last executing test programs: 19m18.000749644s ago: executing program 32 (id=148): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x2014000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x90) flock(r0, 0x6) mknod(&(0x7f0000000340)='./bus\x00', 0xc000, 0x2000008) 15m54.533776192s ago: executing program 33 (id=746): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x29b, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./file2\x00') 14m13.702035114s ago: executing program 3 (id=1023): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)='\x00', 0x1, 0x24000080, &(0x7f00000000c0)={0x11, 0xc, r2, 0x1, 0x11, 0x6, @random="4272db00"}, 0x14) 14m12.759437845s ago: executing program 3 (id=1027): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={r1, 0x101}, 0x8) 14m11.823164413s ago: executing program 3 (id=1029): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='yeah', 0x4) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 14m9.814016152s ago: executing program 3 (id=1034): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000008c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@init_itable}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$eJzs281rHOUfAPDvTF7a/vqS/Gp9aa0aLUJQTJq0ag9eFAWRioIe6jEm2xK6baSJYmuxqYgnQQp6Fo+if4E3EUQ9CV49eZJC0V7aeorM7Ey62WYTazaZ2P18YLPPM/PszvebeXv2eXYD6FpD2Z8kYkdE/BoRA43q0gZDjafrV89P3rh6fjKJhYXX/kjydteunp8sm5av215UhtOI9MOk2MhSs2fPnZyo12tnivro3Km3RmfPnnvinVMTJ2onaqfHjxw5fGjs6afGn+xInllM1/a9P7N/74tvXHp58tilN3/8Oot3R7G+OY9OGcoS/3Mh17ru0U5vrGI7m8pJb4WBcFt6IiLbXX35+T8QPXFz5w3ECx9UGhywrrJ705b2q+cXgDtYElVHAFSjvNFnn3/LxwZ1PTaFK882PgBleV8vHo01vZEWbfpaPt920lBEHJv/6/PsEes0DgEA0Ozjyc+O9kfEeze+einrewwsrknjnvz5t/zvrmJuaDAi/h8RuyPirojYExF3R+Rt742I+9YYz639n/TyGt9yRVn/75libmtp/6/s/cVgT1HbmefflxyfrtcOFv+T4ejbktXHVtjGt8//8km7dc39v+yRbb/sCxZxXO5tGaCbmpibyDulHXDlYsS+3uXyTxZnApKI2BsR+27vrXeVhenHvtzfrtHq+a+gA/NMC19k6c1n+c9HS/6lpHl+cvqW+cnRrVGvHRwtj4pb/fTzR6+22/6a8u+AK7XGc9P+b20ymDTP1852dvv/8vhP+5PX8znd/mLZuxNzc2fGIvqTo3l9yfLxm68t62X77PgfPrD8+b+7eE2W//0RkR3ED0TEgxHxUBH7wxHxSEQcWCHHH55bPf9IK9r/FyOmlr3+LR7/Lfv/9gs9J7//pt32/9n+P5yXhosl+fVvFcuFk10uWgNcy/8OAAAA/ivS/DvwSTqyWE7TkZHG9+X3xP/S+szs3OPHZ94+PdX4rvxg9KXlSNdAMR5an67XxpL54h0b46PjxVhxOV56qBg3/rRnW14fmZypT1WcO3S77W3O/8zvPVVHB6yzbcsuHe/f8ECACrTOo6dLqxdeCRcDuFP5vTZ0r1XO/3Sj4gA2nvs/dK/lzv8LLXVzAXBncv+H7uX8hy6Vfld1BECF3P+hK63ld/3rWNi6OcKoprBZd0peiCgL6aaIR2GdClVfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrj7wAAAP//OwzmfQ==") mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000191c0)='./file0\x00', 0x8800, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 14m8.137586318s ago: executing program 3 (id=1038): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) 14m7.090415676s ago: executing program 3 (id=1042): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x50) 14m2.976110629s ago: executing program 34 (id=1042): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x50) 10m4.425534262s ago: executing program 1 (id=1802): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100020000000879215300000000000001090224000100000000090401130103000100092100000001220b0009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0xb, {[@global=@item_4={0x3, 0x1, 0x8, "d1655841"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0xa, "fc62516a"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000002300)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 10m3.220833995s ago: executing program 7 (id=1806): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000015c0)=""/4096, 0x100a}, {&(0x7f0000000080)=""/47, 0x2f}, {&(0x7f0000002a00)=""/4104, 0xffd}, {&(0x7f0000000200)=""/70, 0x46}, {&(0x7f0000000480)=""/62, 0x4a}], 0x5}, 0x81}], 0x1, 0x120, 0x0) 10m2.071203599s ago: executing program 7 (id=1808): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000040)={0x30, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x810) 10m1.200290488s ago: executing program 1 (id=1811): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) 10m1.113363712s ago: executing program 7 (id=1812): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x202, 0x0) r2 = dup2(r1, r0) read$FUSE(r2, 0x0, 0x0) 10m0.453678517s ago: executing program 1 (id=1813): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000200)={0x4, "fa02791d2a69a2610f02000000000000001100010000000800"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000240)={0x1b, "8a6035ceeae3ecc42317afad010000000000000400"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000380)={0x7fffffff, "7f20d7e51144efe57def14fe418ef08d13b60a02b9f7d66e176f5115d9fd115d"}) 10m0.430399287s ago: executing program 7 (id=1814): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200c00, &(0x7f0000001bc0)=ANY=[@ANYRES8=0x0, @ANYRESDEC], 0x3, 0xa73, &(0x7f0000003cc0)="$eJzs3U2MG1cBAOA33vUmm6TEKQldktAm/LTlp7vNZgk/ETRVcyFqKm6VKi5RmpaINCBSCVpVIsmJG62qcIUiTuVQAUJqLyjqiUslGolLT4UDB6IgVeIAhcRove95xy92x/uTtb3+Punt85s39nszOzMez8x7LwBjq9b6u7AwU4Rw5a1Xj//j/r9PL055pD1Ho/V3spSqhxCKmJ7MPu/9iaX45gcvne4WF2G+9TelwxM32u/dHkK4GA6Eq6ER9l659so784+fvHTi8sF3Xz96/c4sPQAAjJdvXz26sOevf96368M37j0WtrSnp/PzRkzviOf9x+KJfzr/r4XOdFEKZVPZfJMx1LL5JrrMVy6nns032aP8qexz6+38fR3zbakof6I0rdtywyhL23EjFLXZjnStNju79Js8tH7XTxWz58+ee+bCgCoKrLt/3RdCOCCsNDSbzZ+0VuAQ1EUQVhuaOwd9BAJYkt8vvM3F/MrC2rQ/bbK/8m88Wuv+flgHG739K3+0yv/1JUcc1s9m3ZrScqX9aEdM5/cR8ueXVrr/p8/L70fU+6xnr/sIo3J/oVc9Jza4HqvVq/75drFZfSPGaT18M8sv7z/5/3RU/sdAd//eqOv/r00P/FrnYjgwBHXY1KE+BHUQ+g7NQR+AgKG1/NzckmaU8vPn+vL8LRX5Wyvypyvyt1Xkb6/Ih3H2++d/Fl4uln/n57/pV3o9LF1nuyvGH1thffLrkSstP3/ud6XWWn7+PDEMszdPPXnmq08/dW3p+f+ivf3fitv7gZhuxH3rapwhXS/Mr6u3n/1vdJZT6zHf3Vl97rpt/uZSibs75yt2L39OKB1nbqvHTOf7dvaab3/nfI1svukYtmb1zc9PtmXvS+cf6bia1tdktrz1bDmmsnqk48quGOf1gNVI22Ov5//T9jkT6sUzZ8+deTim03b6p4n6lsXph8of+puNqTuwNv22/5kJne1/drSn12vl48LO5elF+bjQyKbPLyXbt8nT9MMxnb7nvjsx3Zo+e/r7555e74WHMXfhhRe/d+rcuTM/9CK9mLZavPCi6sixWZ8chPEx9/xzP5i78MKLD5197tSzZ549c/7wkSOH5+ePfO3wwlzrvH6ufHYPbCbLX/qDrgkAAAAAAAAAAADQrx+dOH7tL29/5b2l9v/L7f9S+//05G9q///TrP1/3k4+tQpI7QB3dclvjbv3Zmc9prL56jF8PKvv7qycPdn7PhHj9jh+sf1/am+f9+ua6nNPNj3vvzfNl3UncFt/KVNZHyTt8QJjg/1Px/TlGP8qwAAV090nx7iqf+u0raf+KfRLMZrS/y1tDakfk9T+u1e/Tun4v2sD6sj624jmhINeRqC7fw79+J+lM/GB1+UjQ7M5+DqsPQz/ehbWMTSbRvEAhsOgx/9M1z1TfP6P39q6GNJsNx7tPF7m/ZfCWgz7+JPK31zjf7bHv+vr+Neld/WOfp77H13hP7+4/l6p2LC33+NvvvypH+jd1WWWfRjLT8v/QOiv/OZrWfn5DaE+/Tcrf1uf5d+2/PtXV/7/YvlptT34mX7LX6pxUeusR37dON3/y68bJzez5U99e654+Vc5UOOtWD6Ms97jzPY7gu1wGpXxf3vJn8P4ckynA2F6ziH/Rl5p/dPzFel7YE/2+UXF99uojFPcy7iP//v1GFftD2n837Q9Nrqka6V0vcu6HfVtBTab94f+/t+IhYtDUAdhSMNwjIFdDs1mc6AdeetFfLAGvf4Hffd50OUPev1Xycf/zc/h8/F/a9kPiHz83/z9+fi/eX4+vl6en4//m6/PfPzfPP+e7HPzK9gzFfmfrMjfW5G/bzl/ulv+/or3f6oi/2BF/r0V+fdV5N9dkT9Rkf/ZivzPVeTfX5H/YEX+5yvyN7tWe5TSTjVuyw/jLG+fZ/+H8ZHu//Ta/3dX5AOj6+dvHHrsqd99p7HU/n+q/Xst3cc7FtP1+Nv5xzGd3/cOpfRi3tsx/bcsf9ivd8A4yfvPyL/fH6jIB0ZXes7L/g1jqOjeY09+v61Xv1W9zvMZLV+I8Rdj/KUYPxTj2RjPxfhQjOc3qH7cGY/99g9HXy6Wf+/vzPL7fZ48bw+U9xN1uM/65NcHVvo8e96P30qttfxVNgcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYmFrr78LCTBHClbdePf7kybNzi1Meac/RaP2dLKXq7feF8HCMJ2L8y/ji5gcvnS7Ht2JchPlQhKI9PTxxo13S9hDCxXAgXA2NsPfKtVfemX/85KUTlw+++/rR63duDQAAAMDm9/8AAAD//6ZSGwg=") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x29b7468, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x180) renameat2(r0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000200)='./file0\x00', 0x4) 9m59.40249805s ago: executing program 1 (id=1818): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f00000001c0)='./file1\x00', 0x204040, &(0x7f0000000580)=ANY=[], 0x4, 0xfc0, &(0x7f0000002240)="$eJzs3UFsHNUZAOA3613bwSZeA4UAJaTQikDBDglS01sQqJdKiEvvoJDQCENRQysRAXF6QFRCFAn1VHEAcaFUSpGKRFWpQj21PbVqT+0F9UKlKpWCemiR4q1iv7F3n3ey6/Hu7Nr+Punf5zdvdv5/djfOzOz6bQD2rNrq7UOTsfvoy09lH11dduf6GodWb7PYa4YQGm39LNnep3HBlcsvnezWZuHo6m3eD49dWr/vTAhhORwKn4Rm+GBx6fP3337k8IevTt/8xrlnXhnCrndI9wMAAHaji39c+tu9//zD/fNfXDx4IkytL8+Pz5uxPxOP+4/EA+X8eLkWOvtZW7SbTNabiFFL1ptI1qsneeoF+RrJdhoF6032yDfRtqzbfgIAAMBOlJ/XNkNWW+jo12oLC2vn/Vd9OjeZLTx3Zun02REVCgAAAJT2n/OrH7rdwTE9BjWINPblL7Ct3e+Db2/9PtuKWsX56lXky6/ijcHroLIo93oTQgghhBhcOB4ROyBacxVdaAAAAACI0vnCNlke7Exd61tr9pf/0sO17veHAUhef5unnRjw6//a+ac3r1Bp/i6Gn78x4vzX3P/3LviNAwBAebv1aDLfr/w4Op/HIJ1HcKLjXjMTWz3/qCXbqW+xzqJ5BXfKfINFdU5UXEdZRfVv9XkclaL60/kwx1VR/ek8neOqqP6piusoq6j+Lld+wjj+sy6qf1/FdZRVVP91FddRVlH9MxXXUVZR/bMV11FWUf3XV1xHWUX176+4jrKK6t8pH6stqr9ZcR1lFdU/v9aM/WFEUf03VFxHWUX131hxHWUV1X9TxXWMyh2xzR+HgwXrzXQ5+Bu7g0EAAACgq//t+Pn/dmVkPdepj7zGPR+r77GPMP/EGDwGw46ZwW/z6dkx2C8xTnFh7T/DzuXTXZaJbUVtDGoYVuzr9hoSQgghxjLOj+7SAwAAADAm8r8LyP/qvRXl4xObxv/+7tXbfLzePj69sYF8vNFj+5M9xqd6jAMAAAAh/Oa107e+mW3Md5f+Tf9W58PL543aFz5aCSXmMUrnI9xq/u3Oe7bd/N0nHNkps7EBAACwW2Xf+mTlvkffeWH+i4sHT7Sd/a7E8918HtB6vDbwceznnwuYTfpZfg59ojNPrWC99PrA9UXbe3ybOwoAAAB7WH7+3gxZbaHtvLsZarWFhY3z8QOhkZ0+s3TqSOzn38/y+7nG1NXlD1ZcNwAAANC/jfP97uf/+ff4HgiT2cJzZ5ZOn13rz64vb9TarwvMbSzP2q8LNJPlRwuWH4v9+P2d4btz+1aXL5z83tJTg955AAAA2CPOvnjumSeXlk59f+/8UA8hbGs7YRz2wg9+GOoPo/7NBAAADNpnn73V+MGx2d/Or7QOnmib/24l/nAo9ptxbr8/xeX55wTyvwPY9Pf6T3TmmSta7/nO9ZrJehMxppK6p9u2E1bnG+y833xRvmbndiYL8s0k+WaTfOk8BfVk/azLXIKhy0yA+XpzyfJ0HsZ6kiNL8t/VJRcAAADkFl949vnFsy+ee+DMs08+ferpU88dO3r8m8ePH3nwGw8urn6uf7H90/0AAADATrTxod9RVwIAAAAAAAAAAAAAAAAAAAB7VxVfJzbqfQQAAIC97t/nQwjLQhRE/gWDo65jp0c2BjUML1pTo69hd0fw7zCNCY+HECH89Y3R1zAGUfP7QIj+YrTnfdPVHsu0Wq3WGDzmYxitVvpN8wAAAADDdeXySyfb202Ws4HmW99ac61ZiXnzdvaBv8xfjXy1Sw93Xi+5bqDVsNdV/fqXf1zzT3Udf+/CYPOvXohvbvR7//6rdW7gxOptPfb29Zv3nsWfH1jPH0K4rd5n/o79vxDC4/1m7HQ4yX9P6C9/653k8X+io1frN/+9Sf7QZ/5L6fP/fFGGdMud7ov5D8T+4bv7zd+5i1NJtn5fAF9P9v+p0G/+ZP+bfSZM3B/zA8BetP6/eev8aAsZsPwoIT+enon9fH/zA9b00w9bPf6vJdupb7vyzu3mx0G3xP76Ud1yZ97cVuvPH5fZ2F5fss7UTvlUSVH9g3oeh62o/kbFdZRVVP9kxXWUVVR/97P3MisNV1H91z57HB9F9fd9IWLEiurfKdeVi+qfqbiOsorqn624jrKK6t/q/+OjUlT//orrKKuo/rmK6yirqP6Sl9UqV1T/fMV1lFVU/w0V11FWUf03VlxHWUX131RxHaNye2yLzofz88+5OJb3m0l/qstj2febIQAAAMBQ/Wss5/9ru3Iw8lqEEEJUHQ2//0WJmBiDGoTYyfHf1ppR1yEGEK250dcgxjJW50Vkz8p20GfFARic4c5mwbjz/O9tnv+9zfPPteTvxGdJPzfRY7zeY7zRY3wyGc+SO04VjUc3Jttt5dc1o5t6jH8p7kHR+P7k/j9Mxm/psf0DPcZv7TF+W4/x23uMAwAAsDfcHFvnhwAAALB7vfyLj1//1T1PXJ7/4uLBE2Fy07zzR2J/Kr63/lrsp/Pe5xrxPf8fxf67sf1dbP+RrO/zJwAAADB8+ffEeP8fAAAAdq/8e0qd/wMAAMDuNR9b5/8AAACwe90QW+f/AAAAsItl090Xxza/LnBXbPud1w8AGH9fju0dsT0Y2ztj+5XY5scBd8f2qxXVBwAMzs++8+Pjb2Yb8/0fS8avxOV5u8ny2pWCrNY5k/++2F4X26/1WU/6fQD95s/t7zPPsPLPbTM/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB71FZvH3roQBbCT3/91qM/mXz9z1eX3bm+xqHV2yz2miGExvr98tGN/i/jilcuv3SyvV2JbRaOhixk68vDY5fWM82EEJbDofBJaIYPFpc+f//tRw5/+Or0zW+ce+aVIT4EHfsHAAAAu9H/AwAA///f+hdH") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)=ANY=[]) 9m58.411666521s ago: executing program 7 (id=1820): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 9m57.266322829s ago: executing program 7 (id=1825): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$eJzs28tvG0UYAPBv10lKX8SU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlW0IFSOqBJ3xIEDEn8BJ7gg4ITEFe6oUoV6aeFktPZuYjt2mocTF/z7SdvO7M5q5vPu2DM72QD61kj2TxKxKyJ+j4jhera5wEj9v1s3Lk7/fePidBLV6lt/JbVyN29cnC6KFuftzDOjaUT6aRIH2tQ7f/7C6alKZfZcnh9fOPP++Pz5C8+eOjN1cvbk7NnJY8eOHpl44fnJ57oSZ9amm/s/mju477V3rr4xffzquz9/mxTxt8TRJSMrHXyiWu1ydb21uyGdDPSwIaxJKSKyyzVY6//DUYqlizccr37S08YBm6parVZ3dj58uQr8jyXR6xYAvVH80Gfz32LboqHHHeH6S/UJUBb3rXyrHxmINC8z2DK/7aaRiDh++Z8vsy025zkEAECT77PxzzPtxn9p3N9Q7u58bagcEfdExJ6IuDci9kbEfRG1sg9ExINrrL91kWT5+Ce9tq7AVikb/72Yr201j/+K0V+US3ludy3+weTEqcrs4fwzGY3BbVl+YoU6fnjlt887HWsc/2VbVn8xFszbcW1gW/M5M1MLUxuJudH1jyP2D7SLP1lcCUgiYl9E7F9nHaee+uZgp2O3j38FXVhnqn4V8WT9+l+OlvgLycrrk+N3RWX28HhxVyz3y69X3uxU/4bi74Ls+u9oe/8vxl9OGtdr59dex5U/Pus4p1nd/V+91HhOdv8PJW/X0kP5vg+nFhbOTUQMJa/XG924f3Lp3CJflM/iHz3Uvv/viaVP4kBEZDfxQxHxcEQ8krf90Yh4LCIOrRD/Ty8//t76499cWfwza7r+S4mhaN3TPlE6/eN3TZWW1xJ/dv2P1lKj+Z7VfP+tpl3ru5sBAADgvyeNiF2RpGOL6TQdG6v/vfze2JFW5uYXnj4x98HZmfo7AuUYTIsnXcMNz0Mn8ml9kZ+M+LoxfyR/bvxFaXstPzY9V5npdfDQ53Z26P+ZP0u9bh2w6byvBf1L/4f+pf9D/9L/oX+16f/be9EOYOu1+/2/1IN2AFuvpf9b9oM+Yv4P/Uv/h/6l/0Nfmt8et39JXkJiWSLSO6IZEt1JpBHRtGf5d0W5F19QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG/RvAAAA//831udB") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) getdents(r0, 0x0, 0xbb) 9m56.862024187s ago: executing program 1 (id=1826): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x4000094) 9m55.42428878s ago: executing program 1 (id=1832): unshare(0x22020600) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 9m52.363309952s ago: executing program 35 (id=1832): unshare(0x22020600) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 9m41.58043229s ago: executing program 36 (id=1825): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) getdents(r0, 0x0, 0xbb) 9m2.150368876s ago: executing program 0 (id=1916): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x7, [0x5, 0x6, 0x2, 0x10, 0xe, 0xf, 0x4, 0x5, 0x1, 0x4, 0x2, 0x4, 0x1, 0x2, 0x1, 0xd], 0x0, [0x0, 0x7, 0xe9f, 0x3, 0xd, 0x7, 0x5, 0x7f, 0x3, 0x80, 0x800, 0x3, 0x10, 0xffff, 0x2, 0x400], [0x100, 0x220, 0xffdf, 0x0, 0xfffc, 0xa, 0x200, 0x7, 0x1a, 0x8, 0x2, 0xc72c, 0xfff8, 0x7, 0x6, 0x4]}}}}]}, 0x88}}, 0x0) 9m1.112790809s ago: executing program 0 (id=1919): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000180)='./file1\x00', 0x300001a, &(0x7f0000000040)=ANY=[], 0xfc, 0x2c6, &(0x7f0000000240)="$eJzs3U9rY1UUAPDzkjR91UWKuFEEH+jCVZm6ddMqI4hdKRHUjcXpgCRloIWAI9iZ1XwCl+LXcOvOtd9AEHeCuxmkcuX9axKbzERNOzD+fpvc3nvPfSfvPNJVTj575Xh0604W9x/+HHmeRWcv9uJRFtvRida96AUA8Ox4lFL8niJio/47Wzmy17m6rACAq1T//6897VwAgOvx4cefvL9/cHDzg6LI46XBg8kwi4jjB5Nhvb5/O76IcRzFjRjEeUS6UI/ffe/gZvSK0na8fnw2GU7mzt//Lbaq+N0YxPbi+N2i1sQPI8rXjXguiti/vdEeNYgXF8e/uSA+hv1447WZ/HdiED99HndiHLeijJ3Gf71bFO+kbx5+9Wl5mTI+68Rws9rX2IpI3WsrCgAAAAAAAAAAAAAAAAAAAAAAz7ydosjq9j1V/55yqum/0z2v1neK1vZ8f546/qJfcN0fKEXToucsxbdtf50bRVGkZuM0vhcv9/ywAAAAAAAAAAAAAAAAAAAAAJROv7w7OhyPj07+86A7Ohy33QDar/X/2wP3ZmZejbujw+7yAzdXv9Zst4Ey18dujl4v1nBbnjyIH7bKfI5OTn+tZvK5Pd81+f7zkzenxf2oCW8Ls9Z38cLbFxkWzVJ7k0eH2ZOulbeF+352qR8rp5FlczNVbcdHJ6l6JM7TfE3zJTezv4a7UT6j/ecXLv2ZUlrtnLd+qWvUzGRVi43V0thoBkuflvxyLX5cfuDCj4s/UkrddXzuAAAAAAAAAAAAAAAAAAAAl81/cfpv7jev9xaGdq40MQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4RtPf/28HeUTMz1wanDXBj9vTDPpxcvqU3yIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/A38FAAD//+lWSxE=") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0xd) write$binfmt_format(r0, &(0x7f0000000000)='1\x00', 0x2400) 8m59.698811488s ago: executing program 0 (id=1921): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v3={0x3000000, [{0x8}, {0x0, 0xfffffff6}], 0xee00}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) 8m58.649462365s ago: executing program 0 (id=1923): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x4) 8m57.546087525s ago: executing program 0 (id=1926): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x3, 0xc30, 0xff, 0xb9, 0x17, "b878b98b9ac903d1"}) write$UHID_INPUT(r1, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) 8m56.343801582s ago: executing program 0 (id=1929): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x38, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x4, 0x1, 0x0, 0x9, '\x00', {0x0, 0x6, "f99063", 0x800, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], "af34000000000000"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) 8m52.243587783s ago: executing program 37 (id=1929): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x38, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x4, 0x1, 0x0, 0x9, '\x00', {0x0, 0x6, "f99063", 0x800, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], "af34000000000000"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) 2m54.744693351s ago: executing program 8 (id=2718): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 2m53.100828287s ago: executing program 8 (id=2723): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x10, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 2m51.879192998s ago: executing program 8 (id=2727): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x2, {0x2, 0x0, 0x2}}, 0x18) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x500}, 0x1, 0x0, 0x0, 0x24008807}, 0x8010) 2m50.760270659s ago: executing program 8 (id=2732): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x200) 2m49.631625934s ago: executing program 8 (id=2736): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001980)=@newtaction={0x18, 0x31, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 2m47.458792661s ago: executing program 8 (id=2741): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=cp861,iocharset=cp932,errors=continue,errors=remount-ro,errors=continue,discard,allow_utime=00000000000000000000010,discard,allow_utime=00000000000000000000004,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00'], 0x1, 0x151e, &(0x7f0000007640)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x800000, &(0x7f0000000180)=ANY=[@ANYBLOB='utf8=1,iocharset=cp1255,uni_xlate=0,check=strict,utf8=0,uni_xlate=0,utf8=0,codepage=850,check=relaxed,shortname=winnt\x00\x00hortname=lower,shortname=win95,shortname=win95,nonumtail=0,shortname=mixed,uni_xlate=1,allow_utime=00000000000000000000777,\x00'], 0xff, 0x371, &(0x7f0000000280)="$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") mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x40) 2m44.190818376s ago: executing program 38 (id=2741): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=cp861,iocharset=cp932,errors=continue,errors=remount-ro,errors=continue,discard,allow_utime=00000000000000000000010,discard,allow_utime=00000000000000000000004,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00'], 0x1, 