last executing test programs: 2m18.337799339s ago: executing program 3 (id=13475): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2m16.371781451s ago: executing program 3 (id=13488): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4b, &(0x7f0000000140)=""/265) 2m16.126169429s ago: executing program 3 (id=13490): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x2000, 0x25dfdbfe, {0xa, 0x10, 0x14, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10002}, [@FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0xc}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) 2m15.944721455s ago: executing program 3 (id=13493): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x7) 2m15.822196668s ago: executing program 3 (id=13495): syz_mount_image$exfat(&(0x7f0000000fc0), &(0x7f0000000400)='./file0\x00', 0x2000085c, &(0x7f0000000580)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES16, @ANYRESOCT=0x0, @ANYRES64, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRESHEX], 0xc1, 0x151a, &(0x7f0000003fc0)="$eJzs3AuYjtX6MPB1r7UexjTpbZLDsO51P7xpsEyS5JCQQ5IkSZJTQtIkSUJiyClpSEKOk+QwhOQwjUnjfD7knDTZ0iRJSEiyvku7/2fvr713//3V9/m+Pffvuhbrnue97/d+3nuueZ/nva6Zb3qOqteifu1mRCT+EPjrfylCiBghxDAhxDVCiEAIUSm+Uvyl4wUUpPyxJ2F/rgfTr3QH7Eri+edtPP+8jeeft/H88zaef97G88/beP55G8+fsbxs+5xi1/LKu+sKf/7v4Y89K/tD+P3/P0hu+clfbCx/fa9/I4Xnn7fx/PM2nn/exvPP23j+eRvP/z9frX9xjOeft/H8GcvLrvTnz/8frZhfX7Ir3cefuq7wtx9jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsTzinL9MCyH+a3+l+2KMMcYYY4wxxtifx+e/0h0wxhhjjDHGGGPs/zwQUiihRSDyifwiRhQQseIqESeuFgXFNSIirhXx4jpRSFwvCosioqgoJhJEcVFCGIHCChKhKClKiai4QZQWN4pEUUaUFeWEE+VFkrhJVBA3i4riFlFJ3Coqi9tEFVFVVBPVxe2ihrhD1BS1RG1xp6gj6op6or64SzQQd4uG4h7RSNwrGov7RBNxv2gqHhDNxIOiuXhItBAPi5biEdFKtBZtRFvR7n8r/wXRV7wo+on+IkUMEAPFS2KQGCyGiKFimHhZDBeviBHiVZEqRopR4jUxWrwuxog3xFgxTowXb4oJYqKYJCaLKWKqSBNviWnibTFdvCNmiJlilpgt0sUcMVe8K+aJ+WKBeE8sFO+LRWKxWCKWigzxgcgUy0SW+FAsFx+JbLFCrBSrxGqxRqwV68R6sUFsFJvEZrFFbBXbxHbxsdghdopdYrfYI/aKfeITsV98Kg6Iz0SO+PzfzD/7v+T3AgECJEjQoCEf5IMYiIFYiIU4iIOCUBAiEIF4iIdCUAgKQ2EoCkUhARKgBJQABAQCgpJQEqIQhdJQGhIhEcpCWXDgIAmSoALcDBWhIlSCSlAZKkMVqApVoTpUhxpQA2pCTagNtaEO1IF6UA/ugrvgbmgIDaERNILG0BiaQBNoCk