259] loop2: detected capacity change from 0 to 4096 [ 1584.539050][ T30] audit: type=1800 audit(1780321541.905:481): pid=2261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10984" name="file2" dev="loop4" ino=1416 res=0 errno=0 [ 1585.712408][T23355] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1585.866801][T26801] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1586.066665][T26801] usb 3-1: Using ep0 maxpacket: 8 [ 1586.078901][T26801] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1586.119582][T26801] usb 3-1: config 4 interface 0 has no altsetting 0 [ 1586.154356][T26801] usb 3-1: string descriptor 0 read error: -22 [ 1586.182068][T26801] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1586.220174][T26801] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1586.435014][T26801] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1586.578086][T26801] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1586.585469][ T139] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1586.668983][T26801] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1586.730328][T26801] usb 3-1: media controller created [ 1586.759591][ T2300] loop9: detected capacity change from 0 to 7 [ 1586.840468][T26801] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1586.940121][ T2300] Dev loop9: unable to read RDB block 7 [ 1586.990206][ T2300] loop9: unable to read partition table [ 1587.053154][ T2300] loop9: partition table beyond EOD, truncated [ 1587.135021][ T2300] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1587.248200][T26801] usb 3-1: USB disconnect, device number 38 [ 1588.418570][T16561] hid (null): global environment stack underflow [ 1588.709043][ T2334] loop4: detected capacity change from 0 to 8192 [ 1588.769402][ T2334] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1588.832965][T16561] hid-generic 0005:FFFF:8004.0068: global environment stack underflow [ 1588.866986][ T2351] netlink: 'syz.2.11015': attribute type 1 has an invalid length. [ 1588.901217][T16561] hid-generic 0005:FFFF:8004.0068: item 0 1 1 11 parsing failed [ 1589.097415][T16561] hid-generic 0005:FFFF:8004.0068: probe with driver hid-generic failed with error -22 [ 1589.708755][ T2370] netlink: 136 bytes leftover after parsing attributes in process `syz.4.11024'. [ 1589.747331][ T2370] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1590.022950][ T2332] loop5: detected capacity change from 0 to 32768 [ 1590.077468][ T2332] [ 1590.077468][ T2332] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1590.077468][ T2332] [ 1590.158362][ T2332] ERROR: (device loop5): diWrite: ixpxd invalid [ 1590.158362][ T2332] [ 1590.190901][ T2332] ERROR: (device loop5): txAbort: [ 1590.190901][ T2332] [ 1590.249324][ T2332] [ 1590.249324][ T2332] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1590.249324][ T2332] [ 1590.288586][ T2332] [ 1590.288586][ T2332] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1590.288586][ T2332] [ 1590.382822][ T2332] ERROR: (device loop5): diWrite: ixpxd invalid [ 1590.382822][ T2332] [ 1590.440108][ T2332] ERROR: (device loop5): txAbort: [ 1590.440108][ T2332] [ 1590.644573][ T5629] ERROR: (device loop5): diFree: wmap shows inode already free [ 1590.644573][ T5629] [ 1590.687302][ T2387] loop6: detected capacity change from 0 to 256 [ 1590.722980][ T5629] [ 1590.722980][ T5629] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1590.722980][ T5629] [ 1590.738022][ T2387] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1590.782457][ T5629] [ 1590.782457][ T5629] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1590.782457][ T5629] [ 1590.831410][ T30] audit: type=1800 audit(1780321548.205:482): pid=2387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.11032" name="file1" dev="loop6" ino=1049462 res=0 errno=0 [ 1590.853176][ T2387] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779264) [ 1590.853269][ T2387] FAT-fs (loop6): Filesystem has been set read-only [ 1590.952622][ T2387] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16777226) [ 1591.352224][ T2400] loop4: detected capacity change from 0 to 64 [ 1591.493618][ T2400] hfs: request for non-existent node 131072 in B*Tree [ 1591.546860][ T2408] loop3: detected capacity change from 0 to 512 [ 1591.563100][ T2400] hfs: request for non-existent node 131072 in B*Tree [ 1591.585061][ T2408] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1591.661957][ T2408] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.11043: bad orphan inode 131083 [ 1591.677847][ T2408] loop3: lost filesystem error report for type 5 error -117 [ 1591.692738][ T2408] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1592.050931][ T2422] loop2: detected capacity change from 0 to 64 [ 1592.370055][T23355] syz_tun (unregistering): left allmulticast mode [ 1592.393312][T23355] syz_tun (unregistering): left promiscuous mode [ 1592.407090][ T2432] loop5: detected capacity change from 0 to 512 [ 1592.422118][T23355] bridge0: port 3(syz_tun) entered disabled state [ 1592.510466][ T2432] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1592.527601][ T2432] ext4 filesystem being mounted at /1921/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1592.686791][T23355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1592.878659][ T2440] bond0: entered promiscuous mode [ 1592.901566][ T2440] bond_slave_0: entered promiscuous mode [ 1592.931002][ T2440] bond_slave_1: entered promiscuous mode [ 1592.949568][ T2440] batadv0: entered promiscuous mode [ 1592.973448][ T2440] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1592.988051][ T2440] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1593.007912][ T2440] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1593.106847][ T2435] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1593.173145][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1594.124495][ T2475] loop2: detected capacity change from 0 to 256 [ 1594.603158][ T2049] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1594.634225][ T2049] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1594.646493][ T2049] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1594.663692][ T2049] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1594.673293][ T2049] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1596.011662][ T2521] loop2: detected capacity change from 0 to 256 [ 1596.068489][ T2521] FAT-fs (loop2): Directory bread(block 1285) failed [ 1596.118038][ T2521] FAT-fs (loop2): Directory bread(block 1286) failed [ 1596.164853][ T2521] FAT-fs (loop2): Directory bread(block 1287) failed [ 1596.192844][ T2521] FAT-fs (loop2): Directory bread(block 1288) failed [ 1596.224486][ T2521] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 1596.807710][T15441] Bluetooth: hci1: command tx timeout [ 1597.668130][ T2537] loop6: detected capacity change from 0 to 32768 [ 1597.754546][ T2537] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1597.783838][ T2568] loop5: detected capacity change from 0 to 256 [ 1597.978989][ T2568] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1598.096270][ T2568] exFAT-fs (loop5): start_clu is invalid cluster(0xffffffff) [ 1598.699497][T21898] ocfs2: Unmounting device (7,6) on (node local) [ 1598.890103][T15441] Bluetooth: hci1: command tx timeout [ 1599.299451][ T2579] overlayfs: statfs failed on './file0' [ 1599.591617][ T2586] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11085'. [ 1600.261795][ T2600] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11090'. [ 1600.476168][ T2485] lo speed is unknown, defaulting to 1000 [ 1600.530221][ T2608] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11091'. [ 1600.580276][ T2608] netlink: 31 bytes leftover after parsing attributes in process `syz.4.11091'. [ 1600.660629][ T2608] netlink: 'syz.4.11091': attribute type 6 has an invalid length. [ 1600.733769][ T2608] netlink: 'syz.4.11091': attribute type 5 has an invalid length. [ 1600.812606][ T2615] loop5: detected capacity change from 0 to 16 [ 1600.932978][ T2615] erofs (device loop5): mounted with root inode @ nid 36. [ 1600.967654][T15441] Bluetooth: hci1: command tx timeout [ 1601.092716][ T2615] erofs (device loop5): bogus lookback distance 1 @ lcn 0 of nid 89 [ 1601.170844][ T2615] erofs (device loop5): readahead error at folio 0 @ nid 89 [ 1601.237845][ T2615] syz.5.11094: attempt to access beyond end of device [ 1601.237845][ T2615] loop5: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1601.340491][ T2615] erofs (device loop5): bogus lookback distance 1 @ lcn 0 of nid 89 [ 1601.545248][ T2615] erofs (device loop5): read error -117 @ 0 of nid 89 [ 1601.661739][ T30] audit: type=1800 