0x151e, &(0x7f0000007640)="$eJzs3AucT9XaOPDnWWvtMSbp1ySXYa31bH7JZZkkySVJLkmSJEluCUmTHElIDLklDUlILkNyGUJymZg07ve7JCRJkyQhuSXr/5ni73TqvOec9/Qe7+ed5/v57I/1zN7P2s/+PbNnXzDfdh1Wq0nt6o2ICP4t+OsfyQAQCwCDAOAaAAgAoHx8+fjs9bklJv97O2F/rofSrnQF7Eri/uds3P+cjfufs3H/czbuf87G/c/ZuP85G/efsZxsy4xC1/KScxd+/5+T8fX//4aLJx98ua7M9d0AYv7ZPO5/zsb9/z8r+Gc24v7nbNz/nCr2ShfA/hfg8z8nyPV313D/czbuP2M52ZV+/3ylF4jk7M/gSn//McYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLGc74yxQAXBpf6boYY4wxxhhjjDH25/G5rnQFjDHGGGOMMcYY+5+HIECCggBiIBfEQm6IAwEAV0NeuAYicC3Ew3WQD66H/FAACkIhSIDCUAQ0GIgBghCKQjGIwg1QHG6EElASSkFpcFAGEuEmKAs3Qzm4BcrDrVABboOKUAkqQxW4HarCHVAN7oTqcBfUgJpQC2rD3VAH7oG6cC/Ug/ugPtwPDeABaAgPQiN4CBrDw9AEHoGm8Cg0g+bQAlpCq/9W/gvQE16EXtAbkqEP9IWXoB/0hwEwEAbByzAYXoEh8CqkwFAYBq/BcHgdRsAbMBJGwWh4E8bAWzAWxsF4mACpMBEmwdswGd6BKTAVpsF0SIMZMBPehVkwG+bAezAX3od5MB8WwEJIhw9gESyGDPgQlsBHkAlLYRkshxWwElbBalgDa2EdrIcNsBE2wWbYAlthG2yHHfAx7IRPYBd8CrthD+yFz2AffP4v5p/+m/xuCAgoUKBChTEYg7EYi3EYh3kwD+bFvBjBCMZjPObDfJgf82NBLIgJmIBFsAgaNEhIWBSLYhSjWByLYwksgaWwFDp0mIiJWBZvxnJYDstjeayAFbAiVsJKWAWrYFWsitWwGlbH6lgDa2AtrIV3493YB+tiXayH9bA+1r/0egobYSNsjI2xCTbBptgUm2EzbIEtsBW2wtbYGttgG2yH7bA9tscO2AGTMAk7YkfshJ2wM3bGLtgFu2JX7IbdsXvWC7kAX8QXsTfWEH2wL/bFfpiSawAOxIH4Mg7GV/AVfBVTcCgOw9fwNXwdR+ApHImjcDSOxqriLRyL45DEBEzFVJyEk3AyTsYpOBWn4nRMwxk4E2fiLJyNs/E9nIvv4/s4H+fjQkzHdFyEizEDM3AJnsZMXIrLcDmuwJW4AlfjGlyN63A9rsONuBE342bciltxO27Hj/Fj/AQVAH6Ke3APpuA+3If7cT8ewAN4EA9iFmbhITyEh/EwHsEjeBSP4jE8jifwOJ7Ek3gKT+MZPIPn8Byex+cSvm78Scm1KSCyKaFEjIgRsSJWxIk4kUfkEXlFXhEREREv4kU+kU/kF/lFQVFQJIgEUUQUEUYYQSKMAQARFVFRXBQXJUQJUUqUEk44kSgSRVlRVpQT5UR5cauoIG4TFUUl0dZVEVVEVdHOVRN3iuqiuqghaopaoraoLeqIOqKuqCvqiXqivqgvGogHREPRBwfgQyK7M03EUGwqhmEz0VzIiz/BWosR2Ea0Fe3EE2IUjsQOorVLEk+LjmIsdhJ/EePwWdFFTMCu4nnRTXQXPcQLoqdo43qJ3mIK9hF9xXTsJ/qLAWKgmIU1xXs4N3ct8apIEUPFMPGaWIivixHiDTFSjBKjxZtijHhLjBXjxHgxQaSKiWKSeFtMFu+IKWKqmCamizQxQ8wU74pZYraYI94Tc8X7Yp6YLxaIhSJdfCAWicUiQ3woloiPRKZYKpaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie1ih/hY7BSfiF3iU7Fb7BF7xWdin/hc7BdfiAPiS3FQfCWyxNfikPhGHBbfiiPiO3FUfC+OiePihPhBnBQ/ilPitDgjzopz4idxXvwsLggvQKIUUkolAxkjc8lYmVvGyatkHhlc/HSvlfHyOplPXi/zywKyoCwkE2RhWURqaaSVJENZVBaTUXmDLC5vlCVkSVlKlpZOlpGJ8iZZVt4sy8lbZHl5q6wgb5MVZSVZWVaRt8uq8g4JkV/3UUPWlLVkbXm3TIZ7ZF15r6wn75P15f2ygXxANpQPykbyIdlYPiybyEdkU/mobCabyxaypWwlH5Ot5eOyjWwr28knZHv5pOwgn5JJ8mnZUfqL3yLPyi7yOdlVPi+7ye6yh/xZXpBe9pK9JfQB2Ve+JPvJ/nKAHCgHyZflYPmKHCJflSlyqBwmX5PD5etyhHxDjpSj5Gj5phwj35Jj5Tg5Xk6QqXKinCTflpPlO3KKnCqnyekyTc6QAy7ONEfKf5j/9h/kD/ll75vlFrlVbsOLrZCfyF1yl9wtd8u9cq/cJ/fJ/XK/PCAPyIPyoMySWfKQPCQPy8PyiDwij8qj8pg8Ls/KH+RJ+aM8JU/L0/KsPCfPyfMXPwNQqISSSqlAxahcKlblVnHqKpVHXa3yqmtURF2r4tV1Kp+6XuVXBVRBVUglqMKqiNLKKKtIhaqoKqai6oZLVapSqrRyqoxKVDf9K/mquLpRlVAlf5N/qb7kv1NfK9VKtVatVRvVRrVT7VR71V51UB1UkkpSHVVH1Ul1Up1VZ9VFdVFdVVfVTXVTPVQP1VP1VL1UL5WsklVf9ZLqp/qrAWqgGqReVoPVYDVEDVEpKkUNU8PUcDVcjVAj1Eg1Uo1Wo9UYNUaNVWPVeDVepapUNUlNUpPVZDVFTVHT1DSVptLUTDVTzVKz1Bw1R81Vc9U8NU8tUAtUukpXi9QilaEy1BK1RGWqpWqpWq6Wq5VqpVqtVqu1aq1ar9arjWqjylRb1Ba1TW1TO9QOtVPtVLvULrVb7VZ71V61T+1T+9V+dUAdUAfVQZWlstQhdUgdVofVEXVEHVVH1TF1TJ1QJ9RJdVKdUqfUGXVGnVPn1Hl1Xl1QF7Jv+wIRiEAF2VfamCA2iA3igrggT5AnyBvkDSJBJIgP4oN8wfVB/qBAUDAoFCQEhYMigQ5MYANxsenR4IageHBjUCIoGZQKSgcuKBMkBjcFZYObg3LBLUH54NagQnBbUDGoFFQOqgS3B1WDO4JqwZ1B9eCuoEZQM6gV1A7uDuoE9wR1g3uDesF9Qf3g/qBB8EDQMHgwaBQ8FDQOHg6aBI8ETYNHg2ZB86BF0DJo9afO7/2pAo+7zbq3TtZ9dF/9ku6n++sBeqAepF/Wg/Ureoh+VafooXqYfk0P16/rEfoNPVKP0qP1m3qMfkuP1eP0eD1Bp+qJepJ+W0/W7+gpeqqepqfrND1Dz9Tv6ll6tp6j39Nz9ft6np6vF+iFOl1/oBfpxTpDf6iX6I90pl6ql+nleoVeqVfp1XqNXqvX6fV6g96oN+nNeoveqrfp7XqH/ljv1J/oXfpTvVvv0Xv1Z3qf/lzv11/oA/pLfVB/pbP01/qQ/kYf1t/qI/o7fVR/r4/p4/qE/kGf1D/qU/q0PqPP6nP6J31e/6wvaJ99c599eTfKKBNjYkysiTVxJs7kMXlMXpPXREzExJt4k8/kM/lNflPQFDQJJsEUMUVMNjJkipqiJmqiprgpbkqYEqaUKWWccSbRJJqypqwpZ8qZ8qa8qWAqmIqmoqlsKpvbze3mDnOHudPcae4yd5mapqapbWqbOqaOqWvqmnqmnqlv6psGpoFpaBqaRqaRaWwamyamiWlqmppmpplpYVqYVqaVaW1amzamjWln2pn2pr3pYDqYJJNkOpqOppPpZDqbzqaL6WK6mq6mm+lmepgepqfpaXqZXibZJJu+pq/pZ/qZAWaAGWQGmcFmsBlihpgUk2KGmWFmuBluRpgRZqQZZUZnnz7mLTPWjDPjzQSTalLNJDPJTDaTzRQzxUwz00yaSTMzzUwzy8wyc8wcM9fMNfPMPLPALDDpJt0sMotMhskwS8wSk2kyzTKzzKwwK8wqs8qsMWvMOrPObIANZpPZZLaYLWab2WZ2mB1mp9lpdpldZrfZbfaavWaf2Wf2m/3mgDlgDpqDJstkmUPmkDlsDpsj5og5ao6aY+aYOWFOmJPmpDllTpkz5ow5ZwpcvF56E2tz2zh7lc1jr7Z57TX2b+OCtpBNsIVtEattflvgN7Gx1pawJW0pW9o6W8Ym2pt+F1e0lWxlW8XebqvaO2y138V17D22rr3X1rP32dr27t/E9e39toF9xDZEBLDNbWPb0jaxj9im9lHbzDa3LWxL294+aTvYp2ySfdp2tM/8Ll5kF9s1dq1dZ9fb3XaPPWPP2sP2W3vO/mR72d52kH3ZDrav2CH2VZtih/4uHm3ftGPsW3asHWfH2wm/i6fZ6TbNzrAz7bt2lp39uzjdfmDn2gw7z863C+zCX+LsmjLsh3aJ/chm2gCW2eV2hV1pV9nV/7/W5Xaj3WQ32132U7vNbrc77Md256UbYbvH7rWf2X32c3vIfmMP2C/tQXvEZtmvf4mzj++I/c4etd/bY/a4PWF/sCftj+pSdvax/2B/thest0BIQJIUBRRDuSiWclMcXUV56GrKS9dQhK6leLqO8tH1lJ8KUEEqRAlUmIqQJkOWiEIqSsUoSjfQpfJKUWlyVIYS6SYqSzdTObqFytOtVIFuo4pUiSpTFbqdqtIdVI3upOp0F9WgmlSLatPdVIfuobp0L9WD+6g+3U8N6AFqSA9SI3qIGtPD1IQeoab0KDWj5tSCWlIreoxa0+PUhtpSO3qC2tOT1IGeoiR6mjrSM9SJ/kKd6VnqQs9RV3qeulF36kEvUE96kXpRb0qmPtSXXqJ+1J8G0EAaRC/TYHqFhtCrlEJDaRi9RsPpdRpBb9BIGkWj6U0aQ2/RWBpH42kCpdJEmkRv02R6h6bQVJpG0ymNZtBMepdm0WyaQ+/RXHqf5tF8WkALKZ0+oEW0mDLoQ1pCH1EmLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQx7STPqFd9Cntpj20lz6jffQ57acv6AB9SQfpK8qir+kQfUOH6Vs6Qt/53vQ9HaPjdIJ+oJP0I52i03SGztI5+onO0890gTxBiKEIZajCIIwJc4WxYe4wLrwqzBNeHeYNrwkj4bVhfHhdmC+8PswfFggLhoXChLBwWCTUoQltSGEYFg2LhdHwhrB4eGNYIiwZlgpLhy4sEyaGN4Vlw5vDcuEtYfnw1rBCeFtYMawUPnJflfD2sGp4R1gtvDOsHt4V1ghrhrXC2uHdYZ3wnrBueG9YL7wvLBfeHzYIHwgbhg+GjcKHwsbhw2GT8JGwafho2CxsHrYIW4atwsfC1uHjYZuwbdgufCJsHz4ZdgifCpPCp8OO4TO/rL9/8d9fnxz2CfuGL4Uvhd7fKxdEF0bTox9EF0UXRzOiH0aXRD+KZkaXRpdFl0dXRFdGV0VXR9dE10bXRddHN0Q3RjdFN0e9r50LHDrhpFMucDEul4t1uV2cu8rlcVe7vO4aF3HXunh3ncvnrnf5XQFX0BVyCa6wK+K0M846cqEr6oq5qLvBFXc3uhKupCvlSjvnyrhE19K1cq1ca/e4a+PaunbuCfeEe9I96Z5yT7mnXUf3jOvk/uI6u2ddF/ece84977q57q6He8H1dBPz/npOJru+rq/r5/q5AW6AG+QGucFusBvihrgUl+KGuWFuuBvuRrgRbqQb6Ua70W6MG+PGurFuvBvvUl2qm+QmucluspviprhpbppLc2luppvpZrlZrursX/cyz81zC9wCl+7S3SKXfc+Y4Za4JS7TZbplbplb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+F2uJ1up9vldrnd/ppfJ3X73H633x1wB9xB95XLcl+7Q+4bd9h9646479xR97075o67E+4Hd9L96E650+6MO+vOuZ/cefezu+C8S41MjEyKvB2ZHHknMiUyNTItMj2SFpkRmRl5NzIrMjsyJ/JeZG7k/ci8yPzIgsjCSHrkg8iiyOJIRuTDyJLIR5HMyNLIssjyyIrIyoj3hbeFvqgv5qP+Bl/c3+hL+JK+lC/tnS/jE/1Nvqy/2Zfzt/jy/lZfwd/mK/pKvrJ/1DfzzX0L39K38o/51v5x38a39e38E769f9J38E/5JP+07+if8Z38X3xn/6zv4p/zXf3zvpvv7nv4F3xP/6Lv5Xv7ZN/H9/Uv+X6+vx/gB/pB/mU/2L/ih/hXfYof6of51/xw/7of4d/wI/0oPzrmTT/m0iMyTPCpfqKf5N/2k/07cKef6qf56T7Nz/Az/bt+lp/t5/j3/Fz/vp/n5/sFfqFP9x/4RX6xz/Af+iX+I5/pl156qexX+dV+jV/r1/n1foPf6Df5zX6L3+q3+e1+h//Y7/Sf+F3+U7/b7/F7/Wd+n//c7/df+AP+S3/Qf+Wz/Nf+kP/GH/bf+iP+O3/Uf++P+eP+hP/Bn/Q/+lP+tD/jz/pz/id/3v/sL/D/WWOMMcYY+6dMvDwUv13z6+v8Pn+QI/5q474AcPX2Qll/vT77jnJD/l/H/UVC+wgAPN2760OXlho1kpOTL26bKSEoNh/g0t8EZYuBy/FSaAdPQhK0hbJ/WH9/0f0c/YP5o7cCxP1VTixcji/P/wUAJv/B/I89MXpRhfBM/H8x/3yAEsUu5+SGy/FSaPfL+5W2UO7v1F+g9T+oP/eXqQBt/ionD1yOL9efCI/DM5D0my0ZY4wxxhhjjLFf9ReVO196/rz0Lz7/6Pk8QV3OyQWX43/0fM4YY4wxxhhjjLEr79nuPZ56LCmpbed/fVDtv5X1Tw+awv/UzDz4w4H3AJe+ogDg35wQIHsg/5NHsfU/sq+Ui6fO365acdYH8L+jlX/G4Ar/YGKMMcYYY4z96S7f9P/26+pKFcQYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjOVA/4lfJ3alj5ExxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhi70v5fAAAA//85evzE") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x800000, &(0x7f0000000180)=ANY=[@ANYBLOB='utf8=1,iocharset=cp1255,uni_xlate=0,check=strict,utf8=0,uni_xlate=0,utf8=0,codepage=850,check=relaxed,shortname=winnt\x00\x00hortname=lower,shortname=win95,shortname=win95,nonumtail=0,shortname=mixed,uni_xlate=1,allow_utime=00000000000000000000777,\x00'], 0xff, 0x371, &(0x7f0000000280)="$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") mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x40) 1m11.558870917s ago: executing program 5 (id=2992): r0 = fanotify_init(0x200, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0xa) 1m9.720104764s ago: executing program 5 (id=3000): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r1, 0x6f2d, 0x7) close_range(r0, 0xffffffffffffffff, 0x0) 1m8.481175129s ago: executing program 5 (id=3005): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xb}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x19d, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e4}, 0x4890) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000001180)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 1m6.768522825s ago: executing program 5 (id=3011): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='-0'], 0x6) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) 1m5.345130729s ago: executing program 5 (id=3016): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x66, &(0x7f0000000200)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1, [{0x4, 0x1, "9595f429ae08"}]}}}}}}, 0x0) 1m3.091567649s ago: executing program 5 (id=3023): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r0, 0x6) symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00') 30.377911771s ago: executing program 4 (id=3090): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) close(r1) 29.134354251s ago: executing program 4 (id=3094): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x4008af21, &(0x7f0000000380)) 27.907374996s ago: executing program 4 (id=3098): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./bus\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae356940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d6b9374b6a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c1a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b52a0352a82c794995bbb97c82fcde79d14fb20e5127150de"], 0x4a, 0x2dc, &(0x7f0000000780)="$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") r0 = open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) finit_module(r0, 0x0, 0x0) 26.383716086s ago: executing program 4 (id=3102): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2], 0x48}}, 0x0) 24.432165593s ago: executing program 4 (id=3107): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) syz_open_dev$evdev(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount_setattr(0xffffffffffffffff, 0x0, 0x800, &(0x7f0000000040)={0x100009, 0x80, 0x0, {r0}}, 0x20) 23.227085357s ago: executing program 4 (id=3109): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0) 11.895473217s ago: executing program 2 (id=3130): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14090, &(0x7f0000001800)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRES32], 0xfd, 0x1501, &(0x7f00000002c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000300)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000001a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x5, 0x0, &(0x7f0000000240)) 9.407143689s ago: executing program 2 (id=3135): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1a8) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2000, 0x1a8) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) getdents64(r0, 0x0, 0x0) 7.56012541s ago: executing program 39 (id=3109): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0) 7.431465898s ago: executing program 2 (id=3139): writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000000)="064bd118c73472d271adcf9595bbb4ac34bf4dfea387e7047b558135d81715c68d306a0fd14fac94086eafdba35ac640b7", 0x31}], 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d3000000000000008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 7.374405452s ago: executing program 9 (id=3140): socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x28000600) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8003, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0xa, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff04, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x80000005, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x6, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x4000200, 0x3e, 0x88, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x9578, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x5, 0x6, 0x7fff, 0x6, 0x400, 0x10000401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8021, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x3, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x9, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x6, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x9, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80e2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x10000, 0x93b, 0x2000006, 0x1000006, 0x7ff, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x2, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff003, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1c, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.359375132s ago: executing program 6 (id=3141): r0 = memfd_create(&(0x7f0000000380)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdf\b~\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\x19\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2\xb6\x85$%nV\xd3*\x00`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) setresuid(0x0, 0xee00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 6.268514097s ago: executing program 2 (id=3142): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000010b507120300000000000109022400010000800009040000090300000009210001020122290009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000400)={0x0, 0x8, 0x29, {0x29, 0x10, "e549cc71827aefab54a21969fdacf97c9990bce66693b4ae5ad206dabdec2568e283f10be3c84d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) 6.149274456s ago: executing program 9 (id=3143): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xcbed, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) 4.987411833s ago: executing program 6 (id=3144): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x1, {0x2, 0xff, 0x3}, 0xfe}, 0x18) sendmmsg(r0, &(0x7f0000000100)=[{{&(0x7f0000000040)=@can={0x1d, r1, 0xc7}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000440)="86c9e246d7083d48", 0x8}, {0x0}], 0x2}}], 0x1, 0xf5) 4.387922349s ago: executing program 9 (id=3145): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f0000008b40)=[{{0x0, 0x15, &(0x7f0000000a40)=[{0x0, 0xff87}, {&(0x7f0000001540)="f2", 0x1}], 0x2}}], 0x1, 0x0) 3.540698136s ago: executing program 6 (id=3146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 3.310253436s ago: executing program 9 (id=3147): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r0 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x4c00, 0x3) 2.428617166s ago: executing program 2 (id=3148): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.332681234s ago: executing program 6 (id=3149): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x3, 0x12) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1, 0x12) 2.256978359s ago: executing program 9 (id=3150): r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000000c0)='=relative', &(0x7f0000000140)='./cgroup\x00', r1) 1.368538512s ago: executing program 2 (id=3151): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r0, 0x1, &(0x7f0000001300)=[0x0]) 1.195070099s ago: executing program 6 (id=3152): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000001c0)={0x1d, r1, 0x1, {0x0, 0x0, 0x3}}, 0x18) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="91", 0x1}, {0x0}], 0x2}}], 0x1, 0x0) 27.196891ms ago: executing program 6 (id=3153): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 9 (id=3162): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) sendfile(r0, r1, 0x0, 0x20000023892) kernel console output (not intermixed with test programs): wait:483 [ 1061.900916][T12435] Quota error (device loop8): write_blk: dquota write failed [ 1062.006787][T12435] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1062.097570][T12435] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.2165: Failed to acquire dquot type 0 [ 1062.193853][T12435] loop8: lost filesystem error report for type 5 error -117 [ 1062.195005][T12435] EXT4-fs error (device loop8): ext4_free_blocks:6718: comm syz.8.2165: Freeing blocks not in datazone - block = 0, count = 4096 [ 1062.367917][T12435] loop8: lost filesystem error report for type 5 error -117 [ 1062.378692][T12435] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.2165: Invalid inode bitmap blk 0 in block_group 0 [ 1062.400594][ T5689] Quota error (device loop8): do_check_range: Getting block 0 out of range 1-7 [ 1062.466929][ T5689] EXT4-fs error (device loop8): ext4_release_dquot:7070: comm kworker/u8:9: Failed to release dquot type 0 [ 1062.531793][ T5689] loop8: lost filesystem error report for type 5 error -117 [ 1062.546889][T12435] loop8: lost filesystem error report for type 5 error -117 [ 1062.684251][T12435] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 1062.853149][T12435] loop8: lost filesystem error report for type 5 error -117 [ 1062.867359][T12435] EXT4-fs (loop8): 1 orphan inode deleted [ 1063.045632][T12435] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1063.391876][T12435] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 1063.579152][T12435] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 1063.776942][T12460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2174'. [ 1064.707199][T11728] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1065.804381][T12476] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 1065.865317][T12476] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1066.545335][T12483] loop6: detected capacity change from 0 to 512 [ 1066.834004][T12483] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1066.884645][T12483] ext4 filesystem being mounted at /330/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1067.227019][ T5669] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1067.431935][ T5669] usb 10-1: Using ep0 maxpacket: 16 [ 1067.525400][ T5669] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1067.606620][ T5669] usb 10-1: config 0 has no interface number 0 [ 1067.664406][ T7885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1067.670051][T12494] loop2: detected capacity change from 0 to 512 [ 1067.681219][ T5669] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1067.753815][ T5669] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1067.814229][ T5669] usb 10-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1067.872904][ T5669] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.921581][T12494] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.2185: iget: bad i_size value: 38620345925642 [ 1067.922504][ T5669] usb 10-1: config 0 descriptor?? [ 1067.973498][T12496] loop4: detected capacity change from 0 to 256 [ 1068.008876][T12494] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1068.013294][T12494] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2185: couldn't read orphan inode 15 (err -117) [ 1068.023306][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1068.023413][ C1] EXT4-fs (loop2): initial error at time 1777692902: ext4_orphan_get:1397: inode 15 [ 1068.023597][ C1] EXT4-fs (loop2): last error at time 1777692902: ext4_orphan_get:1397: inode 15 [ 1068.120932][T12494] loop2: lost filesystem error report for type 5 error -117 [ 1068.238437][T12494] EXT4-fs (loop2): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1068.808706][ T5669] input: HID 28bd:0071 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.1/0003:28BD:0071.0013/input/input24 [ 1069.035469][ T5669] input: HID 28bd:0071 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.1/0003:28BD:0071.0013/input/input25 [ 1069.196227][ T5669] uclogic 0003:28BD:0071.0013: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.9-1/input1 [ 1069.269536][ T5577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 1069.350072][ T5669] usb 10-1: USB disconnect, device number 3 [ 1070.119360][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1070.132274][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1071.279129][T12509] loop4: detected capacity change from 0 to 4096 [ 1071.400651][T12509] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 1071.465193][T12513] fido_id[12513]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1071.863465][ T5667] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1072.102314][ T5667] usb 3-1: Using ep0 maxpacket: 8 [ 1072.183556][ T5667] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.232481][T12509] ntfs3(loop4): ino=1b, "file0" indx_read_ra [ 1072.247121][ T5667] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1072.315918][ T5667] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1072.379116][ T5667] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.479859][ T5667] usb 3-1: config 0 descriptor?? [ 1073.055688][ T5667] logitech 0003:046D:C20E.0014: rdesc size test failed for formula gp [ 1073.314832][ T5667] logitech 0003:046D:C20E.0014: hidraw0: USB HID v0.00 Device [HID 046d:c20e] on usb-dummy_hcd.2-1/input0 [ 1073.342417][ T5667] usb 3-1: USB disconnect, device number 13 [ 1073.514846][T12529] loop6: detected capacity change from 0 to 1024 [ 1073.554300][T12529] EXT4-fs: Ignoring removed orlov option [ 1073.695008][T12529] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 1073.762508][T12529] System zones: 0-1, 3-12 [ 1073.945836][T12529] EXT4-fs (loop6): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1074.948836][ T7885] EXT4-fs (loop6): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 1075.052513][ T5669] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1075.086496][T12536] fido_id[12536]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1075.241877][T12543] loop2: detected capacity change from 0 to 128 [ 1075.289089][ T5669] usb 9-1: Using ep0 maxpacket: 8 [ 1075.389139][ T5669] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1075.443229][ T5669] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.475758][T12543] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1075.545088][T12543] ext4 filesystem being mounted at /496/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1075.692625][T12543] fscrypt (loop2, inode 12): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 1075.736971][ T5669] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1075.791833][ T5669] pvrusb2: ********** [ 1075.824397][T12549] loop9: detected capacity change from 0 to 512 [ 1075.843715][ T5669] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1075.914083][ T5669] pvrusb2: Important functionality might not be entirely working. [ 1075.980159][ T5669] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1076.072029][ T5669] pvrusb2: ********** [ 1076.119329][ T2349] pvrusb2: Invalid write control endpoint [ 1076.434982][T12556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2203'. [ 1076.561833][ T5577] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1076.594749][T12556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2203'. [ 1076.681699][ T5669] usb 9-1: USB disconnect, device number 2 [ 1077.014964][ T2349] pvrusb2: Invalid write control endpoint [ 1077.054800][ T2349] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1077.141596][ T2349] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1077.225295][ T2349] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1077.299807][ T2349] pvrusb2: Device being rendered inoperable [ 1077.344899][ T2349] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1077.405301][ T2349] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1077.475673][ T2349] pvrusb2: Attached sub-driver cx25840 [ 1077.518554][ T2349] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1077.601008][ T2349] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1077.652134][T12561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2204'. [ 1077.743962][T12561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2204'. [ 1080.012049][T12574] loop2: detected capacity change from 0 to 4096 [ 1080.096823][T12574] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 1080.478350][T12582] loop6: detected capacity change from 0 to 2048 [ 1080.699883][T12582] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1080.721857][T12582] ext4 filesystem being mounted at /338/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1080.853487][T12574] ntfs3(loop2): ino=1b, "file0" indx_read_ra [ 1081.000244][T12582] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2212: bg 0: block 345: padding at end of block bitmap is not set [ 1081.148963][T12582] EXT4-fs (loop6): Remounting filesystem read-only [ 1081.858646][ T7885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1083.818086][ T5669] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1084.030250][ T5669] usb 3-1: Using ep0 maxpacket: 32 [ 1084.088701][ T5669] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1084.145024][ T5669] usb 3-1: config 0 has no interface number 0 [ 1084.201863][ T5669] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1084.258684][ T5669] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.309267][ T5669] usb 3-1: Product: syz [ 1084.327406][ T5669] usb 3-1: Manufacturer: syz [ 1084.383610][ T5669] usb 3-1: SerialNumber: syz [ 1084.465377][ T5669] usb 3-1: config 0 descriptor?? [ 1084.865369][ T5669] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1084.921791][ T5669] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1085.032514][ T5669] usb 3-1: USB disconnect, device number 14 [ 1085.409824][ T5667] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1085.586772][ T5667] usb 5-1: Using ep0 maxpacket: 16 [ 1085.653856][ T5667] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1085.688545][ T5667] usb 5-1: config 0 has no interface number 0 [ 1085.717858][ T5667] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1085.772569][ T5667] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1085.814115][ T5667] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1085.871959][ T5667] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.952808][ T5667] usb 5-1: config 0 descriptor?? [ 1086.873099][ T5667] input: HID 28bd:0071 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.0015/input/input26 [ 1087.150174][ T5667] input: HID 28bd:0071 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.0015/input/input27 [ 1087.308905][ T5667] uclogic 0003:28BD:0071.0015: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.4-1/input1 [ 1087.466830][ T5667] usb 5-1: USB disconnect, device number 2 [ 1089.353594][T12632] fido_id[12632]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1089.534390][T12634] loop6: detected capacity change from 0 to 2048 [ 1089.700413][T12643] loop2: detected capacity change from 0 to 512 [ 1089.994614][T12643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1090.097938][T12651] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1090.111021][T12643] ext4 filesystem being mounted at /503/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1090.133974][T12646] loop9: detected capacity change from 0 to 764 [ 1090.370464][T12646] rock: directory entry would overflow storage [ 1090.427673][T12643] EXT4-fs (loop2): shut down requested (0) [ 1090.462902][T12646] rock: sig=0x5245, size=8, remaining=5 [ 1090.618600][T12651] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1090.737291][T12651] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1090.844840][T12651] Remounting filesystem read-only [ 1090.913432][T12634] NILFS (loop6): mounting fs with errors [ 1091.120781][T12634] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 1091.231277][T12634] Remounting filesystem read-only [ 1091.347527][ T5577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1092.293046][ T7885] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 1093.942249][ T5667] kernel write not supported for file /comedi4 (pid: 5667 comm: kworker/0:3) [ 1095.012154][T12684] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2240'. [ 1095.017577][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2242'. [ 1095.167149][T12687] netlink: 436 bytes leftover after parsing attributes in process `syz.2.2243'. [ 1095.215133][T12687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2243'. [ 1095.792430][T12683] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1096.750071][T12696] loop2: detected capacity change from 0 to 2048 [ 1096.954532][T12700] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1097.398213][ T5669] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1097.616857][ T5669] usb 9-1: Using ep0 maxpacket: 16 [ 1097.726906][ T5669] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1097.802978][ T5669] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1097.894447][ T5669] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1097.970042][ T5669] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.081388][ T5669] usb 9-1: config 0 descriptor?? [ 1098.932235][ T5669] mcp2221 0003:04D8:00DD.0016: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 1099.318082][ T5669] usb 9-1: USB disconnect, device number 3 [ 1099.404595][T12718] loop4: detected capacity change from 0 to 128 [ 1101.583944][T12736] loop2: detected capacity change from 0 to 256 [ 1101.667816][T12736] exfat: Deprecated parameter 'namecase' [ 1101.955320][T12736] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x7324f892, utbl_chksum : 0xe619d30d) [ 1102.897853][T12725] Bluetooth: hci6: command 0x0406 tx timeout [ 1102.905359][T12725] Bluetooth: hci5: command 0x0406 tx timeout [ 1103.238471][T12749] loop9: detected capacity change from 0 to 64 [ 1103.409896][T12753] loop4: detected capacity change from 0 to 256 [ 1103.468710][T12749] Trying to free block not in datazone [ 1103.486875][T12753] exfat: Deprecated parameter 'utf8' [ 1103.493203][T12753] exfat: Deprecated parameter 'namecase' [ 1103.737361][T12753] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36a12e94, utbl_chksum : 0xe619d30d) [ 1104.408056][T12759] loop2: detected capacity change from 0 to 16 [ 1104.502731][T12759] erofs (device loop2): mounted with root inode @ nid 36. [ 1104.704222][T12759] erofs (device loop2): invalid de[0].nameoff 87 @ nid 36 [ 1108.017896][ T5567] Bluetooth: hci1: command 0x0406 tx timeout [ 1109.910729][T12792] loop8: detected capacity change from 0 to 4096 [ 1111.009992][T12792] ntfs3(loop8): ino=3, ntfs_set_state failed, -22. [ 1111.124273][T12792] ntfs3(loop8): Failed to initialize $Extend/$ObjId. [ 1112.138682][ T159] ntfs3(loop8): ino=3, ntfs3_write_inode failed, -22. [ 1112.193389][T11728] ntfs3(loop8): ino=3, ntfs_set_state failed, -22. [ 1112.276571][T11728] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1112.356819][T11728] ntfs3(loop8): ino=3, ntfs_set_state failed, -22. [ 1112.443521][ T5689] ntfs3(loop8): ino=3, ntfs3_write_inode failed, -22. [ 1112.749166][T12826] program syz.9.2291 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1114.855133][T12844] loop8: detected capacity change from 0 to 128 [ 1115.074317][T12844] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 1115.493717][T12852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2298'. [ 1115.538222][T12852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2298'. [ 1116.552672][ T56] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 1118.517714][T12866] loop8: detected capacity change from 0 to 128 [ 1123.523075][T12903] loop9: detected capacity change from 0 to 4096 [ 1129.425130][T12953] loop9: detected capacity change from 0 to 64 [ 1131.000952][T12340] Bluetooth: Wrong link type (-22) [ 1131.602220][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1131.623669][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1131.883690][T12974] loop2: detected capacity change from 0 to 1024 [ 1131.991532][T12974] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1132.072819][T12974] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1132.200983][T12974] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1132.261483][T12974] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.2335: Freeing blocks not in datazone - block = 0, count = 4096 [ 1132.287483][T12974] loop2: lost filesystem error report for type 5 error -117 [ 1132.296403][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1132.310836][ C0] EXT4-fs (loop2): initial error at time 1777692966: ext4_free_blocks:6718 [ 1132.319988][ C0] EXT4-fs (loop2): last error at time 1777692966: ext4_free_blocks:6718 [ 1132.329322][T12974] EXT4-fs (loop2): Remounting filesystem read-only [ 1132.336550][T12974] EXT4-fs (loop2): 1 orphan inode deleted [ 1132.394236][T12974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1133.452795][ T5577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1134.277830][T12995] program syz.6.2340 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1136.159279][T11071] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1136.359219][T11071] usb 10-1: Using ep0 maxpacket: 16 [ 1136.417762][T11071] usb 10-1: config 0 has an invalid interface number: 251 but max is 0 [ 1136.475624][T11071] usb 10-1: config 0 has no interface number 0 [ 1136.508525][T11071] usb 10-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1136.570335][T11071] usb 10-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1136.771209][T11071] usb 10-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1136.806042][T11073] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 1136.858464][T11071] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.898681][T11071] usb 10-1: Product: syz [ 1136.908078][T11071] usb 10-1: Manufacturer: syz [ 1136.927099][T11071] usb 10-1: SerialNumber: syz [ 1136.964186][T11071] usb 10-1: config 0 descriptor?? [ 1137.014588][T13013] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1137.040570][T11073] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1137.057772][T13013] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1137.097838][T11073] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1137.179351][T11073] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1137.277784][T11073] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1137.331585][T11073] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1137.413915][T11073] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1137.423234][T13013] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1137.474196][T13013] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1137.486679][T11073] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1137.578201][T11073] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1137.640988][T11073] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1137.732723][T11073] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1137.829341][T11073] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1137.863543][T11073] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1137.924967][T11073] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1137.963840][T11071] asix 10-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 1137.975676][T13026] loop4: detected capacity change from 0 to 256 [ 1137.982597][T11073] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1138.014128][T11071] asix 10-1:0.251: probe with driver asix failed with error -524 [ 1138.023207][T11073] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1138.161218][T11073] usb 3-1: string descriptor 0 read error: -22 [ 1138.180167][T11071] usb 10-1: USB disconnect, device number 4 [ 1138.212728][T11073] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1138.248359][T13026] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 1138.295823][T11073] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.515603][T11073] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1138.538611][ T29] audit: type=1800 audit(1777692972.665:39): pid=13026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2352" name="file1" dev="loop4" ino=1048768 res=0 errno=0 [ 1138.724112][T13030] loop6: detected capacity change from 0 to 256 [ 1138.774223][T11390] usb 3-1: USB disconnect, device number 15 [ 1138.871715][T13030] exfat: Deprecated parameter 'utf8' [ 1138.903119][T13030] exfat: Deprecated parameter 'utf8' [ 1139.249394][T13030] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x33bfe6af, utbl_chksum : 0xe619d30d) [ 1141.709711][T13051] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2359'. [ 1141.738181][T13052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2361'. [ 1141.809741][T13052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2361'. [ 1142.044712][ T5689] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1142.104185][ T5689] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1142.175653][ T5689] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1142.232944][ T5689] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1142.839301][T11390] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1143.056876][T11390] usb 5-1: Using ep0 maxpacket: 32 [ 1143.114409][T11390] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1143.165926][T11390] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1143.200041][T11390] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1143.227846][T11390] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.273142][T13067] loop2: detected capacity change from 0 to 512 [ 1143.296182][T11390] usb 5-1: config 0 descriptor?? [ 1143.397968][T11390] hub 5-1:0.0: USB hub found [ 1143.413290][T13067] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.2364: inode has both inline data and extents flags [ 1143.539391][T13067] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1143.546601][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1143.562968][ C0] EXT4-fs (loop2): initial error at time 1777692977: ext4_orphan_get:1397: inode 15 [ 1143.572944][ C0] EXT4-fs (loop2): last error at time 1777692977: ext4_orphan_get:1397: inode 15 [ 1143.671181][T13067] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2364: couldn't read orphan inode 15 (err -117) [ 1143.751905][T11390] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1143.779520][T13067] loop2: lost filesystem error report for type 5 error -117 [ 1143.825564][T13067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1144.380151][T11390] hid-generic 0003:046D:C31C.0017: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 1144.531843][T11390] usb 