2hGTSD5tAcWkALaAktoRW0gjbQBtpBO2gP7aEDdIBO0Ak6Q2foAl0gGZKhK3SFbtANukN36AE9oCf0hF7QG3rDC/ACvAgvQn+oIwfAQBgIg2AQDIGhMBRehuHwCrwCr0IqjIRR8Bq8Bq/DGDgDY2EcjIfxUENOhEkwGUhOhTRIg2kwDabDdJgBM2EmzIZ0mANzYS7Mg/kwH96DhfD+ufdhMSyGpZABGZAJyyALsmA5nIVsWAErYRWshjWwGtbBelgHG2ETbIQtsAW2wTb4GD6GnbATdsNu2At74RP4BD6FTyEVciAHDsJBOASH4DAchlzIhSNwBI7CUTgGx+A4HIcTcBJOwUk4DafhDJyFc3AOzsN5uADPJXzVfG+ZDalCXqKllvlkPhkjY2SsjJVxMk4WlAVlREZkvIyXhWQhWVgWlkVlUZkgE2QJWUKiREkylCVlSRmVUVlalpaJMlGWlWWlk04mySRZQVaQFWVFWUneKivL22QVWVV2dNVldVlDdnI1ZS1ZW9aWdWRdWU/Wl/VlA9lANpQNZSPZSDaWjWUTeb9sKgfAEHhQXppMCzkSWspR0Eq2lm1kW/k6PCrbyzHQQXaUneTjchyMhS6yvUuWT8muchJ0k8/IyfCs7CGnQk/5vOwle8s+8gXZV3Zw/WR/OQMGyIFyNgySg+UQOVTOg7ry0sTqyVdlqhwpR8nX5FJ4XY6Rb8ixcpwcL9+UE+REOUlOllPkVJkm35LT5NtyunxHzpAz5Sw5W6bLOXKufFfOk/PlAvmeXCjfl4vkYrlELpUZ8gOZKZfJLPmhXC4/ktlyhVwpV8nVco1cK9fJ9XKD3Cg3yc1yi9wqt8nt8mO5Q+6Uu+RuuUfulfvkJ3K//FQekJ/JHPm5PCj/Ig/JL+Rh+aXMlV/JI/JreVR+I4/Jb+Vx+Z08IU/KU/J7eVr+IM/Is/Kc/FGelz/JC/JneVF6KRQoqZTSKlD5VH4VowqoWHWVilNXq4LqGhVR16p4dZ0qpK5XhVURVVQVUwmquCqhjEJlFalQlVSlVFTdoEqrG1WiKqPKqnLKqfIqSd2kKqibVUV1i6qkblWV1W2qiqqqqqnq6nZVQ92haqpaqra6U9VRdVU9VV/dpRqou1VDdY9qpO5VjdV9qom6XzVVD6hm6kHVXD2kWqiHVUv1iGqlWqs2qq1qpx5V7dVjqoPqqDqpx1Vn9YTqop5Uyeop1VU9rbqpZ1R39azqoZ5TPdXzqpfqrfqon9VF5VU/1V+lqAFqoHpJDVKD1RA1VA1TL6vh6hU1Qr2qUtVINUq9pkar19UY9YYaq8ap8epNNUFNVJPUZDVFTVVp6i01Tb2tpqt31Aw1U81Ss1W6mqOG/FppwX8j/+1/kD/il2ffprarj9UOtVPtUrvVHrVX7VP71H61Xx1QB1SOylEH1UF1SB1Sh9Vhlaty1RF1RB1VR9UxdUwdV8fVCXVS/ai+V6fVD+qMOqvOqh/VeXVeXfj1NRAatNRKax3ofDq/jtEFdKy+Ssfpq3VBfY2O6Gt1vL5OF9LX68K6iC6qi+kEXVyX0Eajtpp0qEvqUjqqb9Cl9Y06UZfRZXU57XR5naRv+sP5v9dfO91Ot9ftdQfdQXfSnXRn3Vl30V10sk7WXXVX3U130911d91D99A9dU/dS/fSfXQf3Vf31f10P52iU/RA/ZIepAfrIXqoHqZf1sP1cD1Cj9CpOlWP0qP0aD1aj9Fj9Fg9Vo/X4/UEPUFP0pP0FD1Fp+k0PU1P09P1dD1Dz9Cz9CydrtP1XD1Xz9Pz9AK9QC/UC/UivUgv0Ut0hs7QmTpTZ+ksvVwv19l6hV6hV+lVeo1eo9fpdXqD3qA36U16i96is/V2vV3v0Dv0Lr1L79F79D69T+/X+/UBfUDn6Bx9UB/Uh/QhfVgf1rk6Vx/RR/RRfVQf08f0cX1cn9An9Cl9Sp/Wp/UZfUaf0+f0eX1eX9AX9EV98dJlXyADGehAB/mCfEFMEBPEBrFBXBAXFAwKBpEgEsQH8UGh4PqgcFAkKBoUCxKC4kGJwAQY2ICCMCgZlAqiwQ1B6eDGIDEoE5QNygUuKB8kBTcFFYKbg4rBLUGl4NagcnBbUCWoGlQLqge3BzWCO4KaQa2gdnBnUCeoG9QL6gdVJ/71mvSeoFFwb9