audit(1780321559.035:483): pid=2615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.11094" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 1602.342228][ T2648] netlink: 'syz.6.11102': attribute type 10 has an invalid length. [ 1603.001073][ T2665] loop5: detected capacity change from 0 to 1024 [ 1603.011026][ T2661] loop4: detected capacity change from 0 to 4096 [ 1603.038035][ T2661] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1603.047629][T15441] Bluetooth: hci1: command tx timeout [ 1603.082085][ T2648] syz_tun: entered promiscuous mode [ 1603.091167][ T2665] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1603.167963][ T2648] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1603.252825][ T2661] ntfs3(loop4): ino=19, mi_enum_attr [ 1603.313415][ T2661] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1603.472235][ T2661] ntfs3(loop4): failed to convert "c46c" to cp861 [ 1603.518252][ T2661] ntfs3(loop4): ino=20, mi_enum_attr [ 1604.120778][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1604.990550][ T139] bridge_slave_1: left promiscuous mode [ 1605.023120][ T139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1605.336399][T31700] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1605.585596][T31700] usb 5-1: Using ep0 maxpacket: 8 [ 1605.593785][T31700] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1605.638338][T31700] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1605.680957][T31700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1605.716423][T31700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1605.752743][T31700] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1605.807058][T31700] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1605.828361][T31700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1605.857351][T31700] usb 5-1: Product: syz [ 1605.868965][T31700] usb 5-1: Manufacturer: syz [ 1605.875709][T31700] usb 5-1: SerialNumber: syz [ 1605.905777][T31700] usb 5-1: config 0 descriptor?? [ 1605.975456][ T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1606.008211][ T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1606.040655][ T139] bond0 (unregistering): Released all slaves [ 1606.087616][ T2485] bridge0: port 1(bridge_slave_0) entered blocking state [ 1606.116696][ T2485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1606.147601][T31700] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1606.148624][ T2485] bridge_slave_0: entered allmulticast mode [ 1606.171582][T31700] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1606.240111][ T2485] bridge_slave_0: entered promiscuous mode [ 1606.270431][ T2485] bridge0: port 2(bridge_slave_1) entered blocking state [ 1606.294729][ T2485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1606.304251][ T2485] bridge_slave_1: entered allmulticast mode [ 1606.353427][T31700] radio-si470x 5-1:0.0: software version 0, hardware version 24 [ 1606.375297][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.379487][ T2485] bridge_slave_1: entered promiscuous mode [ 1606.382056][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1606.414859][T31700] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1606.445806][ T2728] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1606.547944][ T2485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1606.582013][T31700] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1606.630158][T31700] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 1606.661328][ T2485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1606.717101][T31700] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1606.756250][T31700] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 1606.863669][T31700] usb 5-1: USB disconnect, device number 27 [ 1606.919667][ T2485] team0: Port device team_slave_0 added [ 1606.980971][ T2485] team0: Port device team_slave_1 added [ 1607.095267][ T1570] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1607.256668][ T2485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1607.274160][ T2485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1607.346087][ T1570] usb 3-1: Using ep0 maxpacket: 8 [ 1607.366047][ T1570] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1607.382016][ T2485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1607.407201][ T1570] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.441109][ T2485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1607.485337][ T2485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1607.518639][ T1570] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1607.563468][ T1570] pvrusb2: ********** [ 1607.582708][ T1570] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1607.631699][ T1570] pvrusb2: Important functionality might not be entirely working. [ 1607.668669][ T2485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1607.735159][ T1570] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1607.795214][ T1570] pvrusb2: ********** [ 1607.872532][ T2362] pvrusb2: Invalid write control endpoint [ 1608.043869][T26801] usb 3-1: USB disconnect, device number 39 [ 1608.323732][ T2362] pvrusb2: Invalid write control endpoint [ 1608.377237][ T2362] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1608.415015][ T2362] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1608.424350][ T2362] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1608.441196][ T2362] pvrusb2: Device being rendered inoperable [ 1608.447820][ T2362] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1608.477081][ T2362] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1608.508451][ T2362] pvrusb2: Attached sub-driver cx25840 [ 1608.521664][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1608.535415][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1609.882768][ T2485] hsr_slave_0: entered promiscuous mode [ 1609.941992][ T2485] hsr_slave_1: entered promiscuous mode [ 1609.982109][ T2485] debugfs: 'hsr0' already exists in 'hsr' [ 1610.028871][ T2485] Cannot create hsr debugfs directory [ 1610.092635][ T5289] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1611.108404][ T139] hsr_slave_0: left promiscuous mode [ 1611.161044][ T139] hsr_slave_1: left promiscuous mode [ 1611.205555][ T139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1611.272209][ T139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1611.732531][ T2836] netlink: 'syz.2.11152': attribute type 10 has an invalid length. [ 1612.936384][ T139] team0 (unregistering): Port device team_slave_1 removed [ 1613.033128][ T139] team0 (unregistering): Port device team_slave_0 removed [ 1613.587120][ T2836] syz_tun: entered promiscuous mode [ 1613.628115][ T2836] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1614.062033][ T2887] loop5: detected capacity change from 0 to 256 [ 1614.121723][ T2887] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d) [ 1614.479344][ T2890] netlink: 'syz.5.11164': attribute type 1 has an invalid length. [ 1614.507426][ T2890] netlink: 88 bytes leftover after parsing attributes in process `syz.5.11164'. [ 1615.038153][ T5289] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1615.362474][ T2902] loop4: detected capacity change from 0 to 256 [ 1615.423923][ T2902] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1615.656142][ T2907] loop5: detected capacity change from 0 to 1024 [ 1616.423872][ T2923] loop6: detected capacity change from 0 to 512 [ 1616.540121][ T2923] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.11176: iget: bogus i_mode (16) [ 1616.732377][ T2923] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1616.734884][ T2923] EXT4-fs (loop6): Remounting filesystem read-only [ 1616.744154][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1616.744193][ C1] EXT4-fs (loop6): initial error at time 1780321574: ext4_orphan_get:1397: inode 15 [ 1616.744248][ C1] EXT4-fs (loop6): last error at time 1780321574: ext4_orphan_get:1397: inode 15 [ 1616.967998][ T2923] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1617.480986][T21898] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1617.917666][T21162] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1618.393959][ T2961] loop6: detected capacity change from 0 to 512 [ 1618.432203][ T2961] EXT4-fs: Ignoring removed orlov option [ 1618.480351][ T2961] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 1618.548913][ T2946] netlink: 56 bytes leftover after parsing attributes in process `syz.4.11183'. [ 1618.572111][ T2961] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 1618.583104][ T2961] EXT4-fs error (device loop6): ext4_iget_extra_inode:5127: inode #15: comm syz.6.11187: corrupted in-inode xattr: e_value size too large [ 1618.599470][ T2961] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1618.605116][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1618.621035][ C1] EXT4-fs (loop6): initial error at time 1780321575: ext4_iget_extra_inode:5127: inode 15 [ 1618.634428][ C1] EXT4-fs (loop6): last error at time 1780321575: ext4_iget_extra_inode:5127: inode 15 [ 1618.653906][ T2961] EXT4-fs error (device loop6): ext4_orphan_get:1400: comm syz.6.11187: couldn't read orphan inode 15 (err -117) [ 1618.672017][ T2961] loop6: lost filesystem error report for type 5 error -117 [ 1618.674643][ T2961] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1618.948948][ T5289] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1619.468949][T21898] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1619.794626][ T2984] ip6erspan0: entered allmulticast mode [ 1621.642101][ T3022] binder: 3019:3022 ioctl c0306201 200000000080 returned -14 [ 1621.696835][ T3022] binder: 3019:3022 ioctl c0306201 2000000003c0 returned -14 [ 1621.824487][ T2994] loop4: detected capacity change from 0 to 40427 [ 1621.857855][ T2994] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 1621.907558][ T2994] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1621.941694][ T5289] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1621.949231][ T2994] F2FS-fs (loop4): Image doesn't support compression [ 1621.991404][ T2994] F2FS-fs (loop4): invalid crc value [ 1622.070286][ T2994] F2FS-fs (loop4): Wrong journal entry on segno 255 [ 1622.134916][ T2994] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 1623.478287][ T3064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1623.545146][ T3058] evm: overlay not supported [ 1625.941281][ T3117] loop4: detected capacity change from 0 to 512 [ 1625.964723][ T3117] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1626.070645][ T3117] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1626.216961][ T3117] ext4 filesystem being mounted at /798/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1626.407341][ T3114] lo speed is unknown, defaulting to 1000 [ 1626.527668][ T2485] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1626.568622][ T2485] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1626.579430][ T2485] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1626.658444][ T2485] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1626.946721][T31700] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1626.955311][T21955] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1627.033519][ T2485] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1627.066618][T21955] EXT4-fs (loop4): Remounting filesystem read-only [ 1627.090973][ T2485] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1627.116651][ T2485] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1627.154936][ T2485] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1627.165242][T31700] usb 3-1: Using ep0 maxpacket: 16 [ 1627.180126][T31700] usb 3-1: config index 0 descriptor too short (expected 52, got 36) [ 1627.213904][T31700] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 1627.254127][T31700] usb 3-1: config 0 has no interface number 0 [ 1627.289960][T31700] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1627.318744][T31700] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1627.350431][T31700] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1627.360445][T31700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.379744][T31700] usb 3-1: Product: syz [ 1627.401720][T31700] usb 3-1: Manufacturer: syz [ 1627.426601][T31700] usb 3-1: SerialNumber: syz [ 1627.460614][T31700] usb 3-1: config 0 descriptor?? [ 1627.518754][ T3129] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1627.548328][ T3129] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1627.813883][ T3129] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1627.823483][ T3129] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1627.971911][T21955] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1628.364562][ T2485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1628.469033][T31700] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1628.499664][T31700] asix 3-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1628.515771][ T2485] 8021q: adding VLAN 0 to HW filter on device team0 [ 1628.541201][T31700] asix 3-1:0.251: probe with driver asix failed with error -71 [ 1628.576151][T31700] usb 3-1: USB disconnect, device number 40 [ 1628.780432][T21162] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.870478][T11110] bridge0: port 1(bridge_slave_0) entered blocking state [ 1628.877712][T11110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1628.927194][T11110] bridge0: port 2(bridge_slave_1) entered blocking state [ 1628.934401][T11110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1629.199423][T21162] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1629.573478][ T3173] netlink: 'syz.6.11246': attribute type 2 has an invalid length. [ 1629.620733][ T3173] netlink: 'syz.6.11246': attribute type 2 has an invalid length. [ 1629.889878][T21162] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1629.911929][ T2049] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1629.950543][ T2049] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1629.964816][ T2049] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1629.983870][ T2049] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1629.991960][ T2049] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1630.243842][T21162] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1630.352387][ T3197] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.11252'. [ 1630.441868][ T3191] loop5: detected capacity change from 0 to 2048 [ 1630.693947][ T3191] loop5: p3 < > p4 < > [ 1630.712399][ T3191] loop5: partition table partially beyond EOD, truncated [ 1630.762527][ T3191] loop5: p3 start 4284289 is beyond EOD, truncated [ 1630.948460][ T3223] input: syz1 as /devices/virtual/input/input82 [ 1632.090525][T15441] Bluetooth: hci2: command tx timeout [ 1632.289359][T21162] bridge_slave_1: left allmulticast mode [ 1632.312593][T21162] bridge_slave_1: left promiscuous mode [ 1632.352209][T21162] bridge0: port 2(bridge_slave_1) entered disabled state [ 1632.447521][ T2250] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1632.464497][T21162] bridge_slave_0: left allmulticast mode [ 1632.484738][T21162] bridge0: port 1(bridge_slave_0) entered disabled state [ 1632.651731][ T2250] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1632.704137][ T2250] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1632.761057][ T2250] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 1632.803692][ T2250] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1632.841783][ T2250] usb 3-1: Product: syz [ 1632.863333][ T2250] usb 3-1: Manufacturer: syz [ 1632.883976][ T2250] usb 3-1: SerialNumber: syz [ 1633.224976][ T3256] netlink: 27 bytes leftover after parsing attributes in process `syz.2.11262'. [ 1633.676972][ T2485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1633.734684][ T2250] usb 3-1: 0:1 : does not exist [ 1634.024401][ T2250] usb 3-1: USB disconnect, device number 41 [ 1634.163005][ T3285] loop6: detected capacity change from 0 to 64 [ 1634.171434][T15441] Bluetooth: hci2: command tx timeout [ 1634.211220][ T5871] udevd[5871]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 1634.259904][ T5871] udevd[5871]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 1634.372811][T26372] udevd[26372]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1634.658608][ T3181] lo speed is unknown, defaulting to 1000 [ 1635.090589][T21162] IPVS: stopping master sync thread 31744 ... [ 1635.291840][ T3299] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11271'. [ 1636.248102][T15441] Bluetooth: hci2: command tx timeout [ 1636.429803][T21162] batadv0: left promiscuous mode [ 1636.454534][T21162] dummy0: left promiscuous mode [ 1636.508374][T21162] hsr_slave_0: left promiscuous mode [ 1636.530071][T21162] hsr_slave_1: left promiscuous mode [ 1636.538411][T21162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1636.541894][ T3321] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1636.560256][T21162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1636.588348][T21162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1636.611402][T21162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1636.687829][T21162] veth1_macvtap: left promiscuous mode [ 1636.698223][T21162] veth0_macvtap: left promiscuous mode [ 1636.714259][T21162] veth1_vlan: left promiscuous mode [ 1636.739069][T21162] veth0_vlan: left promiscuous mode [ 1636.838894][ T30] audit: type=1326 audit(1780321594.215:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3324 