5-1: USB disconnect, device number 3 [ 1144.575819][T13075] vivid-000: disconnect [ 1144.633245][ T5577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1144.645038][T13073] vivid-000: reconnect [ 1145.016709][T13078] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2365'. [ 1145.940637][T13077] fido_id[13077]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1146.021886][T13084] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1146.052439][T13084] syzkaller1: linktype set to 825 [ 1147.724880][T13098] netlink: 'syz.4.2374': attribute type 29 has an invalid length. [ 1147.772796][T13101] loop2: detected capacity change from 0 to 256 [ 1147.833937][T13103] netlink: 'syz.4.2374': attribute type 29 has an invalid length. [ 1147.952575][T13098] netlink: 'syz.4.2374': attribute type 29 has an invalid length. [ 1148.102709][T13101] FAT-fs (loop2): Directory bread(block 64) failed [ 1148.143420][T13101] FAT-fs (loop2): Directory bread(block 65) failed [ 1148.181122][T13101] FAT-fs (loop2): Directory bread(block 66) failed [ 1148.228222][T13101] FAT-fs (loop2): Directory bread(block 67) failed [ 1148.268953][T13101] FAT-fs (loop2): Directory bread(block 68) failed [ 1148.316030][T13101] FAT-fs (loop2): Directory bread(block 69) failed [ 1148.377347][T13101] FAT-fs (loop2): Directory bread(block 70) failed [ 1148.412144][T13101] FAT-fs (loop2): Directory bread(block 71) failed [ 1148.457614][T13101] FAT-fs (loop2): Directory bread(block 72) failed [ 1148.516087][T13101] FAT-fs (loop2): Directory bread(block 73) failed [ 1149.343863][T13111] loop6: detected capacity change from 0 to 512 [ 1149.595461][T13115] loop8: detected capacity change from 0 to 128 [ 1149.790519][T13111] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.2376: iget: bad i_size value: 38620345925642 [ 1149.863318][T13111] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1149.866483][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1149.882849][ C0] EXT4-fs (loop6): initial error at time 1777692983: ext4_orphan_get:1397: inode 15 [ 1149.892809][ C0] EXT4-fs (loop6): last error at time 1777692983: ext4_orphan_get:1397: inode 15 [ 1149.916919][T13111] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.2376: couldn't read orphan inode 15 (err -117) [ 1150.077525][T13111] loop6: lost filesystem error report for type 5 error -117 [ 1150.122479][T13111] EXT4-fs (loop6): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1152.413743][ T7885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 1153.282922][T13141] loop9: detected capacity change from 0 to 512 [ 1153.365895][T13141] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1153.610935][T13141] EXT4-fs (loop9): 1 truncate cleaned up [ 1153.700518][T13141] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1154.614537][T11795] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1154.808455][T13151] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2393'. [ 1154.891712][T13151] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2393'. [ 1154.953649][T13151] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2393'. [ 1156.679175][T13168] ip6erspan0: tun_chr_ioctl cmd 1074025681 [ 1158.941126][T13185] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1160.292554][T13202] loop4: detected capacity change from 0 to 256 [ 1160.320517][ T5669] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 1160.450570][T13201] loop2: detected capacity change from 0 to 512 [ 1160.485330][T13202] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1160.542570][ T5669] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1160.579982][ T5669] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1160.636839][ T5669] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1160.680834][T13201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1160.771149][T13201] ext4 filesystem being mounted at /544/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1160.789080][ T5669] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1160.841406][ T5669] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1160.843052][T13202] exFAT-fs (loop4): start_clu is invalid cluster(0xffffffff) [ 1160.909466][T13202] exFAT-fs (loop4): failed to test cluster bit(11) [ 1160.952900][ T5669] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1160.964045][T13209] vivid-007: disconnect [ 1161.021247][ T5669] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1161.070040][T13207] vivid-007: reconnect [ 1161.144907][ T5669] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1161.211302][ T5669] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1161.277459][ T5669] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1161.390769][ T5669] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1161.430962][ T5669] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1161.509803][ T5669] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1161.557205][ T5577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1161.577131][ T5669] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1161.590010][ T5669] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1161.704662][ T5669] usb 10-1: string descriptor 0 read error: -22 [ 1161.713725][ T5669] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1161.759146][ T5669] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.984007][ T5669] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1162.225462][ T5669] usb 10-1: USB disconnect, device number 5 [ 1162.703618][T13217] loop2: detected capacity change from 0 to 512 [ 1163.041060][T13217] EXT4-fs (loop2): 1 orphan inode deleted [ 1163.060652][ T5689] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1163.119898][T13217] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1163.125791][ T5689] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:9: Failed to release dquot type 1 [ 1163.191570][T13217] ext4 filesystem being mounted at /545/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1163.988873][ T5577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1166.722066][T13029] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1166.999225][T13029] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1167.044247][T13029] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.124535][T13029] usb 5-1: config 0 descriptor?? [ 1167.224863][T13029] cp210x 5-1:0.0: cp210x converter detected [ 1167.738581][T13029] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1167.862090][T13029] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1168.037175][ T5669] usb 5-1: USB disconnect, device number 4 [ 1168.120240][ T5669] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1168.254515][ T5669] cp210x 5-1:0.0: device disconnected [ 1169.772896][T13270] loop9: detected capacity change from 0 to 512 [ 1169.857276][T13270] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1169.931380][T13029] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 1169.997064][T13270] EXT4-fs (loop9): 1 truncate cleaned up [ 1170.048483][T13270] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1170.219335][T13270] EXT4-fs (loop9): Online defrag not supported for non-extent files [ 1170.290813][T13029] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1170.341671][T13029] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1170.414061][T13029] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1170.484239][T13029] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1170.581765][T13029] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1170.653232][T13029] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1170.729498][T13029] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1170.789007][T13029] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1170.836703][T13029] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1170.941515][T13029] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1171.042872][T13029] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1171.054338][T11795] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1171.116797][T13029] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1171.204526][T13029] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1171.321626][T13029] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1171.410670][T13029] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1171.551786][T13029] usb 9-1: string descriptor 0 read error: -22 [ 1171.607986][T13029] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1171.660193][T13029] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.890208][T13029] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1172.244553][T13286] loop2: detected capacity change from 0 to 256 [ 1172.351220][T13029] usb 9-1: USB disconnect, device number 4 [ 1172.385917][T13286] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1172.616117][ T29] audit: type=1800 audit(1777693006.745:40): pid=13286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2435" name="file1" dev="loop2" ino=1048773 res=0 errno=0 [ 1175.600443][T13310] loop8: detected capacity change from 0 to 512 [ 1175.713217][T13310] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1175.994760][T13310] EXT4-fs (loop8): 1 truncate cleaned up [ 1176.138539][T13318] loop9: detected capacity change from 0 to 7 [ 1176.139563][T13310] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1176.215756][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1176.225447][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1176.240000][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1176.249679][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1176.267545][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1176.277430][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1176.286630][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1176.296460][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1176.325490][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1176.335289][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1176.345738][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1176.355538][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1176.398974][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1176.408661][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1176.438549][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1176.448262][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1176.457830][T13318] ldm_validate_partition_table(): Disk read failed. [ 1176.487341][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1176.497130][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1176.529543][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1176.539412][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1176.568234][T13318] Dev loop9: unable to read RDB block 0 [ 1176.653311][T13318] loop9: unable to read partition table [ 1176.738915][T13318] loop9: partition table beyond EOD, truncated [ 1176.774072][T13318] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 1177.901085][T13332] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1178.010062][T11728] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1178.307623][T13029] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 1178.578370][T13029] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1178.626974][T13029] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1178.675997][T13029] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1178.739068][T13029] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1178.807755][T13029] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1178.888166][T13029] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1178.934394][T13029] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1178.998914][T13029] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1179.072948][T13029] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1179.145058][T13029] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1179.240818][T13029] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1179.285654][T13029] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1179.328798][T13029] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1179.364128][ T29] audit: type=1326 audit(1777693013.495:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13341 comm="syz.8.2452" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe900c code=0x7ffc0000 [ 1179.380664][T13029] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1179.470642][T13029] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1179.523508][ T29] audit: type=1326 audit(1777693013.495:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13341 comm="syz.8.2452" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe900c code=0x7ffc0000 [ 1179.643306][T13029] usb 5-1: string descriptor 0 read error: -22 [ 1179.664814][ T29] audit: type=1326 audit(1777693013.545:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13341 comm="syz.8.2452" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7fe900c code=0x7ffc0000 [ 1179.677918][T13029] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1179.793501][T13029] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.839347][ T29] audit: type=1326 audit(1777693013.545:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13341 comm="syz.8.2452" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7fe900c code=0x7ffc0000 [ 1180.047010][T13029] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1180.404660][T13029] usb 5-1: USB disconnect, device number 5 [ 1180.980091][T13353] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2454'. [ 1182.210686][T13361] loop4: detected capacity change from 0 to 2048 [ 1182.383300][T13361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1182.402984][T13361] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1183.005184][T13371] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2461'. [ 1183.183647][T11722] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1185.650883][T13386] loop2: detected capacity change from 0 to 32768 [ 1185.666201][T13386] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2466 (13386) [ 1185.791480][T13386] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1185.802409][T13386] BTRFS info (device loop2): using crc32c checksum algorithm [ 1185.973824][T13386] BTRFS info (device loop2): enabling ssd optimizations [ 1185.988406][T13386] BTRFS info (device loop2): turning on async discard [ 1185.995437][T13386] BTRFS info (device loop2): enabling free space tree [ 1186.809835][ T5577] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1187.713585][T13418] tap0: tun_chr_ioctl cmd 1074025677 [ 1187.802365][T13418] tap0: linktype set to 6 [ 1188.235631][T13427] loop9: detected capacity change from 0 to 16 [ 1188.323933][T13427] erofs (device loop9): mounted with root inode @ nid 36. [ 1188.483581][ T29] audit: type=1800 audit(1777693022.585:45): pid=13427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2475" name="file1" dev="loop9" ino=86 res=0 errno=0 [ 1190.487470][T13443] loop4: detected capacity change from 0 to 8 [ 1191.709193][T13453] loop8: detected capacity change from 0 to 256 [ 1191.937233][T13453] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1192.409019][T13457] exFAT-fs (loop8): start_clu is invalid cluster(0xffffffff) [ 1192.516205][T13457] exFAT-fs (loop8): failed to test cluster bit(11) [ 1193.000160][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1193.009448][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1193.148596][T13461] loop9: detected capacity change from 0 to 128 [ 1193.246927][T13461] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1193.322373][T13461] hpfs: filesystem error: improperly stopped [ 1193.402243][T13461] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1193.476996][T13461] hpfs: You really don't want any checks? You are crazy... [ 1193.498629][T13464] loop2: detected capacity change from 0 to 256 [ 1193.551843][T13461] hpfs: hpfs_map_sector(): read error [ 1193.615129][T13461] hpfs: code page support is disabled [ 1193.660558][T13461] hpfs: hpfs_map_4sectors(): unaligned read [ 1193.734499][T13461] hpfs: hpfs_map_4sectors(): unaligned read [ 1193.771838][T13461] hpfs: filesystem error: unable to find root dir [ 1193.829641][T13464] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011e09, chksum : 0x7e84ed8f, utbl_chksum : 0xe619d30d) [ 1195.778569][T13483] loop8: detected capacity change from 0 to 512 [ 1195.890689][T13483] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1196.112942][T13483] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.2494: bad orphan inode 131083 [ 1196.267556][T13483] loop8: lost filesystem error report for type 5 error -117 [ 1196.285826][T13483] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1197.102289][T13495] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2496'. [ 1197.154759][T13497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2497'. [ 1197.197122][T13495] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2496'. [ 1197.537243][T11728] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1199.235286][T13506] loop4: detected capacity change from 0 to 4096 [ 1199.507269][T13517] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1199.820084][T13518] loop2: detected capacity change from 0 to 1024 [ 1200.172297][T13518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1200.652118][T13526] netlink: 27 bytes leftover after parsing attributes in process `syz.9.2508'. [ 1201.113064][ T5577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1203.197794][T13545] netlink: 'syz.2.2518': attribute type 10 has an invalid length. [ 1203.408656][T13545] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1203.969235][T13554] loop8: detected capacity change from 0 to 8 [ 1204.173454][T12050] udevd[12050]: incorrect cramfs checksum on /dev/loop8 [ 1205.788802][T13569] tmpfs: Cannot change global quota limit on remount [ 1206.821413][T13029] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1206.964845][T13581] loop9: detected capacity change from 0 to 7 [ 1206.981602][ C0] blk_print_req_error: 11 callbacks suppressed [ 1206.981693][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1206.997833][ C0] buffer_io_error: 11 callbacks suppressed [ 