A4uC9oEtwfNA0eCJoFDwbNg4eCFsHDQcvgkaBV0DpoE7QN2v1b9e8KGgR3Bw2Df1bf+zNFHnP9TH+TYgaYgeYlM8gMNkPMUDPMvGyGm1fMCPOqSTUjzSjzmhltXjdjzBtmrBlnxps3zQQz0Uwyk80UM9WkmbfMNPO2mW7eMTPMTDPLzDbpZo6Za94188x8s8C8Zxaa980is9gsMUtNhvnAZJplJst8aJabj0y2WWFWmlVmtVlj1pp1Zr3ZYDaaTWaz2WK2mm1mu/nY7DA7zS6z2+wxe80+84nZbz41B8xnJsd8bg6av5hD5gtz2Hxpcs1X5oj52hw135hj5ltz3HxnTpiT5pT53pw2P5gz5qw5Z340581P5oL52Vw0/tLF/aW3d9SoMR/mwxiMwViMxTiMw4JYECMYwXiMx0JYCAtjYSyKRTEBE7AElsBLCAlLYkmMYhRLY2lMxEQsi2XRocMkTMIKWAErYkWshJWwMlbGKlgFq2E1vB1vxzvwDqyFtfBOvBPrYl2sj/WxATbAhtgQG2EjbIyNsQk2wabYFJthM2yOzbEFtsCW2BJbYStsg22wHbbD9tgeO2AH7ISdsDN2xi7YBZMxGbtiV+yG3bA7dsce2AN7Yk/shb2wD/bBvtgX+2E/TMEUHIgDcRAOwiE4BIfhMByOw3EEjsBUTMVROApH42gcg2NwLI7D8fgmTsCJOAkn4xScimmYhtNwGk7H6TgDZ+AsnIXpmI5zcS7Ow3m4ABfgQlyIi3ARLsElmIEZmImZmIVZuByXYzZm40pciatxNa7Ftbge1+NG3IibcTNuxa24HbfjDtyBu3AX7sE9uA/34X7cjwfwAOZgDh7Eg3gID+FhPIy5mItH8AgexaN4DI/hcTyOJ/AEnsJTeBpP4xk8g+fwHJ7Hn/AC/owX0WOMlSLWXmXj7NW2oL3GxtgC9m/joraYTbDFbQlrbGFb5O9itNYm2jK2rC1nnS1vk+xNv4mr2Kq2mq1ub7c17B225m/iBvZu29DeYxvZe219e9ffxY3tfbaJfdg2tY/YZra1bW7b2hb2YdvSPmJb2da2jW1rO9snbBf7pE22T9mu9unfxJl2mV1vN9iNdpPdbz+15+yP9qj9xp63P9l+tr8dZl+2w+0rdoR91abakb+Jx9s37QQ70U6yk+0UO/U38Sw726bbOXaufdfOs/N/E2fYD+xCm2UX2cV2iV36S3yppyz7oV1uP7LZdoVdaVfZ1XaNXWvX/c9eV9ktdqvdZvfZT+wOu9PusrvtHrv3l/jSeRywn9kc+7k9Yr+2h+wX9rA9ZnPtV7/El87vmP3WHrff2RP2pD1lv7en7Q/2jD37y/lfOvfv7c/2ovVWEJAkRZoCykf5KYYKUCxdRXF0NRWkayhC11I8XUeF6HoqTEWoKBWjBCpOJcgQkiWikEpSKYrSDVSabqREKkNlqRw5Kk9JdBNVoJupIt1ClehWqky3URWqStWoOt1ONegOqkm1qDbdSXWoLtWj+nQXNaC7qSHdQ43oXmpM91ETup+a0gPUjB6k5vQQtaCHqSU9Qq2oNbWhttSOHqX29Bh1oI7UiR6nzvQEdaEnKZmeoq70NHWjZ6g7PUs96DnqSc9TL+pNfegF6ksvUj/qTyk0gAbSSzSIBtMQGkrD6GUaTq/QCHqVUmkkjaLXaDS9TmPoDRpL42g8vUkTaCJNosk0haZSGr1F0+htmk7v0AyaSbNoNqXTHJpL79I8mk8L6D1aSO/TIlpMS2gpZdAHlEnLKIs+pOX0EWXTClpJq2g1raG1tI7W0wbaSJtoM22hrbSNttPHtIN20i7aTXtoL+2jT2g/fUoH6DPKoc/pIP2FDtEXdJi+pFz6io7Q13SUvqFj9C0dp+/oBJ2kU/Q9naYf6AydpXP0I52nn+gC/UwXyZMIIZShCnUYhPnC/GFMWCCMDa8K48Krw4LhNWEkvDaMD68LC4XXh4XDImHRsFiYEBYPS4QmxNCGFIZhybBUGA1vCEuHN4aJYZmwbFgudGH5MCm8KawQ3hxWDG8JK4W3hpXD28IqYdXw4Xurh7eHNcI7wpphrbB2eGdYJ6wb1gvrh3eFDcK7w4bhPWGj8N6wYnhf2CS8P2waPhA2Cx8Mm4cPhS3Ch8OW4SNhq7B12CZsG7YLHw