comm="syz.7.11277" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790a39ce59 code=0x7ffc0000 [ 1636.943626][ T30] audit: type=1326 audit(1780321594.255:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3324 comm="syz.7.11277" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790a39ce59 code=0x7ffc0000 [ 1637.041569][ T30] audit: type=1326 audit(1780321594.255:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3324 comm="syz.7.11277" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790a39ce59 code=0x7ffc0000 [ 1637.111286][ T30] audit: type=1326 audit(1780321594.255:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3324 comm="syz.7.11277" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f790a39ce59 code=0x7ffc0000 [ 1637.139812][ T30] audit: type=1326 audit(1780321594.255:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3324 comm="syz.7.11277" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790a39ce59 code=0x7ffc0000 [ 1637.172459][ T30] audit: type=1326 audit(1780321594.255:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3324 comm="syz.7.11277" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790a39ce59 code=0x7ffc0000 [ 1637.232390][ T30] audit: type=1326 audit(1780321594.255:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3324 comm="syz.7.11277" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790a39ce59 code=0x7ffc0000 [ 1637.262201][T21270] kworker/u8:3: attempt to access beyond end of device [ 1637.262201][T21270] loop6: rw=1, sector=161, nr_sectors = 1 limit=64 [ 1637.276064][ T30] audit: type=1326 audit(1780321594.255:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3324 comm="syz.7.11277" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790a39ce59 code=0x7ffc0000 [ 1637.276149][ T30] audit: type=1326 audit(1780321594.255:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3324 comm="syz.7.11277" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f790a39ce59 code=0x7ffc0000 [ 1637.276226][ T30] audit: type=1326 audit(1780321594.255:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3324 comm="syz.7.11277" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790a39ce59 code=0x7ffc0000 [ 1637.360887][T21270] Buffer I/O error on dev loop6, logical block 161, lost async page write [ 1637.372679][T21270] kworker/u8:3: attempt to access beyond end of device [ 1637.372679][T21270] loop6: rw=1, sector=162, nr_sectors = 1 limit=64 [ 1637.388191][T21270] Buffer I/O error on dev loop6, logical block 162, lost async page write [ 1637.413475][T21270] kworker/u8:3: attempt to access beyond end of device [ 1637.413475][T21270] loop6: rw=1, sector=163, nr_sectors = 1 limit=64 [ 1637.443375][T21270] Buffer I/O error on dev loop6, logical block 163, lost async page write [ 1637.479117][T21270] kworker/u8:3: attempt to access beyond end of device [ 1637.479117][T21270] loop6: rw=1, sector=167, nr_sectors = 1 limit=64 [ 1637.521697][T21270] Buffer I/O error on dev loop6, logical block 167, lost async page write [ 1637.533010][T21270] kworker/u8:3: attempt to access beyond end of device [ 1637.533010][T21270] loop6: rw=1, sector=169, nr_sectors = 1 limit=64 [ 1637.552793][T21270] Buffer I/O error on dev loop6, logical block 169, lost async page write [ 1637.563749][T21270] kworker/u8:3: attempt to access beyond end of device [ 1637.563749][T21270] loop6: rw=1, sector=171, nr_sectors = 1 limit=64 [ 1637.603768][T21270] Buffer I/O error on dev loop6, logical block 171, lost async page write [ 1637.619537][T21270] kworker/u8:3: attempt to access beyond end of device [ 1637.619537][T21270] loop6: rw=1, sector=172, nr_sectors = 1 limit=64 [ 1637.675141][T21270] Buffer I/O error on dev loop6, logical block 172, lost async page write [ 1637.691686][T21270] kworker/u8:3: attempt to access beyond end of device [ 1637.691686][T21270] loop6: rw=1, sector=173, nr_sectors = 1 limit=64 [ 1637.733939][T21270] Buffer I/O error on dev loop6, logical block 173, lost async page write [ 1637.758129][T21270] kworker/u8:3: attempt to access beyond end of device [ 1637.758129][T21270] loop6: rw=1, sector=174, nr_sectors = 1 limit=64 [ 1637.788661][T21270] Buffer I/O error on dev loop6, logical block 174, lost async page write [ 1637.803562][T21270] kworker/u8:3: attempt to access beyond end of device [ 1637.803562][T21270] loop6: rw=1, sector=175, nr_sectors = 1 limit=64 [ 1637.817827][T21270] Buffer I/O error on dev loop6, logical block 175, lost async page write [ 1638.341260][T15441] Bluetooth: hci2: command tx timeout [ 1639.083727][ T3181] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.106415][ T3181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.162678][ T3181] bridge_slave_0: entered allmulticast mode [ 1639.182118][ T3181] bridge_slave_0: entered promiscuous mode [ 1639.199629][ T2485] veth0_vlan: entered promiscuous mode [ 1639.238944][ T3181] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.251614][ T3181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.270813][ T3181] bridge_slave_1: entered allmulticast mode [ 1639.345685][ T3181] bridge_slave_1: entered promiscuous mode [ 1639.510351][ T2485] veth1_vlan: entered promiscuous mode [ 1639.542437][ T3376] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11293'. [ 1639.632834][T21162] IPVS: stop unused estimator thread 0... [ 1639.653067][ T3181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1639.701613][ T3181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1640.062227][ T3390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11298'. [ 1640.074016][ T3181] team0: Port device team_slave_0 added [ 1640.098951][ T3390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11298'. [ 1640.116711][ T3390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11298'. [ 1640.134607][ T3181] team0: Port device team_slave_1 added [ 1640.149165][ T3390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11298'. [ 1640.270360][ T3181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1640.308577][ T3181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1640.384534][ T3181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1640.419816][ T3181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1640.436733][ T3181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1640.482841][ T3181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1640.537900][ T2485] veth0_macvtap: entered promiscuous mode [ 1640.605365][ T1570] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1640.641862][ T2485] veth1_macvtap: entered promiscuous mode [ 1640.697610][ T3181] hsr_slave_0: entered promiscuous mode [ 1640.720294][ T3181] hsr_slave_1: entered promiscuous mode [ 1640.755514][ T3181] debugfs: 'hsr0' already exists in 'hsr' [ 1640.776190][ T1570] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1640.795186][ T3181] Cannot create hsr debugfs directory [ 1640.800669][ T1570] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.846300][ T1570] usb 6-1: config 0 descriptor?? [ 1641.040968][ T2485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1641.208360][ T2485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1641.354620][T21162] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.386818][T21162] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.532493][T21162] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.553138][T21162] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.573364][ T1570] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1641.670740][ T1570] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1641.728045][ T1570] [drm] Initialized udl on minor 2 [ 1641.974918][ T1570] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 1642.177299][ T1570] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1642.202208][T21270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1642.250073][T21270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1642.291586][T21451] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1642.309486][ T1570] usb 6-1: USB disconnect, device number 67 [ 1642.415007][T21451] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1642.497762][T21272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1642.543630][T21272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1643.493347][ T3429] netlink: 512 bytes leftover after parsing attributes in process `syz.8.11056'. [ 1643.661867][ T5779] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1643.881208][ T5779] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1643.912128][ T5779] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1643.952462][ T5779] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1643.966626][ T3181] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1643.996660][ T5779] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.013488][ T3181] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1644.033061][ T5779] usb 6-1: config 0 descriptor?? [ 1644.061037][ T3181] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1644.077588][T26010] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1644.133545][ T3181] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1644.153398][ T3181] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1644.177844][ T3181] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1644.253758][ T3181] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1644.271388][T26010] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1644.302188][T26010] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1644.352138][T26010] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1644.378552][ T3181] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1644.414382][T26010] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1644.448291][T26010] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.496897][ T5779] cp2112 0003:10C4:EA90.0069: item fetching failed at offset 5/7 [ 1644.508865][T26010] usb 9-1: config 0 descriptor?? [ 1644.541853][ T5779] cp2112 0003:10C4:EA90.0069: parse failed [ 1644.583773][ T5779] cp2112 0003:10C4:EA90.0069: probe with driver cp2112 failed with error -22 [ 1644.780688][ T2250] usb 6-1: USB disconnect, device number 68 [ 1645.000856][T26010] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x4 [ 1645.005019][ T3181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1645.066719][T26010] plantronics 0003:047F:FFFF.006A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1645.168907][ T3181] 8021q: adding VLAN 0 to HW filter on device team0 [ 1645.225088][T21272] bridge0: port 1(bridge_slave_0) entered blocking state [ 1645.232304][T21272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1645.392869][T21272] bridge0: port 2(bridge_slave_1) entered blocking state [ 1645.400168][T21272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1645.619623][T21451] usb 9-1: USB disconnect, device number 3 [ 1646.448857][ T5779] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 1646.541742][ T3510] loop8: detected capacity change from 0 to 64 [ 1646.672329][ T5779] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1646.696652][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1646.696680][ T30] audit: type=1800 audit(1780321604.065:498): pid=3510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.11327" name="file1" dev="loop8" ino=22 res=0 errno=0 [ 1646.710642][ T5779] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1646.788078][ T5779] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1646.812444][ T5779] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1646.839791][ T5779] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1646.869472][ T5779] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1646.913038][ T5779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.939599][ T5779] usb 3-1: Product: syz [ 1646.960553][ T5779] usb 3-1: Manufacturer: syz [ 1646.980226][ T5779] usb 3-1: SerialNumber: syz [ 1647.022154][ T5779] usb 3-1: config 0 descriptor?? [ 1647.071448][ T5779] xbox_remote_probe: endpoint_in message size==0? [ 1647.404730][ T2485] hfs: node 4:3 still has 1 user(s)! [ 1647.464518][ T1570] usb 3-1: USB disconnect, device number 42 [ 1647.612928][ T3526] input: syz1 as /devices/virtual/input/input83 [ 1647.632870][ T3526] input: failed to attach handler leds to device input83, error: -6 [ 1647.684660][ T3531] loop5: detected capacity change from 0 to 512 [ 1647.901123][ T3531] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1647.968801][ T3531] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1648.034191][ T3531] Quota error (device loop5): v2_read_file_info: Can't read info structure [ 1648.072055][ T3533] loop6: detected capacity change from 0 to 32768 [ 1648.103100][ T3533] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.11333 (3533) [ 1648.117239][ T3531] EXT4-fs warning (device loop5): ext4_enable_quotas:7265: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 1648.117408][ T3531] EXT4-fs (loop5): Cannot turn on quotas: error -5 [ 1648.158978][ T3533] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1648.171180][ T3533] BTRFS info (device loop6): using crc32c checksum algorithm [ 1648.192333][ T3531] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.11331: bg 0: block 64: padding at end of block bitmap is not set [ 1648.350528][ T3531] loop5: lost filesystem error report for type 5 error -117 [ 1648.353628][ T3531] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1648.361145][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1648.361186][ C1] EXT4-fs (loop5): initial error at time 1780321605: ext4_validate_block_bitmap:440 [ 1648.361233][ C1] EXT4-fs (loop5): last error at time 1780321605: ext4_validate_block_bitmap:440 [ 1648.452764][ T3531] loop5: lost filesystem error report for type 5 error -117 [ 1648.460630][ T3531] EXT4-fs (loop5): 1 truncate cleaned up [ 1648.479492][ T3533] BTRFS info (device loop6): enabling ssd optimizations [ 1648.500050][ T3533] BTRFS info (device loop6): turning on flush-on-commit [ 1648.508759][ T3533] BTRFS info (device loop6): enabling free space tree [ 1648.517060][ T3533] BTRFS info (device loop6): enabling auto defrag [ 1648.519630][ T3531] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1648.523508][ T3533] BTRFS info (device loop6): use lzo compression, level 1 [ 1648.547042][ T3533] BTRFS info (device loop6): max_inline set to 4096 [ 1649.146368][ T3567] input: syz1 as /devices/virtual/input/input84 [ 1649.151988][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1649.154413][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1649.257172][ T3181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1649.308064][T21898] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1649.581896][ T3572] loop5: detected capacity change from 0 to 512 [ 1649.612503][ T3181] veth0_vlan: entered promiscuous mode [ 1649.641126][ T3181] veth1_vlan: entered promiscuous mode [ 1649.788865][ T3181] veth0_macvtap: entered promiscuous mode [ 1649.830449][ T3572] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1649.857676][ T3572] ext4 filesystem being mounted at /1988/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1649.902659][ T3181] veth1_macvtap: entered promiscuous mode [ 1650.190038][ T3181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1650.443672][ T3181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1650.679502][T11110] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.718137][ T3583] sctp: [Deprecated]: syz.6.11338 (pid 3583) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1650.718137][ T3583] Use struct sctp_sack_info instead [ 1650.791840][T11110] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.824513][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1651.010061][T11110] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.077537][T11110] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.170990][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1652.249403][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1652.417056][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1652.470837][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1653.171578][ T3618] syzkaller1: entered promiscuous mode [ 1653.200745][ T3618] syzkaller1: entered allmulticast mode [ 1654.598149][ T3662] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11366'. [ 1655.210482][ T3678] netlink: 264 bytes leftover after parsing attributes in process `syz.8.11372'. [ 1655.249100][ T3678] netlink: 264 bytes leftover after parsing attributes in process `syz.8.11372'. [ 1655.918821][ T3696] loop0: detected capacity change from 0 to 1024 [ 1656.038509][ T3701] loop6: detected capacity change from 0 to 256 [ 1656.633285][ T3714] vivid-003: ================= START STATUS ================= [ 1656.684401][ T3714] vivid-003: Radio HW Seek Mode: Bounded [ 1656.705232][ T3714] vivid-003: Radio Programmable HW Seek: false [ 1656.777034][ T3714] vivid-003: RDS Rx I/O Mode: Block I/O [ 1656.809328][ T3714] vivid-003: Generate RBDS Instead of RDS: false [ 1656.862464][ T3714] vivid-003: RDS Reception: true [ 1656.978487][ T3714] vivid-003: RDS Program Type: 0 inactive [ 1657.063098][ T3714] vivid-003: RDS PS Name: inactive [ 1657.114239][ T3714] vivid-003: RDS Radio Text: inactive [ 1657.129381][ T3716] loop5: detected capacity change from 0 to 40427 [ 1657.152170][ T3716] F2FS-fs (loop5): invalid crc value [ 1657.170474][ T3714] vivid-003: RDS Traffic Announcement: false inactive [ 1657.177817][ T3714] vivid-003: RDS Traffic Program: false inactive [ 1657.184730][ T3714] vivid-003: RDS Music: false inactive [ 1657.270687][ T3716] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1657.297197][ T3714] vivid-003: ================== END STATUS ================== [ 1657.312000][ T3716] F2FS-fs (loop5): Start checkpoint disabled! [ 1657.355486][ T3716] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 1657.364506][ T3716] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1657.723070][ T3730] binder: 3727:3730 ioctl c0306201 2000000003c0 returned -14 [ 1657.781393][T21162] bio_check_eod: 97 callbacks suppressed [ 1657.781422][T21162] kworker/u8:2: attempt to access beyond end of device [ 1657.781422][T21162] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1658.024626][T21162] CPU: 1 UID: 0 PID: 21162 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1658.024689][T21162] Tainted: [L]=SOFTLOCKUP [ 1658.024704][T21162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1658.024731][T21162] Workqueue: writeback wb_workfn (flush-7:5) [ 1658.024806][T21162] Call Trace: [ 1658.024820][T21162] [ 1658.024835][T21162] dump_stack_lvl+0x100/0x190 [ 1658.024879][T21162] f2fs_stop_checkpoint+0x600/0x9b0 [ 1658.024924][T21162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1658.024973][T21162] ? errseq_set+0xe3/0x150 [ 1658.025043][T21162] ? errseq_set+0xe3/0x150 [ 1658.025099][T21162] f2fs_write_end_io+0xf59/0x1340 [ 1658.025149][T21162] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1658.025201][T21162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1658.025257][T21162] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1658.025302][T21162] bio_endio+0x78f/0x8f0 [ 1658.025350][T21162] submit_bio_noacct+0x64c/0x2000 [ 1658.025421][T21162] f2fs_submit_write_bio+0x135/0x340 [ 1658.025467][T21162] __submit_merged_bio+0x331/0x780 [ 1658.025521][T21162] __submit_merged_write_cond+0x3fe/0x510 [ 1658.025578][T21162] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1658.025638][T21162] ? __pfx___might_resched+0x10/0x10 [ 1658.025689][T21162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1658.025746][T21162] f2fs_write_cache_pages+0x20e9/0x2630 [ 1658.025822][T21162] ? lockdep_hardirqs_on+0x78/0x100 [ 1658.025881][T21162] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1658.025940][T21162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1658.025992][T21162] ? kfree+0x223/0x6c0 [ 1658.026040][T21162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1658.026087][T21162] ? ieee80211_inform_bss+0x8da/0x1150 [ 1658.026149][T21162] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 1658.026190][T21162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1658.026306][T21162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1658.026353][T21162] ? rcu_is_watching+0x12/0xc0 [ 1658.026414][T21162] f2fs_write_data_pages+0x799/0x16d0 [ 1658.026468][T21162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1658.026529][T21162] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1658.026600][T21162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1658.026647][T21162] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1658.026706][T21162] do_writepages+0x278/0x600 [ 1658.026774][T21162] ? __pfx_do_writepages+0x10/0x10 [ 1658.026839][T21162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1658.026894][T21162] __writeback_single_inode+0x164/0x1350 [ 1658.026954][T21162] ? find_held_lock+0x2b/0x80 [ 1658.027023][T21162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1658.027073][T21162] ? __pfx___writeback_single_inode+0x10/0x10 [ 1658.027134][T21162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1658.027179][T21162] ? do_raw_spin_unlock+0x145/0x1e0 [ 1658.027232][T21162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1658.027285][T21162] writeback_sb_inodes+0x766/0x1c60 [ 1658.027365][T21162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1658.027413][T21162] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1658.027472][T21162] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1658.027526][T21162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1658.027633][T21162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1658.027680][T21162] ? rcu_is_watching+0x12/0xc0 [ 1658.027731][T21162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1658.027777][T21162] ? queue_io+0x287/0x540 [ 1658.027832][T21162] wb_writeback+0x1bf/0xb90 [ 1658.027906][T21162] ? __pfx_wb_writeback+0x10/0x10 [ 1658.027978][T21162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1658.028034][T21162] ? mark_held_locks+0x40/0x70 [ 1658.028077][T21162] ? _raw_spin_unlock_irq+0x23/0x50 [ 1658.028135][T21162] wb_workfn+0x14f/0xc00 [ 1658.028201][T21162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1658.028248][T21162] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1658.028304][T21162] ? __pfx_wb_workfn+0x10/0x10 [ 1658.028369][T21162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1658.028421][T21162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1658.028471][T21162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1658.028532][T21162] ? rcu_is_watching+0x12/0xc0 [ 1658.028585][T21162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1658.028642][T21162] process_one_work+0xa0e/0x1980 [ 1658.028711][T21162] ? __pfx_process_one_work+0x10/0x10 [ 1658.028754][T21162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1658.028817][T21162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1658.028871][T21162] worker_thread+0x5ef/0xe50 [ 1658.028930][T21162] ? __pfx_worker_thread+0x10/0x10 [ 1658.028978][T21162] ? kthread+0x13a/0x450 [ 1658.029025][T21162] ? __pfx_worker_thread+0x10/0x10 [ 1658.029069][T21162] kthread+0x370/0x450 [ 1658.029107][T21162] ? __pfx_kthread+0x10/0x10 [ 1658.029152][T21162] ret_from_fork+0x72b/0xd50 [ 1658.029199][T21162] ? __pfx_ret_from_fork+0x10/0x10 [ 1658.029246][T21162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1658.029292][T21162] ? __switch_to+0x800/0x1100 [ 1658.029345][T21162] ? __switch_to_asm+0x39/0x70 [ 1658.029394][T21162] ? __pfx_kthread+0x10/0x10 [ 1658.029438][T21162] ret_from_fork_asm+0x1a/0x30 [ 1658.029514][T21162] [ 1658.693990][T21162] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1658.776319][ T30] audit: type=1326 audit(1780321616.145:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3738 comm="syz.2.11393" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6ac899ce59 code=0x0 [ 1658.909043][ T3745] input: syz1 as /devices/virtual/input/input85 [ 1658.974675][ T3749] loop0: detected capacity change from 0 to 512 [ 1659.190674][ T3749] EXT4-fs (loop0): 1 truncate cleaned up [ 1659.219204][ T3749] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1659.279616][ T30] audit: type=1800 audit(1780321616.655:500): pid=3749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.11396" name="file1" dev="loop0" ino=13 res=0 errno=0 [ 1659.311210][ T3749] EXT4-fs error (device loop0): ext4_validate_block_bitmap:440: comm syz.0.11396: bg 0: block 465: padding at end of block bitmap is not set [ 1659.347718][ T3747] loop8: detected capacity change from 0 to 4096 [ 1659.485510][ T30] audit: type=1800 audit(1780321616.865:501): pid=3747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.11394" name="file1" dev="loop8" ino=33 res=0 errno=0 [ 1659.572220][ T3757] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1659.804967][ T3749] EXT4-fs (loop0): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 10 with error 28 [ 1659.862352][ T3749] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1659.862352][ T3749] [ 1659.919831][ T3749] EXT4-fs (loop0): Total free blocks count 0 [ 1659.969293][ T3764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11399'. [ 1659.972603][ T3749] EXT4-fs (loop0): Free/Dirty block details [ 1660.032411][ T3764] netlink: 56 bytes leftover after parsing attributes in process `syz.2.11399'. [ 1660.043992][ T3749] EXT4-fs (loop0): free_blocks=0 [ 1660.074999][ T3749] EXT4-fs (loop0): dirty_blocks=10 [ 1660.080761][ T3764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11399'. [ 1660.166788][ T3749] EXT4-fs (loop0): Block reservation details [ 1660.208044][ T3749] EXT4-fs (loop0): i_reserved_data_blocks=10 [ 1660.442607][ T5289] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1660.526485][ T3181] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #13: comm syz-executor: data will be lost [ 1660.590690][ T3181] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1660.941703][T21476] hid-generic 0006:0008:0008.006B: unknown main item tag 0x0 [ 1660.989657][ T3785] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11406'. [ 1660.999765][T21476] hid-generic 0006:0008:0008.006B: unknown main item tag 0x0 [ 1661.008195][ T3786] loop8: detected capacity change from 0 to 512 [ 1661.031176][T21476] hid-generic 0006:0008:0008.006B: unknown main item tag 0x0 [ 1661.065756][ T3786] EXT4-fs: Ignoring removed bh option [ 1661.073886][T21476] hid-generic 0006:0008:0008.006B: unknown main item tag 0x0 [ 1661.103674][ T3786] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 1661.123974][T21476] hid-generic 0006:0008:0008.006B: unknown main item tag 0x0 [ 1661.162332][T21476] hid-generic 0006:0008:0008.006B: unknown main item tag 0x0 [ 1661.172311][ T3786] EXT4-fs (loop8): 1 truncate cleaned up [ 1661.218765][T21476] hid-generic 0006:0008:0008.006B: unknown main item tag 0x0 [ 1661.239966][ T3786] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1661.253730][ T3780] loop5: detected capacity change from 0 to 32768 [ 1661.269168][ T3780] btrfs: Deprecated parameter 'usebackuproot' [ 1661.270673][T21476] hid-generic 0006:0008:0008.006B: unknown main item tag 0x0 [ 1661.276796][ T3780] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1661.276867][ T3780] BTRFS warning: excessive commit interval 65536, use with care [ 1661.283976][ T3780] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.11391 (3780) [ 1661.371162][ T3780] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1661.381677][T21476] hid-generic 0006:0008:0008.006B: unknown main item tag 0x0 [ 1661.381724][T21476] hid-generic 0006:0008:0008.006B: unknown main item tag 0x0 [ 1661.402222][ T3780] BTRFS info (device loop5): using crc32c checksum algorithm [ 1661.411230][ T3780] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1661.427830][ T30] audit: type=1800 audit(1780321618.805:502): pid=3786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.11408" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1661.452597][T21476] hid-generic 0006:0008:0008.006B: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 1661.496767][ T3786] EXT4-fs error (device loop8): ext4_validate_block_bitmap:440: comm syz.8.11408: bg 0: block 465: padding at end of block bitmap is not set [ 1661.655492][ T139] BTRFS warning (device loop5): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb0e5ffa5 level 0 [ 1661.673011][ T3780] BTRFS warning (device loop5): couldn't read tree root [ 1661.681573][ T3780] BTRFS warning (device loop5): try to load backup roots slot 1 [ 1661.706480][ T1122] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x32d10ca2 level 0 [ 1661.714235][ T3786] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 131587 with max blocks 1 with error 28 [ 1661.778682][ T3780] BTRFS warning (device loop5): couldn't read tree root [ 1661.787426][ T3780] BTRFS warning (device loop5): try to load backup roots slot 2 [ 1661.797122][ T1122] BTRFS warning (device loop5): checksum verify failed on logical 5255168 mirror 1 wanted 0x9df47653 found 0x6344b7f5 level 1 [ 1661.846770][ T3803] fido_id[3803]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1661.883424][ T3786] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1661.883424][ T3786] [ 1661.896710][ T3780] BTRFS warning (device loop5): couldn't read tree root [ 1661.904193][ T3780] BTRFS warning (device loop5): try to load backup roots slot 3 [ 1661.914569][ T3786] EXT4-fs (loop8): Total free blocks count 0 [ 1661.985001][ T3780] BTRFS info (device loop5): rebuilding free space tree [ 1661.995848][ T3786] EXT4-fs (loop8): Free/Dirty block details [ 1662.047201][ T3786] EXT4-fs (loop8): free_blocks=0 [ 1662.080396][ T3786] EXT4-fs (loop8): dirty_blocks=2 [ 1662.117485][ T3786] EXT4-fs (loop8): Block reservation details [ 1662.132445][ T3780] BTRFS info (device loop5): disabling free space tree [ 1662.133851][ T3786] EXT4-fs (loop8): i_reserved_data_blocks=2 [ 1662.141225][ T3780] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1662.161153][ T3780] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1662.208732][ T3780] BTRFS info (device loop5): checking UUID tree [ 1662.224097][ T3780] BTRFS info (device loop5): enabling ssd optimizations [ 1662.232794][ T3780] BTRFS info (device loop5): turning off barriers [ 1662.241282][ T3780] BTRFS info (device loop5): turning on sync discard [ 1662.249653][ T3780] BTRFS info (device loop5): enabling disk space caching [ 1662.260664][ T3780] BTRFS info (device loop5): force clearing of disk cache [ 1662.270219][ T3780] BTRFS info (device loop5): enabling auto defrag [ 1662.278218][ T3780] BTRFS info (device loop5): trying to use backup root at mount time [ 1662.289175][ T3780] BTRFS info (device loop5): max_inline set to 5 [ 1662.412212][ T139] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1662.468391][ T2485] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1662.874116][ T5629] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1662.981618][ T3790] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11406'. [ 1663.010314][ T3790] nbd: nbd64 already in use [ 1663.129265][ T5779] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1663.369125][ T5779] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1663.421232][ T5779] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1663.466587][ T5779] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1663.502139][ T5779] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1663.523043][ T5779] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1663.538851][ T5779] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1663.551526][ T5779] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1663.633423][ T5779] usb 9-1: Product: syz [ 1663.660755][ T5779] usb 9-1: Manufacturer: syz [ 1663.818377][ T5779] cdc_wdm 9-1:1.0: skipping garbage [ 1663.854715][ T5779] cdc_wdm 9-1:1.0: skipping garbage [ 1663.959546][ T5779] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1663.976610][ T5779] cdc_wdm 9-1:1.0: Unknown control protocol [ 1664.154136][ T3848] geneve2: entered promiscuous mode [ 1664.252060][ T2250] usb 9-1: USB disconnect, device number 4 [ 1664.286909][ T3850] vivid-001: ================= START STATUS ================= [ 1664.321525][ T5289] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1664.324562][ T3850] vivid-001: Radio HW Seek Mode: Bounded [ 1664.431078][ T3850] vivid-001: Radio Programmable HW Seek: false [ 1664.466671][ T3850] vivid-001: RDS Rx I/O Mode: Block I/O [ 1664.504153][ T3850] vivid-001: Generate RBDS Instead of RDS: false [ 1664.578213][ T3850] vivid-001: RDS Reception: true [ 1664.594732][ T3850] vivid-001: RDS Program Type: 0 inactive [ 1664.637672][ T3850] vivid-001: RDS PS Name: inactive [ 1664.683588][ T3850] vivid-001: RDS Radio Text: inactive [ 1664.701716][ T3850] vivid-001: RDS Traffic Announcement: false inactive [ 1664.725827][ T3850] vivid-001: RDS Traffic Program: false inactive [ 1664.753625][ T3850] vivid-001: RDS Music: false inactive [ 1664.763140][ T3850] vivid-001: ================== END STATUS ================== [ 1665.427245][ T3871] syzkaller1: entered promiscuous mode [ 1665.457803][ T3871] syzkaller1: entered allmulticast mode [ 1666.751915][ T3905] binder: 3903:3905 ioctl c0306201 2000000001c0 returned -14 [ 1666.770884][ T30] audit: type=1800 audit(1780321624.145:503): pid=3910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.11439" name="file1" dev="tmpfs" ino=4302 res=0 errno=0 [ 1667.181618][ T3918] sctp: [Deprecated]: syz.7.11444 (pid 3918) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1667.181618][ T3918] Use struct sctp_sack_info instead [ 1667.491096][ T5289] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1667.780454][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1667.788173][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1667.800706][ T1312] ------------[ cut here ]------------ [ 1667.809627][ T1312] !skb_transport_header_was_set(skb) [ 1667.809652][ T1312] WARNING: ./include/linux/skbuff.h:3244 at lowpan_xmit+0xe84/0x1150, CPU#0: aoe_tx0/1312 [ 1667.825102][ T1312] Modules linked in: [ 1667.831437][ T1312] CPU: 0 UID: 0 PID: 1312 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1667.842521][ T1312] Tainted: [L]=SOFTLOCKUP [ 1667.847025][ T1312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1667.857151][ T1312] RIP: 0010:lowpan_xmit+0xe84/0x1150 [ 1667.862804][ T1312] Code: 00 00 48 8b 8d a8 fe ff ff 0f b7 85 74 fe ff ff 4c 89 ff 48 01 81 40 02 00 00 e8 17 10 17 fe e9 7c fc ff ff e8 fd 2b c7 f6 90 <0f> 0b 90 e9 a8 f6 ff ff e8 ef 2b c7 f6 90 0f 0b 90 e9 af f5 ff ff [ 1667.882620][ T1312] RSP: 0018:ffffc90005a078a0 EFLAGS: 00010293 [ 1667.888758][ T1312] RAX: 0000000000000000 RBX: ffffc90005a07930 RCX: ffffffff8b4149e6 [ 1667.896834][ T1312] RDX: ffff888029d53e00 RSI: ffffffff8b415343 RDI: ffff888029d53e00 [ 1667.904840][ T1312] RBP: ffffc90005a07a40 R08: 0000000000000003 R09: 000000000000ffff [ 1667.912925][ T1312] R10: 000000000000ffff R11: 0000000000000000 R12: ffff88802cddf5b6 [ 1667.920986][ T1312] R13: ffffc90005a07940 R14: ffff888029158e50 R15: ffff88802cddf500 [ 1667.929031][ T1312] FS: 0000000000000000(0000) GS:ffff888124384000(0000) knlGS:0000000000000000 [ 1667.938097][ T1312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1667.944716][ T1312] CR2: 000000110c2ecbbe CR3: 000000005578a000 CR4: 0000000000350ef0 [ 1667.952780][ T1312] Call Trace: [ 1667.956105][ T1312] [ 1667.959242][ T1312] ? __pfx_lowpan_xmit+0x10/0x10 [ 1667.964319][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1667.970055][ T1312] ? skb_network_protocol+0x2ce/0x3d0 [ 1667.975518][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1667.981325][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1667.987093][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1667.992778][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1667.998539][ T1312] ? dev_hard_start_xmit+0x128/0x7a0 [ 1668.003875][ T1312] ? __pfx_lowpan_xmit+0x10/0x10 [ 1668.008925][ T1312] dev_hard_start_xmit+0x128/0x7a0 [ 1668.014173][ T1312] __dev_queue_xmit+0x1baa/0x4950 [ 1668.019380][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1668.025144][ T1312] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 1668.031140][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1668.036859][ T1312] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1668.042296][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1668.048032][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1668.053724][ T1312] ? __lock_acquire+0x4a5/0x2630 [ 1668.058760][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1668.064597][ T1312] ? ref_tracker_free+0x37e/0x6c0 [ 1668.069753][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1668.075457][ T1312] ? do_raw_spin_lock+0x128/0x260 [ 1668.080586][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1668.086299][ T1312] ? rcu_is_watching+0x12/0xc0 [ 1668.091114][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1668.096861][ T1312] ? __pfx_tx+0x10/0x10 [ 1668.101086][ T1312] tx+0xc4/0x130 [ 1668.104692][ T1312] kthread+0x1d8/0x3c0 [ 1668.108894][ T1312] ? __kthread_parkme+0xbb/0x230 [ 1668.113933][ T1312] ? __pfx_kthread+0x10/0x10 [ 1668.118614][ T1312] ? rcu_is_watching+0x12/0xc0 [ 1668.123433][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1668.129170][ T1312] ? __pfx_default_wake_function+0x10/0x10 [ 1668.135088][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1668.140762][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1668.146515][ T1312] ? __kthread_parkme+0x18c/0x230 [ 1668.151874][ T1312] ? kthread+0x13a/0x450 [ 1668.156191][ T1312] ? __pfx_kthread+0x10/0x10 [ 1668.160832][ T1312] kthread+0x370/0x450 [ 1668.165005][ T1312] ? __pfx_kthread+0x10/0x10 [ 1668.169684][ T1312] ret_from_fork+0x72b/0xd50 [ 1668.174488][ T1312] ? __pfx_ret_from_fork+0x10/0x10 [ 1668.179769][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1668.185474][ T1312] ? __switch_to+0x800/0x1100 [ 1668.190213][ T1312] ? __switch_to_asm+0x39/0x70 [ 1668.195148][ T1312] ? __pfx_kthread+0x10/0x10 [ 1668.199813][ T1312] ret_from_fork_asm+0x1a/0x30 [ 1668.204648][ T1312] [ 1668.207812][ T1312] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1668.215131][ T1312] CPU: 0 UID: 0 PID: 1312 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1668.225761][ T1312] Tainted: [L]=SOFTLOCKUP [ 1668.230095][ T1312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1668.240167][ T1312] Call Trace: [ 1668.243460][ T1312] [ 1668.246407][ T1312] dump_stack_lvl+0x100/0x190 [ 1668.251120][ T1312] vpanic+0x552/0x970 [ 1668.255132][ T1312] ? __pfx_vpanic+0x10/0x10 [ 1668.259672][ T1312] panic+0xd1/0xe0 [ 1668.263411][ T1312] ? __pfx_panic+0x10/0x10 [ 1668.267868][ T1312] ? check_panic_on_warn+0x1f/0x90 [ 1668.273025][ T1312] check_panic_on_warn.cold+0x19/0x34 [ 1668.278473][ T1312] ? lowpan_xmit+0xe84/0x1150 [ 1668.283195][ T1312] __warn.cold+0x191/0x328 [ 1668.287641][ T1312] __report_bug+0x296/0x3d0 [ 1668.292176][ T1312] ? lowpan_xmit+0xe84/0x1150 [ 1668.296917][ T1312] ? __pfx___report_bug+0x10/0x10 [ 1668.301981][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1668.307646][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1668.313302][ T1312] ? stack_depot_save_flags+0x27/0x9d0 [ 1668.318886][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1668.324548][ T1312] ? __lock_acquire+0x4a5/0x2630 [ 1668.329524][ T1312] ? kfree_skbmem+0x19a/0x210 [ 1668.334231][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1668.339892][ T1312] ? __kasan_slab_free+0x5f/0x80 [ 1668.344867][ T1312] ? kmem_cache_free+0x127/0x6c0 [ 1668.349829][ T1312] ? lowpan_xmit+0xe84/0x1150 [ 1668.354551][ T1312] report_bug+0xb2/0x220 [ 1668.358929][ T1312] ? lowpan_xmit+0xe84/0x1150 [ 1668.363650][ T1312] handle_bug+0x16a/0x2a0 [ 1668.368001][ T1312] exc_invalid_op+0x17/0x50 [ 1668.372545][ T1312] asm_exc_invalid_op+0x1a/0x20 [ 1668.377418][ T1312] RIP: 0010:lowpan_xmit+0xe84/0x1150 [ 1668.382750][ T1312] Code: 00 00 48 8b 8d a8 fe ff ff 0f b7 85 74 fe ff ff 4c 89 ff 48 01 81 40 02 00 00 e8 17 10 17 fe e9 7c fc ff ff e8 fd 2b c7 f6 90 <0f> 0b 90 e9 a8 f6 ff ff e8 ef 2b c7 f6 90 0f 0b 90 e9 af f5 ff ff [ 1668.402387][ T1312] RSP: 0018:ffffc90005a078a0 EFLAGS: 00010293 [ 1668.408573][ T1312] RAX: 0000000000000000 RBX: ffffc90005a07930 RCX: ffffffff8b4149e6 [ 1668.416559][ T1312] RDX: ffff888029d53e00 RSI: ffffffff8b415343 RDI: ffff888029d53e00 [ 1668.424804][ T1312] RBP: ffffc90005a07a40 R08: 0000000000000003 R09: 000000000000ffff [ 1668.432793][ T1312] R10: 000000000000ffff R11: 0000000000000000 R12: ffff88802cddf5b6 [ 1668.440783][ T1312] R13: ffffc90005a07940 R14: ffff888029158e50 R15: ffff88802cddf500 [ 1668.448791][ T1312] ? lowpan_xmit+0x526/0x1150 [ 1668.453517][ T1312] ? lowpan_xmit+0xe83/0x1150 [ 1668.458255][ T1312] ? __pfx_lowpan_xmit+0x10/0x10 [ 1668.463354][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1668.469023][ T1312] ? skb_network_protocol+0x2ce/0x3d0 [ 1668.474459][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1668.480139][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1668.485875][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1668.491557][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1668.497317][ T1312] ? dev_hard_start_xmit+0x128/0x7a0 [ 1668.502660][ T1312] ? __pfx_lowpan_xmit+0x10/0x10 [ 1668.507744][ T1312] dev_hard_start_xmit+0x128/0x7a0 [ 1668.512911][ T1312] __dev_queue_xmit+0x1baa/0x4950 [ 1668.518247][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1668.523940][ T1312] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 1668.529890][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1668.535916][ T1312] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1668.541340][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1668.547008][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1668.552664][ T1312] ? __lock_acquire+0x4a5/0x2630 [ 1668.557632][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1668.563295][ T1312] ? ref_tracker_free+0x37e/0x6c0 [ 1668.568371][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1668.574036][ T1312] ? do_raw_spin_lock+0x128/0x260 [ 1668.579146][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1668.584804][ T1312] ? rcu_is_watching+0x12/0xc0 [ 1668.589626][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1668.595318][ T1312] ? __pfx_tx+0x10/0x10 [ 1668.599515][ T1312] tx+0xc4/0x130 [ 1668.603131][ T1312] kthread+0x1d8/0x3c0 [ 1668.607241][ T1312] ? __kthread_parkme+0xbb/0x230 [ 1668.612218][ T1312] ? __pfx_kthread+0x10/0x10 [ 1668.616837][ T1312] ? rcu_is_watching+0x12/0xc0 [ 1668.621639][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1668.627301][ T1312] ? __pfx_default_wake_function+0x10/0x10 [ 1668.633159][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1668.638830][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1668.644624][ T1312] ? __kthread_parkme+0x18c/0x230 [ 1668.649701][ T1312] ? kthread+0x13a/0x450 [ 1668.653968][ T1312] ? __pfx_kthread+0x10/0x10 [ 1668.658587][ T1312] kthread+0x370/0x450 [ 1668.662682][ T1312] ? __pfx_kthread+0x10/0x10 [ 1668.667417][ T1312] ret_from_fork+0x72b/0xd50 [ 1668.672070][ T1312] ? __pfx_ret_from_fork+0x10/0x10 [ 1668.677222][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1668.682892][ T1312] ? __switch_to+0x800/0x1100 [ 1668.687608][ T1312] ? __switch_to_asm+0x39/0x70 [ 1668.692408][ T1312] ? __pfx_kthread+0x10/0x10 [ 1668.697025][ T1312] ret_from_fork_asm+0x1a/0x30 [ 1668.701877][ T1312] [ 1668.705002][ T1312] Kernel Offset: disabled [ 1668.709350][ T1312] Rebooting in 86400 seconds..