1206.997914][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1207.037423][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1207.047275][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1207.057101][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1207.066848][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1207.090642][T13029] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1207.095483][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1207.108503][T13029] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1207.108636][T13029] usb 3-1: config 220 descriptor has 1 excess byte, ignoring [ 1207.108771][T13029] usb 3-1: config 220 has no interface number 2 [ 1207.117772][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1207.123557][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1207.152937][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1207.161434][T13029] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1207.193851][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1207.203502][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1207.219534][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1207.229056][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1207.238579][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1207.248230][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1207.249713][T13029] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1207.256916][T13581] ldm_validate_partition_table(): Disk read failed. [ 1207.266201][T13029] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1207.288440][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1207.291102][T13029] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1207.298207][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1207.320488][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1207.330175][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1207.345058][T13581] Dev loop9: unable to read RDB block 0 [ 1207.351591][T13029] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1207.363151][T13581] loop9: unable to read partition table [ 1207.363439][T13029] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.372892][T13581] loop9: partition table beyond EOD, truncated [ 1207.387200][T13581] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 1207.413568][T13029] usb 3-1: Product: syz [ 1207.450540][T13029] usb 3-1: Manufacturer: syz [ 1207.482689][T13029] usb 3-1: SerialNumber: syz [ 1207.892896][T13029] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1207.941191][T13029] uvcvideo 3-1:220.0: No valid video chain found. [ 1207.973372][T13029] usb 3-1: selecting invalid altsetting 0 [ 1208.069301][T13029] usb 3-1: selecting invalid altsetting 0 [ 1208.104590][T13029] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1208.197060][T13029] usb 3-1: USB disconnect, device number 16 [ 1208.548994][T13586] vivid-006: disconnect [ 1208.592000][T13585] vivid-006: reconnect [ 1208.844706][T13588] loop9: detected capacity change from 0 to 764 [ 1210.175478][T13598] loop6: detected capacity change from 0 to 64 [ 1210.256841][T13598] minix: block size(59136) > page size(4096) not supported by filesystem [ 1210.496099][ T29] audit: type=1800 audit(1777693044.615:46): pid=13598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2541" name="file1" dev="loop6" ino=5 res=0 errno=0 [ 1210.878828][ T807] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1210.961825][T13607] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 1211.069214][ T807] usb 9-1: Using ep0 maxpacket: 16 [ 1211.152808][ T807] usb 9-1: config 1 has an invalid interface number: 105 but max is 0 [ 1211.195054][ T807] usb 9-1: config 1 has no interface number 0 [ 1211.232385][ T807] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1211.305285][ T807] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1211.387298][ T807] usb 9-1: config 1 interface 105 has no altsetting 0 [ 1211.501974][ T807] usb 9-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1211.533490][ T807] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1211.555827][ T807] usb 9-1: Product: syz [ 1211.587088][ T807] usb 9-1: Manufacturer: syz [ 1211.611376][ T807] usb 9-1: SerialNumber: syz [ 1211.690021][T13603] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1211.752766][T13603] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1212.320199][T13603] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1212.358437][T13603] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1212.499624][T13615] geneve2: entered promiscuous mode [ 1212.654775][ T807] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 1212.735714][ T807] aqc111 9-1:1.105: probe with driver aqc111 failed with error -71 [ 1212.855528][ T807] usb 9-1: USB disconnect, device number 5 [ 1212.860422][T13619] loop6: detected capacity change from 0 to 2640 [ 1213.000204][T13620] loop6: detected capacity change from 2640 to 524288000 [ 1213.037688][T13619] buffer_io_error: 11 callbacks suppressed [ 1213.037780][T13619] Buffer I/O error on dev loop6, logical block 0, async page read [ 1213.137732][T13619] Buffer I/O error on dev loop6, logical block 0, async page read [ 1213.177044][T13619] Buffer I/O error on dev loop6, logical block 0, async page read [ 1213.195588][T13619] Buffer I/O error on dev loop6, logical block 0, async page read [ 1213.235610][T13619] Buffer I/O error on dev loop6, logical block 0, async page read [ 1213.267052][T13619] Buffer I/O error on dev loop6, logical block 0, async page read [ 1213.329021][T13619] Buffer I/O error on dev loop6, logical block 0, async page read [ 1213.414447][T13619] Buffer I/O error on dev loop6, logical block 0, async page read [ 1213.482101][T13619] ldm_validate_partition_table(): Disk read failed. [ 1213.505189][T13619] Buffer I/O error on dev loop6, logical block 0, async page read [ 1213.558652][T13619] Buffer I/O error on dev loop6, logical block 0, async page read [ 1213.655670][T13619] Dev loop6: unable to read RDB block 0 [ 1213.695487][T13619] loop6: unable to read partition table [ 1213.743711][T13619] loop_reread_partitions: partition scan of loop6 (ir¡c‡’ úÒVUŸX¯ÃG¨½›˜ñZtM<IÆ i8NL í á·ùWû@©àQ6ÒÝ%ž…û¥¡Úè) failed (rc=-5) [ 1215.081861][T13632] loop2: detected capacity change from 0 to 2048 [ 1215.214933][T13632] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1219.011844][T13671] loop2: detected capacity change from 0 to 256 [ 1219.110744][T13671] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1219.138061][T13029] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1219.318099][T13029] usb 10-1: Using ep0 maxpacket: 32 [ 1219.365955][T13029] usb 10-1: config 51 has an invalid interface number: 208 but max is 0 [ 1219.406967][T13029] usb 10-1: config 51 has no interface number 0 [ 1219.437548][T13029] usb 10-1: config 51 interface 208 has no altsetting 0 [ 1219.494522][T13029] usb 10-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=8b.70 [ 1219.545873][T13029] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.574238][T13029] usb 10-1: Product: syz [ 1219.610454][T13029] usb 10-1: Manufacturer: syz [ 1219.639563][T13029] usb 10-1: SerialNumber: syz [ 1220.643979][T13029] f81534a_ctrl 10-1:51.208: failed to enable ports: -71 [ 1220.686920][T13029] f81534a_ctrl 10-1:51.208: probe with driver f81534a_ctrl failed with error -71 [ 1220.852974][T13029] usb 10-1: USB disconnect, device number 6 [ 1221.791018][T13691] netlink: 'syz.4.2581': attribute type 10 has an invalid length. [ 1222.058115][T13691] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1222.683778][T13699] netlink: 'syz.2.2586': attribute type 1 has an invalid length. [ 1222.715337][T13699] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2586'. [ 1223.540939][T13704] loop9: detected capacity change from 0 to 512 [ 1223.564343][T13704] EXT4-fs: Ignoring removed orlov option [ 1223.591299][T13704] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1223.644063][T13704] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1223.711571][T13707] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2589'. [ 1223.739977][T13709] loop8: detected capacity change from 0 to 512 [ 1223.789979][T13704] EXT4-fs (loop9): 1 truncate cleaned up [ 1223.896128][T13704] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1224.058466][T13709] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1224.067143][T13704] EXT4-fs (loop9): shut down requested (2) [ 1224.180843][T13709] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1224.683358][T11795] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1224.970581][T11728] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1225.997414][T13730] loop2: detected capacity change from 0 to 128 [ 1226.542318][T13734] loop4: detected capacity change from 0 to 256 [ 1226.612693][T13734] exfat: Deprecated parameter 'utf8' [ 1226.817264][T13734] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1227.618220][T13029] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1227.981115][T13029] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1228.047408][T13739] loop9: detected capacity change from 0 to 32768 [ 1228.061001][T13739] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2603 (13739) [ 1228.101004][T13029] usb 3-1: config 0 has no interface number 0 [ 1228.156502][T13739] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1228.167270][T13739] BTRFS info (device loop9): using crc32c checksum algorithm [ 1228.267280][T13029] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1228.365189][T13739] BTRFS info (device loop9): enabling ssd optimizations [ 1228.370043][T13029] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.372565][T13739] BTRFS info (device loop9): turning on async discard [ 1228.389638][T13739] BTRFS info (device loop9): enabling free space tree [ 1228.470679][T13029] usb 3-1: Product: syz [ 1228.495971][T13029] usb 3-1: Manufacturer: syz [ 1228.510553][T13029] usb 3-1: SerialNumber: syz [ 1228.531052][T13029] usb 3-1: config 0 descriptor?? [ 1228.661223][T11795] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1228.939811][T13029] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1229.081381][T13029] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1229.184657][T13029] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1229.226084][T13029] usb 3-1: media controller created [ 1229.711700][T13029] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1230.288675][T13029] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 1230.498813][T13769] loop6: detected capacity change from 0 to 2640 [ 1230.552920][T13769] buffer_io_error: 7 callbacks suppressed [ 1230.553007][T13769] Buffer I/O error on dev loop6, logical block 0, async page read [ 1230.705227][T13770] loop6: detected capacity change from 2640 to 524288000 [ 1230.760608][T13769] Buffer I/O error on dev loop6, logical block 0, async page read [ 1230.879904][T13769] Buffer I/O error on dev loop6, logical block 0, async page read [ 1230.927220][T13769] Buffer I/O error on dev loop6, logical block 0, async page read [ 1230.952223][T13769] Buffer I/O error on dev loop6, logical block 0, async page read [ 1231.003437][T13769] Buffer I/O error on dev loop6, logical block 0, async page read [ 1231.038949][T13769] Buffer I/O error on dev loop6, logical block 0, async page read [ 1231.095383][T13769] Buffer I/O error on dev loop6, logical block 0, async page read [ 1231.167027][T13769] ldm_validate_partition_table(): Disk read failed. [ 1231.249891][T13769] Buffer I/O error on dev loop6, logical block 0, async page read [ 1231.252342][T13772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2610'. [ 1231.326937][T13769] Buffer I/O error on dev loop6, logical block 0, async page read [ 1231.374466][T13769] Dev loop6: unable to read RDB block 0 [ 1231.388819][T13029] usb 3-1: USB disconnect, device number 17 [ 1231.444159][T13769] loop6: unable to read partition table [ 1231.497490][T13769] loop_reread_partitions: partition scan of loop6 (ir¡c‡’ úÒVUŸX¯ÃG¨½›˜ñZtM<IÆ i8NL í á·ùWû@©àQ6ÒÝ%ž…û¥¡Úè) failed (rc=-5) [ 1234.159306][T13786] loop6: detected capacity change from 0 to 32768 [ 1234.197936][T13786] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2616 (13786) [ 1234.263528][T13786] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1234.274293][T13786] BTRFS info (device loop6): using crc32c checksum algorithm [ 1234.466688][T13786] BTRFS info (device loop6): enabling ssd optimizations [ 1234.474097][T13786] BTRFS info (device loop6): turning on async discard [ 1234.481420][T13786] BTRFS info (device loop6): enabling free space tree [ 1234.701524][ T7885] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1235.191299][T13807] loop4: detected capacity change from 0 to 256 [ 1235.250532][T13807] exfat: Deprecated parameter 'namecase' [ 1235.438013][T13807] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d) [ 1238.606897][T13828] loop8: detected capacity change from 0 to 4096 [ 1239.068985][T13839] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1240.242864][T13845] vcan0: tx address claim with dest, not broadcast [ 1240.721353][T13849] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2638'. [ 1240.854327][T13849] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2638'. [ 1242.362402][T13856] loop4: detected capacity change from 0 to 4096 [ 1242.449473][ T807] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1242.521771][T13865] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1242.656508][ T807] usb 10-1: Using ep0 maxpacket: 16 [ 1242.699674][ T807] usb 10-1: config 0 has an invalid interface number: 34 but max is 0 [ 1242.730955][ T807] usb 10-1: config 0 has no interface number 0 [ 1242.784064][ T807] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1242.856707][ T807] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1243.001392][ T807] usb 10-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1243.049234][ T807] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.104456][ T807] usb 10-1: Product: syz [ 1243.130628][ T807] usb 10-1: Manufacturer: syz [ 1243.174771][ T807] usb 10-1: SerialNumber: syz [ 1243.248788][ T807] usb 10-1: config 0 descriptor?? [ 1243.289260][T13863] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1243.384524][T13863] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1243.823229][T13863] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1243.875850][T13863] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1244.098568][T13875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2649'. [ 1244.149454][ T807] asix 10-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1244.152862][T13875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2649'. [ 1244.379772][ T807] asix 10-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 138 [ 1244.839389][T13029] usb 10-1: USB disconnect, device number 7 [ 1246.975376][T13887] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1247.272896][T13891] loop4: detected capacity change from 0 to 4096 [ 1249.052662][T13912] loop6: detected capacity change from 0 to 512 [ 1249.131299][T13912] EXT4-fs: Ignoring removed nobh option [ 1249.252506][T13912] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1249.441103][T13912] EXT4-fs (loop6): 1 truncate cleaned up [ 1249.482623][T13912] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1249.695549][T13906] loop9: detected capacity change from 0 to 2048 [ 1250.165137][T13920] loop2: detected capacity change from 0 to 512 [ 1250.267809][T13920] EXT4-fs: Ignoring removed oldalloc option [ 1250.436131][T13920] EXT4-fs (loop2): 1 truncate cleaned up [ 1250.474962][ T7885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1250.537535][T13920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1250.708028][T13029] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1250.899453][T13029] usb 5-1: Using ep0 maxpacket: 16 [ 1250.973013][T13029] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 1251.057264][T13029] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1251.096680][T13029] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.146900][T13029] usb 5-1: Product: syz [ 1251.167005][T13029] usb 5-1: Manufacturer: syz [ 1251.175233][T13029] usb 5-1: SerialNumber: syz [ 1251.286878][T13029] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1251.305043][T13029] r8152-cfgselector 5-1: config 0 descriptor?? [ 1251.371229][ T5577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1251.662084][T13029] r8152-cfgselector 5-1: Needed 1 retries to read version [ 1251.953955][T13029] r8152-cfgselector 5-1: USB disconnect, device number 6 [ 1253.005223][T13029] IPVS: starting estimator thread 0... [ 1253.109590][T13943] IPVS: using max 144 ests per chain, 7200 per kthread [ 1254.454345][T13949] loop4: detected capacity change from 0 to 32768 [ 1254.466000][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1254.473121][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1254.502530][T13949] btrfs: Unknown parameter 'check_int_print_mask' [ 1256.239973][T13029] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1256.474454][T13029] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1256.513819][T13029] usb 10-1: config 0 has no interface number 0 [ 1256.560374][T13029] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1256.630046][T13029] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1256.684265][T13029] usb 10-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1256.769147][T13029] usb 10-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1256.796666][T13029] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.848153][T13029] usb 10-1: config 0 descriptor?? [ 1257.605044][T13979] input: syz1 as /devices/virtual/input/input28 [ 1257.760438][T13029] input: HID 28bd:0042 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.1/0003:28BD:0042.0018/input/input29 [ 1258.030483][T13029] uclogic 0003:28BD:0042.0018: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.9-1/input1 [ 1258.216046][T13029] usb 10-1: USB disconnect, device number 8 [ 1258.464119][T13975] loop2: detected capacity change from 0 to 4096 [ 1258.596748][T13975] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 1259.197814][T13975] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 1259.359855][T13980] fido_id[13980]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1259.412504][T13975] ntfs3(loop2): ino=5, "/" indx_read_ra [ 1260.790497][T13989] loop4: detected capacity change from 0 to 4096 [ 1261.039380][T13993] loop6: detected capacity change from 0 to 2048 [ 1261.121486][T13989] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1261.246632][T13995] loop8: detected capacity change from 0 