3bh4+FHcKOYafw8bBz+ETYJXwyTA6fCruGT//u8ZRwQDgwfCl8KfT+HrUkujSaEf0gmhldFs2KfhhdHv0omh1dEV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEt0a3Rb1vn5+4cBJp5x2gcvn8rsYV8DFuqtcnLvaFXTXuIi71sW761whd70r7Iq4oq6YS3DFXQlnHDrryIWupCvlou4GV9rd6BJdGVfWlXPOlXdJrq1r59q59u4x18F1dJ3c4+5x94R7wj3pnnRPua7uadfNPeO6u2ddD/ece84973q53q6Pe8H1dS+6fq6/S3EpbqAb6Aa5QW6IG+KGuWFuuBvuRrgRLtWlulFulBvtRrsxbowb68a68W68m+AmuElukpviprg0l+amuWluupvuZrgZbpab5dJdupvr5rp5bp5b4Ba4hYkL3SK3yC1xS1yGy3CZLtNluSy33C132S7brXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9wut8vtcXvcPrfP7Xf73QF3wOW4HHfQHXSH3CF32H3pct1X7oj72h1137hj7lt33H3nTriT7pT73p12P7gz7qw75350591P7oL72V103qVF3opMi7wdmR55JzIjMjMyKzI7kh6ZE5kbeTcyLzI/siDyXmRh5P3IosjiyJLI0khG5INIZmRZJCvyYWR55KNIdmRFZGVkVWR1ZE3E++I7Ql/Sl/JRf4Mv7W/0ib6ML+vLeefL+yR/k6/gb/YV/S2+kr/VV/a3+Sq+qq/mH/GtfGvfxrf17fyjvr1/zHfwHX0n/7jv7J/wXfyTPtk/5bv6p303/4zv7p/1Pfxzvqd/3vfyvX0f/4Lv61/0/Xx/n+IH+IH+JT/ID/ZD/FA/zL/sh/tX/Aj/qk/1I/0o/5of7V/3Y/wbfqwf58f7N/0EP9FP8pP9FD/Vp/m3/DT/tp/u3/Ez/Ew/y8/26X6On+vf9fP8fL/Av+cX+vf9Ir/YL/FLfYb/wGf6ZT7Lf+iX+498tl/hV/pVfrVf49f6dX693+A3+k1+s9/it/ptfrv/2O/wO/0uv9vv8Xv9Pv+J3+8/9Qf8Zz7Hf+4P+r/4Q/4Lf9h/6XP9V/6I/9of9d/4Y/5bf9x/50/4k/6U/96f9j/4M/6sP+d/9Of9T/6C/9lf5N9ZY4wxxhj7b9la+F8fH/APviZ/XZcMFEJcvbNY7t8eV0KIzb/WHSwTOkeEEE/17/ngf606dVJSUn59bLYSQanFQojI5fx84nK84pd/k0VHUeEf9jdY9j5Pv1M/eqsQsX+TEyMuxytEJ/HEL/Vv/if1H318fGbl8Fz8v6i/WIjEUpdzCojL8eX6Ff9J/SLtf6f/Al+kCdHhb3LixOX4cv0k8Zh4WiT/3SMZY4wxxhhjjLG/Giyrdf+9++dL9+cJ+nJOfnE5vnz/+Y/vzxljjDHGGGOMMXblPdu7z5OPJid37M6bP7wB+H+iDd7w5k/YXOmfTIwxxhhjjLE/2+WL/ivdCWOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlnf93/hzYlf6HBljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLEr7X8EAAD//7MxObU=") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f00000052c0)={0xa0, 0x0, 0x0, {{0x5, 0x1, 0x9, 0x9, 0x9, 0xd, {0x3, 0x6, 0xef6, 0x8, 0xffffffff7fffffff, 0x4, 0x1, 0x8, 0x2, 0xa000, 0x3, 0x0, 0xffffffffffffffff, 0x7, 0x5}}}}, 0xa0) 2m15.430218861s ago: executing program 3 (id=13498): syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file1\x00', 0x1004081, &(0x7f0000000380)=ANY=[], 0x1, 