to 32768 [ 1261.262134][T13995] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2695 (13995) [ 1261.321743][T13995] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1261.332973][T13995] BTRFS info (device loop8): using crc32c checksum algorithm [ 1261.612501][T13995] BTRFS info (device loop8): enabling ssd optimizations [ 1261.620084][T13995] BTRFS info (device loop8): turning on async discard [ 1261.634259][T13995] BTRFS info (device loop8): enabling free space tree [ 1261.667848][T13993] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1261.812689][T14019] binder: 14006:14019 ioctl 40046205 0 returned -22 [ 1261.882450][T11728] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1262.037492][T13989] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1262.068822][T13989] ntfs3(loop4): ino=1a, mi_enum_attr [ 1262.090930][ T29] audit: type=1800 audit(1777693096.225:47): pid=13993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2696" name="file0" dev="loop6" ino=13 res=0 errno=0 [ 1262.128270][T13989] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 1262.938576][ T7885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1263.049984][T14023] loop2: detected capacity change from 0 to 64 [ 1263.406899][T14022] Trying to free block not in datazone [ 1263.452165][T13029] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1263.498132][T14022] Trying to free block not in datazone [ 1263.680473][T13029] usb 9-1: Using ep0 maxpacket: 16 [ 1263.806945][T13029] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1263.899232][T13029] usb 9-1: config 2 has an invalid interface number: 200 but max is 0 [ 1263.961053][T13029] usb 9-1: config 2 has no interface number 0 [ 1263.990812][T13029] usb 9-1: config 2 interface 200 has no altsetting 0 [ 1264.052289][T13029] usb 9-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=43.53 [ 1264.130325][T13029] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.202952][T13029] usb 9-1: Product: syz [ 1264.231947][T13029] usb 9-1: Manufacturer: syz [ 1264.277404][T13029] usb 9-1: SerialNumber: syz [ 1264.671558][ C1] Illegal XDP return value 16128 on prog (id 39) dev lo, expect packet loss! [ 1265.030658][T13029] gspca_main: pac7311-2.14.0 probing 093a:260e [ 1265.416683][T13029] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 1265.459488][T13029] pac7311 9-1:2.200: probe with driver pac7311 failed with error -71 [ 1265.519616][T13029] usb 9-1: USB disconnect, device number 6 [ 1265.919435][T14034] loop2: detected capacity change from 0 to 4096 [ 1266.450628][T14042] loop4: detected capacity change from 0 to 256 [ 1269.029725][T14050] loop4: detected capacity change from 0 to 32768 [ 1269.043046][T14050] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2710 (14050) [ 1269.131583][T14050] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1269.142386][T14050] BTRFS info (device loop4): using crc32c checksum algorithm [ 1269.417499][T14050] BTRFS info (device loop4): enabling ssd optimizations [ 1269.424836][T14050] BTRFS info (device loop4): turning on async discard [ 1269.435686][T14050] BTRFS info (device loop4): enabling free space tree [ 1269.492866][T14069] loop9: detected capacity change from 0 to 1024 [ 1269.728334][T14069] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1270.000319][ T807] kernel write not supported for file /input/event0 (pid: 807 comm: kworker/1:2) [ 1270.271157][T11722] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1271.516709][T11795] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1272.344167][T14091] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2723'. [ 1272.970289][T14098] loop6: detected capacity change from 0 to 16 [ 1274.351098][T14111] loop6: detected capacity change from 0 to 256 [ 1274.463344][T14111] exfat: Deprecated parameter 'utf8' [ 1274.519534][T14111] exfat: Deprecated parameter 'utf8' [ 1274.786492][T14111] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1275.609539][T14118] netlink: 'syz.2.2735': attribute type 1 has an invalid length. [ 1277.487788][ T14] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.763403][T14129] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1278.002682][ T14] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.314268][ T14] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.354529][T14132] loop4: detected capacity change from 0 to 256 [ 1278.602776][ T14] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.570182][ T14] bridge_slave_1: left allmulticast mode [ 1279.590624][ T14] bridge_slave_1: left promiscuous mode [ 1279.618259][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.664657][ T14] bridge_slave_0: left allmulticast mode [ 1279.681659][ T14] bridge_slave_0: left promiscuous mode [ 1279.703199][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.497539][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1280.534713][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1280.563785][ T14] bond0 (unregistering): Released all slaves [ 1281.071696][T14142] loop4: detected capacity change from 0 to 256 [ 1281.341494][T14147] netlink: 'syz.6.2749': attribute type 1 has an invalid length. [ 1281.407241][T14147] netlink: 'syz.6.2749': attribute type 7 has an invalid length. [ 1281.430578][T14147] netlink: 'syz.6.2749': attribute type 8 has an invalid length. [ 1281.491761][T14147] netlink: 208 bytes leftover after parsing attributes in process `syz.6.2749'. [ 1281.549891][T14147] NCSI netlink: No device for ifindex 119 [ 1282.092147][ T14] hsr_slave_0: left promiscuous mode [ 1282.185633][ T14] hsr_slave_1: left promiscuous mode [ 1282.222349][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1282.281497][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1282.358394][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1282.431783][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1282.655661][ T14] veth1_macvtap: left promiscuous mode [ 1282.700974][ T14] veth0_macvtap: left promiscuous mode [ 1282.715197][ T14] veth1_vlan: left promiscuous mode [ 1282.740856][ T14] veth0_vlan: left promiscuous mode [ 1282.794389][T14153] loop4: detected capacity change from 0 to 512 [ 1282.863158][T14153] EXT4-fs: Ignoring removed nobh option [ 1282.926510][T14153] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1282.968377][ T5567] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1282.982484][ T5567] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1283.004846][ T5567] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1283.048808][ T5567] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1283.063748][ T5567] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1283.142865][T14153] EXT4-fs (loop4): 1 truncate cleaned up [ 1283.225422][T14153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1284.188653][T11722] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1285.144991][T12340] Bluetooth: hci2: command tx timeout [ 1285.891838][T13029] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1286.104165][T13029] usb 10-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1286.160511][T13029] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.241297][T13029] usb 10-1: config 0 has no interfaces? [ 1286.276696][T13029] usb 10-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1286.305674][T13029] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.412799][T13029] usb 10-1: config 0 descriptor?? [ 1286.554795][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1286.668593][T14184] loop4: detected capacity change from 0 to 2048 [ 1286.795148][T13029] usb 10-1: USB disconnect, device number 9 [ 1286.821760][T14184] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1286.845352][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1286.905934][T14184] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1286.950072][T14184] UDF-fs: Scanning with blocksize 512 failed [ 1287.104832][T14184] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1287.230978][T12340] Bluetooth: hci2: command tx timeout [ 1287.337523][T14183] loop2: detected capacity change from 0 to 4096 [ 1288.460943][T14193] loop4: detected capacity change from 0 to 64 [ 1289.084762][ T5223] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1289.297635][T12340] Bluetooth: hci2: command tx timeout [ 1289.648374][T14200] loop9: detected capacity change from 0 to 512 [ 1289.705383][T14200] EXT4-fs: Ignoring removed nobh option [ 1289.810135][T14200] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1289.993279][T14200] EXT4-fs (loop9): 1 truncate cleaned up [ 1290.003306][T14200] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1290.244133][T14209] program syz.6.2765 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1291.038169][T11795] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1291.376562][T12340] Bluetooth: hci2: command tx timeout [ 1292.915278][T14222] loop9: detected capacity change from 0 to 4096 [ 1293.590145][T14222] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 1293.597300][T14235] loop4: detected capacity change from 0 to 64 [ 1293.672124][T14222] ntfs3(loop9): Failed to load $Extend (-22). [ 1293.719475][T14222] ntfs3(loop9): Failed to initialize $Extend. [ 1293.724479][T14235] syz.4.2774: attempt to access beyond end of device [ 1293.724479][T14235] loop4: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 1293.813607][T12340] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 1294.073657][T14222] ntfs3(loop9): ino=1b, "file0" ntfs_readdir [ 1294.791064][T11795] ntfs3(loop9): ino=9, ntfs_sync_fs failed, -22. [ 1297.512778][ T5223] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1297.630677][T14274] program syz.4.2786 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1297.860682][T12340] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1297.870019][T12340] Bluetooth: hci3: Injecting HCI hardware error event [ 1297.878097][T12340] Bluetooth: hci3: hardware error 0x00 [ 1299.117651][T14288] loop9: detected capacity change from 0 to 512 [ 1299.169572][T14288] EXT4-fs: Ignoring removed bh option [ 1299.210547][T14154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.265611][T14154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.290721][T14288] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 1299.334615][T14154] bridge_slave_0: entered allmulticast mode [ 1299.429128][T14288] EXT4-fs (loop9): 1 truncate cleaned up [ 1299.432318][T14154] bridge_slave_0: entered promiscuous mode [ 1299.541908][T14288] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1299.560274][T14154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.604576][T14154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.647180][T14154] bridge_slave_1: entered allmulticast mode [ 1299.672900][T14154] bridge_slave_1: entered promiscuous mode [ 1299.907298][T14288] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2790: bg 0: block 465: padding at end of block bitmap is not set [ 1299.943068][T12340] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1299.983066][T14288] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1300.010655][T14288] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1300.010655][T14288] [ 1300.067045][T14288] EXT4-fs (loop9): Total free blocks count 0 [ 1300.102119][T14288] EXT4-fs (loop9): Free/Dirty block details [ 1300.125487][T14154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1300.159474][T14288] EXT4-fs (loop9): free_blocks=0 [ 1300.208504][T14288] EXT4-fs (loop9): dirty_blocks=66 [ 1300.223310][T14154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1300.258583][T14288] EXT4-fs (loop9): Block reservation details [ 1300.288471][T14288] EXT4-fs (loop9): i_reserved_data_blocks=66 [ 1300.855500][ T55] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 1300.867100][T14154] team0: Port device team_slave_0 added [ 1300.971415][T14154] team0: Port device team_slave_1 added [ 1300.987540][T11795] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1301.685636][T14154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1301.730245][T14154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1301.866700][T14154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1301.952518][T14154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1301.987389][T14154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1302.139917][T14154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1302.682960][T14319] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2799'. [ 1302.828447][T14320] netlink: 173 bytes leftover after parsing attributes in process `syz.6.2799'. [ 1303.032373][T14154] hsr_slave_0: entered promiscuous mode [ 1303.094861][T14154] hsr_slave_1: entered promiscuous mode [ 1303.143305][T14154] debugfs: 'hsr0' already exists in 'hsr' [ 1303.176867][T14154] Cannot create hsr debugfs directory [ 1303.923714][T14330] loop6: detected capacity change from 0 to 256 [ 1305.438214][T14334] loop4: detected capacity change from 0 to 2048 [ 1306.004885][ T5223] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1307.807168][T14154] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1307.961613][T14154] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1308.038871][T14154] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1308.211149][T14154] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1308.290558][T14154] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1308.468581][T14154] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1308.546679][T14154] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1308.716560][T14154] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1309.477719][T14372] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1310.791602][T14154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1311.129616][T14154] 8021q: adding VLAN 0 to HW filter on device team0 [ 1311.286091][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.294060][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1311.572215][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.580071][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1311.752749][T14390] loop2: detected capacity change from 0 to 16 [ 1312.073923][T12050] udevd[12050]: incorrect cramfs checksum on /dev/loop2 [ 1312.194344][T14393] sctp: [Deprecated]: syz.9.2824 (pid 14393) Use of int in max_burst socket option. [ 1312.194344][T14393] Use struct sctp_assoc_value instead [ 1312.447326][T14386] loop6: detected capacity change from 0 to 2048 [ 1312.516864][T12050] udevd[12050]: incorrect cramfs checksum on /dev/loop2 [ 1314.808647][T14417] loop9: detected capacity change from 0 to 64 [ 1315.019846][T14417] Trying to free block not in datazone [ 1315.101263][T14420] Trying to free block not in datazone [ 1315.150975][T14420] minix_free_inode: bit 5 already cleared [ 1315.185677][ T5223] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1315.872311][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1315.882888][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1317.104882][T14154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1318.360308][T14154] veth0_vlan: entered promiscuous mode [ 1318.416112][T14154] veth1_vlan: entered promiscuous mode [ 1318.655945][T14154] veth0_macvtap: entered promiscuous mode [ 1318.703791][T14154] veth1_macvtap: entered promiscuous mode [ 1318.845905][T14154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1318.935460][T14154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1319.043998][ T81] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.081699][ T81] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.113880][ T159] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.141374][ T81] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.654771][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1322.683272][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1322.813372][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1322.840561][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1323.377319][T14508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2843'. [ 1323.407186][T14508] macvlan0: entered promiscuous mode [ 1323.479969][T14508] netlink: 'syz.4.2843': attribute type 1 has an invalid length. [ 1323.521180][T14508] netlink: 'syz.4.2843': attribute type 2 has an invalid length. [ 1323.561670][T14508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2843'. [ 1324.795792][T14519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2835'. [ 1327.685218][T14547] loop2: detected capacity change from 0 to 256 [ 1329.115383][T14563] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2856'. [ 1329.705821][T14566] loop2: detected capacity change from 0 to 2048 [ 1329.768883][T14566] EXT4-fs: Ignoring removed oldalloc option [ 1329.881248][T14566] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 1329.915255][T14566] System zones: 0-7 [ 1330.045949][T14566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1330.241547][T14566] EXT4-fs (loop2): shut down requested (1) [ 1330.688413][T14583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2860'. [ 1330.728471][T14583] netlink: 580 bytes leftover after parsing attributes in process `syz.4.2860'. [ 1330.824625][T14583] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2860'. [ 1330.858082][ T5577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1330.895825][T14583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2860'. [ 1331.365180][T14587] loop9: detected capacity change from 0 to 64 [ 1331.518815][T14587] BFS-fs: bfs_fill_super(): loop9 is unclean, continuing [ 1333.157273][ T5869] Bluetooth: hci4: Frame reassembly failed (-84) [ 1333.223415][T14603] program syz.9.2868 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1333.425995][ T9204] kernel write not supported for file /comedi4 (pid: 9204 comm: kworker/1:5) [ 1335.217414][ T5567] Bluetooth: hci4: command 0x1003 tx timeout [ 1335.224011][T12340] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1335.985913][T14624] loop4: detected capacity change from 0 to 128 [ 1336.080928][T14624] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 1336.187912][T14624] hpfs: filesystem error: improperly stopped [ 1336.224503][T14624] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1336.274810][T14624] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 1336.323586][T14624] hpfs: You really don't want any checks? You are crazy... [ 1336.396115][T14624] hpfs: hpfs_map_sector(): read error [ 1336.460192][T14624] hpfs: code page support is disabled [ 1336.493969][T14624] hpfs: hpfs_map_4sectors(): unaligned read [ 1336.551118][T14624] hpfs: hpfs_map_4sectors(): unaligned read [ 1336.607745][T14624] hpfs: filesystem error: unable to find root dir [ 1337.500231][T14639] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1337.507970][T14639] IPv6: NLM_F_CREATE should be set when creating new route [ 1337.515560][T14639] IPv6: NLM_F_CREATE should be set when creating new route [ 1337.523186][T14639] IPv6: NLM_F_CREATE should be set when creating new route [ 1337.644591][T14638] loop6: detected capacity change from 0 to 1024 [ 1337.758426][T14632] loop5: detected capacity change from 0 to 4096 [ 1337.770927][T14639] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.2879'. [ 1339.247239][T14649] loop9: detected capacity change from 0 to 256 [ 1339.339251][T14649] exfat: Deprecated parameter 'utf8' [ 1339.644974][T14649] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d) [ 1339.758864][T14651] loop6: detected capacity change from 0 to 512 [ 1339.903492][T14651] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1340.262069][T14651] EXT4-fs error (device loop6): ext4_quota_enable:7221: comm syz.6.2884: Bad quota inum: 2, type: 1 [ 1340.354940][T14651] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 1340.624909][T14663] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1340.759403][T14663] EXT4-fs error (device loop6): ext4_quota_enable:7221: comm syz.6.2884: Bad quota inum: 2, type: 1 [ 1340.911733][T14663] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 1341.347297][T14666] loop4: detected capacity change from 0 to 512 [ 1341.736377][T14666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1341.770602][T14666] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1341.982981][ T7885] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1342.649998][T14682] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2891'. [ 1343.155373][T11722] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1343.378881][T14688] loop9: detected capacity change from 0 to 128 [ 1343.544798][T14688] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1343.706084][T14688] ext4 filesystem being mounted at /182/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1344.251621][T14701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2898'. [ 1344.301179][T14701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2898'. [ 1344.517657][T11795] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1345.430265][T14710] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1345.437999][T14710] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1345.509444][T14710] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1345.516993][T14710] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1345.706627][ T9204] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1345.951920][ T9204] usb 10-1: Using ep0 maxpacket: 16 [ 1346.093786][ T9204] usb 10-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1346.139146][ T9204] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1346.203050][ T9204] usb 10-1: Product: syz [ 1346.230388][ T9204] usb 10-1: Manufacturer: syz [ 1346.252859][ T9204] usb 10-1: SerialNumber: syz [ 1346.295804][ T9204] usb 10-1: config 0 descriptor?? [ 1347.356572][ T9204] usb 10-1: USB disconnect, device number 10 [ 1348.315753][T14656] udevd[14656]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1351.167118][T14769] loop6: detected capacity change from 0 to 64 [ 1351.271238][T14769] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing [ 1355.204179][T14814] loop6: detected capacity change from 0 to 8 [ 1355.391521][T14815] loop4: detected capacity change from 0 to 256 [ 1355.717064][T14815] FAT-fs (loop4): Directory bread(block 64) failed [ 1355.765596][T14815] FAT-fs (loop4): Directory bread(block 65) failed [ 1355.802646][T14815] FAT-fs (loop4): Directory bread(block 66) failed [ 1355.836719][T14815] FAT-fs (loop4): Directory bread(block 67) failed [ 1355.914971][T14815] FAT-fs (loop4): Directory bread(block 68) failed [ 1355.956950][T14815] FAT-fs (loop4): Directory bread(block 69) failed [ 1355.993496][T14815] FAT-fs (loop4): Directory bread(block 70) failed [ 1356.026914][T14815] FAT-fs (loop4): Directory bread(block 71) failed [ 1356.077176][T14815] FAT-fs (loop4): Directory bread(block 72) failed [ 1356.126998][T14815] FAT-fs (loop4): Directory bread(block 73) failed [ 1358.396035][T14830] loop9: detected capacity change from 0 to 4096 [ 1358.620072][T14840] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1359.723354][T14848] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1360.169692][T14853] program syz.5.2952 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1360.535795][T14859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2954'. [ 1360.614814][T14861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2954'. [ 1361.507565][T11391] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1361.727456][T11391] usb 6-1: Using ep0 maxpacket: 16 [ 1361.773760][T11391] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1361.827852][T11391] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1361.921238][T11391] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1361.983957][T11391] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1362.055377][T11391] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1362.114374][T14871] loop4: detected capacity change from 0 to 2048 [ 1362.119966][T11391] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1362.185536][T11391] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1362.222871][T11391] usb 6-1: Manufacturer: syz [ 1362.288601][T11391] usb 6-1: config 0 descriptor?? [ 1362.312217][T14871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1362.847536][T14866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1362.912053][T14866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1362.938881][T14882] loop2: detected capacity change from 0 to 512 [ 1362.962062][ T55] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1363.071694][ T55] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1363.124529][ T55] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1363.124529][ T55] [ 1363.189231][ T55] EXT4-fs (loop4): Total free blocks count 0 [ 1363.212626][ T55] EXT4-fs (loop4): Free/Dirty block details [ 1363.246660][ T55] EXT4-fs (loop4): free_blocks=4096 [ 1363.252128][ T55] EXT4-fs (loop4): dirty_blocks=16 [ 1363.298151][ T55] EXT4-fs (loop4): Block reservation details [ 1363.310926][T11391] rc_core: IR keymap rc-hauppauge not found [ 1363.346403][T11391] Registered IR keymap rc-empty [ 1363.366034][ T55] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 1363.382235][T11391] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1363.421553][ T159] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 1363.438946][T11391] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1363.514557][T11722] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1363.560767][T11391] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1363.675498][T11391] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input30 [ 1363.866842][T11391] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1364.017257][T11391] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1364.067284][T11391] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1364.150134][T11391] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1364.247262][T11391] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1364.322648][T11391] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1364.437839][T11391] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1364.531596][T11391] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1364.610485][T11391] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1364.721230][T11391] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1364.858474][T11391] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1364.920312][T11391] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1365.236756][T11391] usb 6-1: USB disconnect, device number 6 [ 1365.267468][T14892] loop4: detected capacity change from 0 to 256 [ 1365.571795][T14892] exFAT-fs (loop4): failed to test first cluster bit of root dir(5) [ 1368.199760][T14920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2973'. [ 1368.982098][T14932] program syz.9.2976 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1370.144485][T14943] loop9: detected capacity change from 0 to 256 [ 1371.020186][T14947] loop5: detected capacity change from 0 to 128 [ 1371.388682][T14949] xt_socket: unknown flags 0xf4 [ 1371.674159][T14955] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2985'. [ 1374.029408][T11391] kernel read not supported for file /vcs (pid: 11391 comm: kworker/1:8) [ 1374.058154][T12340] Bluetooth: hci1: unexpected event for opcode 0x0009 [ 1374.229951][T14982] ALSA: mixer_oss: invalid OSS volume '' [ 1376.640016][T15005] loop6: detected capacity change from 0 to 256 [ 1376.705324][T15005] exfat: Deprecated parameter 'namecase' [ 1376.739368][T15005] exfat: Deprecated parameter 'utf8' [ 1376.785367][T15005] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 1376.966722][T15005] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d) [ 1377.120806][T15012] loop5: detected capacity change from 0 to 512 [ 1377.322431][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1377.334853][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1377.978294][T15020] batadv_slave_1: entered promiscuous mode [ 1378.065118][T15019] batadv_slave_1: left promiscuous mode [ 1378.844607][T15028] cgroup: fork rejected by pids controller in /syz5 [ 1379.050180][T15031] loop4: detected capacity change from 0 to 64 [ 1379.388786][T15031] syz.4.3012: attempt to access beyond end of device [ 1379.388786][T15031] loop4: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 1379.607633][T15036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3014'. [ 1379.673316][T15036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3014'. [ 1381.823517][ T14] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.142742][ T14] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.223976][T15056] loop4: detected capacity change from 0 to 64 [ 1382.301043][T15052] loop6: detected capacity change from 0 to 2048 [ 1382.406376][T15052] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1382.491961][ T14] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.549092][ T29] audit: type=1800 audit(1777693472.664:48): pid=15056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3021" name="file1" dev="loop4" ino=22 res=0 errno=0 [ 1382.712200][T15061] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1382.865679][T15058] loop2: detected capacity change from 0 to 2048 [ 1382.942988][ T29] audit: type=1800 audit(1777693473.064:49): pid=15052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3020" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1382.983615][ T14] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.211450][T15058] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1383.917227][ T34] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1384.051301][ T34] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1384.138317][ T34] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1384.138317][ T34] [ 1384.243893][ T34] EXT4-fs (loop2): Total free blocks count 0 [ 1384.286467][ T34] EXT4-fs (loop2): Free/Dirty block details [ 1384.321794][ T34] EXT4-fs (loop2): free_blocks=4096 [ 1384.355995][ T34] EXT4-fs (loop2): dirty_blocks=16 [ 1384.398887][ T34] EXT4-fs (loop2): Block reservation details [ 1384.444850][ T34] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 1384.475057][ T14] bridge_slave_1: left allmulticast mode [ 1384.493682][ T56] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 1384.516748][ T14] bridge_slave_1: left promiscuous mode [ 1384.543942][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.583386][ T5577] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1384.637225][ T14] bridge_slave_0: left allmulticast mode [ 1384.643229][ T14] bridge_slave_0: left promiscuous mode [ 1384.707920][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1386.183565][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1386.246825][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1386.294483][ T14] bond0 (unregistering): Released all slaves [ 1387.815065][ T14] hsr_slave_0: left promiscuous mode [ 1387.888646][ T14] hsr_slave_1: left promiscuous mode [ 1387.931809][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1387.997685][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1388.062737][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1388.107075][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1388.278712][ T14] veth1_macvtap: left promiscuous mode [ 1388.313477][ T14] veth0_macvtap: left promiscuous mode [ 1388.357237][ T14] veth1_vlan: left promiscuous mode [ 1388.392033][ T14] veth0_vlan: left promiscuous mode [ 1388.526077][ T5567] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1388.538109][ T5567] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1388.553732][ T5567] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1388.594995][ T5567] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1388.620965][ T5567] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1390.271600][T15107] ------------[ cut here ]------------ [ 1390.277281][T15107] WARNING: kernel/signal.c:2174 at do_notify_parent+0x1d9/0xf30, CPU#1: syz.2.3032/15107 [ 1390.287469][T15107] Modules linked in: [ 1390.291613][T15107] CPU: 1 UID: 0 PID: 15107 Comm: syz.2.3032 Tainted: G W L syzkaller #0 PREEMPT(full) [ 1390.302844][T15107] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1390.308191][T15107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1390.318482][T15107] RIP: 0010:do_notify_parent+0x1d9/0xf30 [ 1390.324425][T15107] Code: e9 4c 31 f1 48 f7 d0 48 21 c8 0f 84 3b 0d 00 00 4d 39 f5 4c 8b 7d b8 0f 85 58 0d 00 00 e8 cf 35 5f 00 eb 60 e8 c8 35 5f 00 90 <0f> 0b 90 31 c0 45 31 ed 45 31 ff e9 56 0c 00 00 44 89 ef e8 9f 59 [ 1390.344627][T15107] RSP: 0000:ffff888112533cb8 EFLAGS: 00010093 [ 1390.350947][T15107] RAX: ffffffff81a174b8 RBX: ffff888050fb4e38 RCX: ffff888050fb4280 [ 1390.359131][T15107] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 1390.367397][T15107] RBP: ffff888112533d80 R08: ffffea000000000f R09: 0000000000000000 [ 1390.375576][T15107] R10: ffff888111d33cc8 R11: ffffffff82bbdb00 R12: 0000000000000000 [ 1390.383837][T15107] R13: ffff888050fb4280 R14: 0000000000000080 R15: ffff888050fb4280 [ 1390.392014][T15107] FS: 0000000000000000(0000) GS:ffff8881aa70c000(0000) knlGS:0000000000000000 [ 1390.401174][T15107] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1390.407961][T15107] CR2: 0000000030b1fff8 CR3: 0000000119df0000 CR4: 00000000003526f0 [ 1390.416136][T15107] Call Trace: [ 1390.419563][T15107] [ 1390.423070][T15107] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1390.429223][T15107] ? kill_orphaned_pgrp+0x273/0xa70 [ 1390.434795][T15107] ? kmsan_get_metadata+0xf1/0x160 [ 1390.440198][T15107] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1390.446336][T15107] do_exit+0x2430/0x3c30 [ 1390.450868][T15107] __ia32_sys_exit+0x35/0x40 [ 1390.455714][T15107] ia32_sys_call+0x4341/0x4360 [ 1390.460777][T15107] __do_fast_syscall_32+0x180/0x460 [ 1390.466296][T15107] do_fast_syscall_32+0x37/0x80 [ 1390.471441][T15107] do_SYSENTER_32+0x1f/0x30 [ 1390.476308][T15107] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1390.483009][T15107] RIP: 0023:0xf6fef00c [ 1390.487283][T15107] Code: Unable to access opcode bytes at 0xf6feefe2. [ 1390.494129][T15107] RSP: 002b:00000000f53dd4cc EFLAGS: 00000206 ORIG_RAX: 0000000000000001 [ 1390.502817][T15107] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000f53dd5ec [ 1390.511084][T15107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f53dd5f4 [ 1390.519259][T15107] RBP: 00000000f70153f9 R08: 0000000000000000 R09: 0000000000000000 [ 1390.527513][T15107] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1390.535757][T15107] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1390.543957][T15107] [ 1390.547130][T15107] ---[ end trace 0000000000000000 ]--- [ 1390.739883][T12340] Bluetooth: hci2: command tx timeout [ 1391.709540][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1391.921365][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1392.816645][T12340] Bluetooth: hci2: command tx timeout [ 1393.205990][ T5223] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1394.600577][T15140] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1394.896810][T12340] Bluetooth: hci2: command tx timeout [ 1396.981743][T12340] Bluetooth: hci2: command tx timeout [ 1398.123524][T15170] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3051'. [ 1398.720338][T15176] loop9: detected capacity change from 0 to 128 [ 1398.935646][T15176] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1398.980499][T15176] ext4 filesystem being mounted at /215/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1399.539635][T15183] loop6: detected capacity change from 0 to 512 [ 1399.698741][T11795] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1399.711633][T15167] loop2: detected capacity change from 0 to 8192 [ 1399.797220][T15183] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3054: invalid indirect mapped block 256 (level 2) [ 1399.799374][T15186] loop4: detected capacity change from 0 to 256 [ 1399.902257][T15183] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1399.906350][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1399.922626][ C0] EXT4-fs (loop6): initial error at time 1777693746: ext4_free_branches:1023: inode 11 [ 1399.932779][ C0] EXT4-fs (loop6): last error at time 1777693746: ext4_free_branches:1023: inode 11 [ 1399.961003][T15183] EXT4-fs (loop6): 2 truncates cleaned up [ 1400.058967][T15183] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1400.349604][T15186] FAT-fs (loop4): Directory bread(block 64) failed [ 1400.388136][T15186] FAT-fs (loop4): Directory bread(block 65) failed [ 1400.428361][T15186] FAT-fs (loop4): Directory bread(block 66) failed [ 1400.475436][T15186] FAT-fs (loop4): Directory bread(block 67) failed [ 1400.514523][T15186] FAT-fs (loop4): Directory bread(block 68) failed [ 1400.601556][T15186] FAT-fs (loop4): Directory bread(block 69) failed [ 1400.674016][T15186] FAT-fs (loop4): Directory bread(block 70) failed [ 1400.734980][T15186] FAT-fs (loop4): Directory bread(block 71) failed [ 1400.812081][T15186] FAT-fs (loop4): Directory bread(block 72) failed [ 1400.848982][T15186] FAT-fs (loop4): Directory bread(block 73) failed [ 1401.066942][ T7885] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1401.360843][ T29] audit: type=1800 audit(1777693747.498:50): pid=15186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3055" name="file0" dev="loop4" ino=1048803 res=0 errno=0 [ 1401.897725][ T5223] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1402.989864][ T9204] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1403.228442][ T9204] usb 3-1: Using ep0 maxpacket: 16 [ 1403.296852][ T9204] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1403.361930][ T9204] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1403.438395][ T9204] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1403.491662][ T9204] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.548518][ T9204] usb 3-1: Product: syz [ 1403.584063][ T9204] usb 3-1: Manufacturer: syz [ 1403.614214][ T9204] usb 3-1: SerialNumber: syz [ 1403.710163][ T9204] usb 3-1: config 0 descriptor?? [ 1403.851143][ T9204] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1403.879737][T15212] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3062'. [ 1403.898779][ T9204] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1404.011886][T15212] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3062'. [ 1404.325319][T15092] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.384783][T15092] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.414858][T15092] bridge_slave_0: entered allmulticast mode [ 1404.455974][T15092] bridge_slave_0: entered promiscuous mode [ 1404.472435][ T9204] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1404.559011][T15092] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.608221][T15092] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.650664][T15092] bridge_slave_1: entered allmulticast mode [ 1404.686898][ T9204] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1404.735222][T15092] bridge_slave_1: entered promiscuous mode [ 1404.736783][ T9204] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1404.790033][ T9204] em28xx 3-1:0.0: No AC97 audio processor [ 1404.901395][ T9204] usb 3-1: USB disconnect, device number 18 [ 1404.951729][ T9204] em28xx 3-1:0.0: Disconnecting em28xx [ 1405.032608][ T9204] em28xx 3-1:0.0: Freeing device [ 1405.532824][T15092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1405.649689][T15092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1406.035691][T15230] program syz.6.3067 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1406.308315][T15092] team0: Port device team_slave_0 added [ 1406.425998][T15092] team0: Port device team_slave_1 added [ 1406.857664][T15234] loop4: detected capacity change from 0 to 1024 [ 1406.999478][T15092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1407.006843][T15092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1407.038742][T15092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1407.059986][T15092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1407.067314][T15092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1407.098182][T15092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1407.118421][T15234] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1407.637700][T15244] loop2: detected capacity change from 0 to 128 [ 1407.752560][T15244] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1407.933585][T15244] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1408.006896][T11722] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1408.057494][T15092] hsr_slave_0: entered promiscuous mode [ 1408.184092][T15092] hsr_slave_1: entered promiscuous mode [ 1408.256786][T15092] debugfs: 'hsr0' already exists in 'hsr' [ 1408.297450][T15092] Cannot create hsr debugfs directory [ 1408.828264][T15251] Bluetooth: MGMT ver 1.23 [ 1409.658041][T11073] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1409.874335][T11073] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1409.925297][T11073] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1409.973747][T11073] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1410.025999][T11073] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.048547][T15262] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3077'. [ 1410.136993][T11073] usb 3-1: config 0 descriptor?? [ 1410.325550][ T29] audit: type=1326 audit(1777693756.448:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15261 comm="syz.4.3078" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf00c code=0x7ffc0000 [ 1410.439648][ T29] audit: type=1326 audit(1777693756.458:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15261 comm="syz.4.3078" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf00c code=0x7ffc0000 [ 1410.646925][ T5223] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1410.775058][T11073] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 1410.909771][T11073] cp2112 0003:10C4:EA90.0019: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1411.040170][T11073] cp2112 0003:10C4:EA90.0019: Part Number: 0x00 Device Version: 0x00 [ 1411.253732][T11073] cp2112 0003:10C4:EA90.0019: error requesting SMBus config [ 1411.347446][T11073] cp2112 0003:10C4:EA90.0019: probe with driver cp2112 failed with error -71 [ 1411.503682][T11073] usb 3-1: USB disconnect, device number 19 [ 1412.682722][T15276] fido_id[15276]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1413.086043][T15092] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1413.320489][T15092] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1413.401048][T15092] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1413.466997][T15092] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1413.510531][T15092] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1413.613346][T15092] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1413.665278][T15092] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1413.779211][T15092] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1414.901674][T15299] sctp: [Deprecated]: syz.9.3089 (pid 15299) Use of int in max_burst socket option deprecated. [ 1414.901674][T15299] Use struct sctp_assoc_value instead [ 1415.544810][T15092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1415.878564][T15092] 8021q: adding VLAN 0 to HW filter on device team0 [ 1416.085503][ T5689] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.093432][ T5689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1416.361941][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.369796][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1417.413738][T15325] loop4: detected capacity change from 0 to 256 [ 1417.688293][ T29] audit: type=1800 audit(1777693763.818:53): pid=15325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3098" name="bus" dev="loop4" ino=1048804 res=0 errno=0 [ 1417.805888][T15325] Invalid ELF header magic: != ELF [ 1419.203517][T15339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3102'. [ 1419.513962][T15339] bridge0: port 3(batadv1) entered blocking state [ 1419.567735][T15339] bridge0: port 3(batadv1) entered disabled state [ 1419.608179][T15339] batadv1: entered allmulticast mode [ 1419.652729][T15339] batadv1: entered promiscuous mode [ 1419.836849][ T143] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1419.846842][ T143] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1420.379711][T15350] IPv6: NLM_F_CREATE should be specified when creating new route [ 1420.425055][T15350] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1420.433176][T15350] IPv6: NLM_F_CREATE should be set when creating new route [ 1420.440846][T15350] IPv6: NLM_F_CREATE should be set when creating new route [ 1420.448442][T15350] IPv6: NLM_F_CREATE should be set when creating new route [ 1420.485929][T15354] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3105'. [ 1421.979266][T15366] loop2: detected capacity change from 0 to 512 [ 1422.147572][T15366] EXT4-fs (loop2): 1 truncate cleaned up [ 1422.284192][T15366] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1422.513080][ T29] audit: type=1800 audit(1777693768.648:54): pid=15366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3110" name="file1" dev="loop2" ino=13 res=0 errno=0 [ 1423.227807][ T5577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1424.032758][T15092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1426.595356][T15404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3117'. [ 1426.721853][T15404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3117'. [ 1428.080375][T15416] loop2: detected capacity change from 0 to 256 [ 1428.164864][T15416] msdos: Unknown parameter 'n' [ 1429.571290][T15092] veth0_vlan: entered promiscuous mode [ 1429.814667][T15092] veth1_vlan: entered promiscuous mode [ 1430.770333][T15092] veth0_macvtap: entered promiscuous mode [ 1430.952540][T15092] veth1_macvtap: entered promiscuous mode [ 1431.546080][T15092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1431.891959][T15092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1432.260636][ T56] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.318479][ T56] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.422642][ T56] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.463979][ T56] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.731788][T15454] loop2: detected capacity change from 0 to 256 [ 1434.015426][T15454] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1434.444859][T15454] exFAT-fs (loop2): start_clu is invalid cluster(0xffffffff) [ 1437.222727][T15475] loop6: detected capacity change from 0 to 2048 [ 1437.498531][T15475] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1437.722572][ T29] audit: type=1800 audit(1777693783.848:55): pid=15475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3137" name="file2" dev="loop6" ino=1347 res=0 errno=0 [ 1438.765781][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1438.773532][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1439.547484][T15494] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3143'. [ 1439.643165][T15494] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3143'. [ 1439.677193][ T9204] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1439.897076][ T9204] usb 3-1: Using ep0 maxpacket: 16 [ 1439.951486][ T9204] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1440.003479][ T9204] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1440.078176][ T9204] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1440.137121][ T9204] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 1440.192286][ T9204] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.203551][T15499] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1440.225632][T15499] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1440.244291][T15499] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1440.261555][ T9204] usb 3-1: config 0 descriptor?? [ 1440.283342][T15499] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1440.304066][T15499] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1440.725138][T15504] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1440.819253][ T9204] hid (null): unknown global tag 0xe [ 1440.924435][ T9204] megaworld 0003:07B5:0312.001A: unknown global tag 0xe [ 1440.969173][ T9204] megaworld 0003:07B5:0312.001A: item 0 1 1 14 parsing failed [ 1441.048245][ T9204] megaworld 0003:07B5:0312.001A: parse failed [ 1441.107292][ T9204] megaworld 0003:07B5:0312.001A: probe with driver megaworld failed with error -22 [ 1441.231879][ T9204] usb 3-1: USB disconnect, device number 20 [ 1442.416922][T12340] Bluetooth: hci4: command tx timeout [ 1444.504101][T15499] Bluetooth: hci4: command tx timeout [ 1444.973286][ T5869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1445.034695][ T5869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1445.462865][T13031] ===================================================== [ 1445.472952][T13031] BUG: KMSAN: uninit-value in n_tty_receive_buf_standard+0xd32/0xc780 [ 1445.482582][T13031] n_tty_receive_buf_standard+0xd32/0xc780 [ 1445.490719][T13031] n_tty_receive_buf_common+0x1a63/0x25a0 [ 1445.503076][T13031] n_tty_receive_buf2+0x4c/0x60 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1445.510018][T13031] tty_ldisc_receive_buf+0xc6/0x2c0 [ 1445.516427][T13031] tty_port_default_receive_buf+0xd7/0x1a0 [ 1445.535701][T13031] flush_to_ldisc+0x43e/0xe40 [ 1445.546998][T13031] process_scheduled_works+0xb65/0x1e40 [ 1445.557426][T13031] worker_thread+0xee4/0x1590 [ 1445.563154][T13031] kthread+0x53f/0x600 [ 1445.568339][T13031] ret_from_fork+0x20f/0x8d0 [ 1445.573898][T13031] ret_from_fork_asm+0x1a/0x30 [ 1445.585008][T13031] [ 1445.588599][T13031] Uninit was stored to memory at: [ 1445.594660][T13031] n_tty_receive_buf_standard+0xd2b/0xc780 [ 1445.607210][T13031] n_tty_receive_buf_common+0x1a63/0x25a0 [ 1445.614297][T13031] n_tty_receive_buf2+0x4c/0x60 [ 1445.620283][T13031] tty_ldisc_receive_buf+0xc6/0x2c0 [ 1445.626668][T13031] tty_port_default_receive_buf+0xd7/0x1a0 [ 1445.634337][T13031] flush_to_ldisc+0x43e/0xe40 [ 1445.640232][T13031] process_scheduled_works+0xb65/0x1e40 [ 1445.646878][T13031] worker_thread+0xee4/0x1590 [ 1445.652629][T13031] kthread+0x53f/0x600 [ 1445.657840][T13031] ret_from_fork+0x20f/0x8d0 [ 1445.663367][T13031] ret_from_fork_asm+0x1a/0x30 [ 1445.669632][T13031] [ 1445.673687][T13031] Uninit was created at: [ 1445.679129][T13031] __kmalloc_noprof+0x482/0x1660 [ 1445.685037][T13031] __tty_buffer_request_room+0x3d4/0x7a0 [ 1445.691798][T13031] __tty_insert_flip_string_flags+0x157/0x6e0 [ 1445.699273][T13031] uart_insert_char+0x368/0x930 [ 1445.709975][T13031] serial8250_read_char+0x1ba/0x670 [ 1445.718306][T13031] serial8250_handle_irq_locked+0x6d4/0xa40 [ 1445.725147][T13031] serial8250_handle_irq+0x189/0x710 [ 1445.731539][T13031] serial8250_default_handle_irq+0x116/0x350 [ 1445.738720][T13031] serial8250_interrupt+0xcb/0x3f0 [ 1445.744954][T13031] __handle_irq_event_percpu+0x118/0xf30 [ 1445.751643][T13031] handle_irq_event+0xe0/0x2a0 [ 1445.758839][T13031] handle_edge_irq+0x2a9/0xaf0 [ 1445.764484][T13031] __common_interrupt+0x9d/0x180 [ 1445.770487][T13031] common_interrupt+0x94/0xb0 [ 1445.776075][T13031] asm_common_interrupt+0x2b/0x40 [ 1445.799762][T13031] [ 1445.803031][T13031] CPU: 0 UID: 0 PID: 13031 Comm: kworker/u8:11 Tainted: G W L syzkaller #0 PREEMPT(full) [ 1445.820141][T13031] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1445.826755][T13031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1445.837967][T13031] Workqueue: ttyS-serial_8250 flush_to_ldisc [ 1445.844937][T13031] ===================================================== [ 1445.853169][T13031] Disabling lock debugging due to kernel taint [ 1445.944315][T15371] bond0: (slave syz_tun): Releasing backup interface [ 1446.028644][T13031] Kernel panic - not syncing: kmsan.panic set ... [ 1446.035337][T13031] CPU: 0 UID: 0 PID: 13031 Comm: kworker/u8:11 Tainted: G B W L syzkaller #0 PREEMPT(full) [ 1446.046907][T13031] Tainted: [B]=BAD_PAGE, [W]=WARN, [L]=SOFTLOCKUP [ 1446.053455][T13031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1446.063787][T13031] Workqueue: ttyS-serial_8250 flush_to_ldisc [ 1446.070039][T13031] Call Trace: [ 1446.073438][T13031] [ 1446.076498][T13031] __dump_stack+0x26/0x30 [ 1446.081056][T13031] dump_stack_lvl+0x50/0x1c0 [ 1446.085858][T13031] ? dump_stack+0x12/0x25 [ 1446.090406][T13031] dump_stack+0x1e/0x25 [ 1446.094778][T13031] vpanic+0x7b4/0x1430 [ 1446.099114][T13031] panic+0x15d/0x160 [ 1446.103303][T13031] kmsan_report+0x31a/0x320 [ 1446.108214][T13031] ? update_cfs_rq_load_avg+0x747/0x8c0 [ 1446.114002][T13031] ? __msan_warning+0x1b/0x30 [ 1446.118922][T13031] ? n_tty_receive_buf_standard+0xd32/0xc780 [ 1446.125157][T13031] ? n_tty_receive_buf_common+0x1a63/0x25a0 [ 1446.131266][T13031] ? n_tty_receive_buf2+0x4c/0x60 [ 1446.136560][T13031] ? tty_ldisc_receive_buf+0xc6/0x2c0 [ 1446.142182][T13031] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 1446.148446][T13031] ? flush_to_ldisc+0x43e/0xe40 [ 1446.153525][T13031] ? process_scheduled_works+0xb65/0x1e40 [ 1446.159486][T13031] ? worker_thread+0xee4/0x1590 [ 1446.164568][T13031] ? kthread+0x53f/0x600 [ 1446.169061][T13031] ? ret_from_fork+0x20f/0x8d0 [ 1446.174062][T13031] ? ret_from_fork_asm+0x1a/0x30 [ 1446.179247][T13031] ? ret_from_fork_asm+0x1a/0x30 [ 1446.184530][T13031] ? kmsan_get_metadata+0xf1/0x160 [ 1446.190002][T13031] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1446.196086][T13031] ? clockevents_program_event+0x151/0x830 [ 1446.202149][T13031] ? kmsan_get_metadata+0xf1/0x160 [ 1446.207540][T13031] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1446.214241][T13031] ? kmsan_get_metadata+0x146/0x160 [ 1446.219716][T13031] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1446.225813][T13031] ? n_tty_receive_char+0xf83/0x14a0 [ 1446.231412][T13031] ? __wake_up+0x29d/0x2f0 [ 1446.236075][T13031] ? kmsan_get_metadata+0xf1/0x160 [ 1446.241565][T13031] __msan_warning+0x1b/0x30 [ 1446.246335][T13031] n_tty_receive_buf_standard+0xd32/0xc780 [ 1446.252441][T13031] ? kmsan_get_metadata+0xf1/0x160 [ 1446.257830][T13031] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1446.263983][T13031] n_tty_receive_buf_common+0x1a63/0x25a0 [ 1446.270038][T13031] n_tty_receive_buf2+0x4c/0x60 [ 1446.275170][T13031] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 1446.281001][T13031] tty_ldisc_receive_buf+0xc6/0x2c0 [ 1446.286474][T13031] tty_port_default_receive_buf+0xd7/0x1a0 [ 1446.292561][T13031] flush_to_ldisc+0x43e/0xe40 [ 1446.297496][T13031] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 1446.304213][T13031] ? __pfx_flush_to_ldisc+0x10/0x10 [ 1446.309755][T13031] process_scheduled_works+0xb65/0x1e40 [ 1446.315719][T13031] worker_thread+0xee4/0x1590 [ 1446.320685][T13031] kthread+0x53f/0x600 [ 1446.325111][T13031] ? __pfx_worker_thread+0x10/0x10 [ 1446.330491][T13031] ? __pfx_kthread+0x10/0x10 [ 1446.335340][T13031] ret_from_fork+0x20f/0x8d0 [ 1446.340155][T13031] ? __switch_to+0x573/0x7a0 [ 1446.345001][T13031] ? __pfx_kthread+0x10/0x10 [ 1446.349869][T13031] ret_from_fork_asm+0x1a/0x30 [ 1446.354907][T13031] [ 1446.358557][T13031] Kernel Offset: disabled [ 1446.362958][T13031] Rebooting in 86400 seconds..