0x81c, &(0x7f0000001540)="$eJzs3U9oHOfZAPBnFMmyZeIv5PvIZ4zjjO18YPM5ykpKlIoc0s1qJE8i7YrdVbEpITGxnBrLSUgIaUxp6kvSlpbSU49priGX3FoKLfTQ9lRoDr30EAjk0pKWFkpLKbjs7K61+rOSLctymv5+i/edfeedd953djzPzmrfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIqlMl0pjSczl1cUzaX+V6XptfpP53fp+tirZZL0RSetf7N0bB9tZB/9nZfZ9radjcbj96nDsbSV748r+++55/L8HB7rLb9Kg7Traf9ZQ74sk4hutRl06t7y89MptaMgu+vZPOhN7b3iRv19rPc9m1bxRy+fLs1maN2rp1ORk6eHTM410Jp/LGmcbzWw+rdSzcrNWT09UTqZjU1MTaTZ6trZYnZ0uz2XdzMceGi+VJtOnRheycr1Rqz781Gijcjqfm8urs0WZ8dLr0SrzWGtHfDpvps2sPJ+mFy4uL01s1dRWobFVOcOrdpzDD97zyWsf/+XiUmuH7FdJ0tkxx8fGxsfHJh+devSxUmlwvDS+OqO0RlwvEQMRrRK3Zaflztq/Qd5gZ49ZNyPi2n/tzMEbbtFAJ/7HXORRjcU4E2mkMVA8rzyGohLTUY9azLde/3Zozfx18f//Hv7jrzdbb2/870b5gyuzD0UR/4+0Xx3pF//XtWIHHoP9aq2+325Nb96r8UZciUtxLpZjOZbile2scc/aWm/HY7idDuxsrbORRTXyaEQt8piPcpGTdnLSmIrJmIxSPBunYyYakcZM5DEXWTTibDSiGVmxR1WiHlmUoxm1qEcaJ6ISJyONsZiKqZiINLIYjbNRi8WoxmxMR7mo5UJcLLb7xJp23ff15378wm8+eac1fb3Q2CYdSVof5vZ/FPHnTQqtC/c3Ef9bJQY6e/euxCR2yd6bfFd36MgNt+5aEf8H73QzAAAAgNsoKb59TyJiKO4vpmbyuezLd7pZAAAAwA4qftd8uJUMtabuj6R1/l/aoOSHEcO73jwAAABgByTFGLskIkbigfZUd7jURl8CAAAAAP+Gir//H2klIxFvFhnO/wEAAOBz5pv9rrH/8Z7iGrsj0VgYTn76p6jXh5KrC2ceTC6XW+XKl+9qL9dJvnS9xubMoeRAp5IimRy8sj+JiMFKdjjpXv3yn52xBJ8Wz4dWLkDY71r/yRYNiM0bULyK78TRdpmj59vp+e6c9lpGZvK5bLRSm3t8LOl8OdJ87cWLX42i+9+qzh9I4sLF5aXR519aPl+05WqrlquXO5eHT7pLRbQHVGzSlmvd0RT3b9zjoWIgRme9I+31lnr737ma7MDm/U961/lWHGuXOTbSTkdW939va51jo4+PRbl8YKCZnWm+dq2n951WjK30fLjb2+Qm3oW34ni7zPETx9vJBq0YX9WKF9e3Yrx3+9/YtrjhVrxz9M0zf/1FLckmtmrFxC22AuBOuVBc9WclCu0rotA/rrW1AtqauLuvu+TNHOUurHzK6C7fE+sGY110T7cT3d+KE+0yJ9qfJwYPbRBXShsc0V+++PIvO0f0R977wQ+fOfKrD9bE9ZtoxXtxsl2mk8S9P+8TY1t9/u6aqPpua4l3+663MTeevD48MZS0bz4UVx66ePncC0svLL04Pj4xWXqkVHp0PIaKjwqdpE9LRR6A/2xb3WPng69dL9rvLjzJI1ucVd97/ScFo/F8vBTLcT5OFaMNIuKBjWsd6fkZwqktzlpHeu7wcmqLc8uVsuNryw4fT6JP2YmeLfa/3y+Sv92mNwQAdsGxLeJwEve0L/vz+t2dJdaUuCtJTvWed38lIg71i7mtWH6yfePc7tlx9I/lvX7fSb+wGxsFAD7nsvqnyUjz7aRezxeeHZuaGis3T2dpvVZ5Oq3n07NZmlebWb1yulydzdKFeq1Zq3S/Op7OGmljcWGhVm+mM7V6ulBr5GeKO7+nnVu/N7L5crWZVxoLc1m5kaWVWrVZrjTT6bxRSRcWn5zLG6ezerFwYyGr5DN5pdzMa9W0UVusV7LRNG1kWU/BfDqrNvOZPBtK82q6UM/ny/WrETG3OJ+l01mjUs8XmrV2hd115dWZWn2+qHZ0fff/sNvbGwA+C15948qlc8vLS69sb+J3N1L4TvcRAFhNlAYAAAAAAAAAAAAAgM++9cP1Wrk3NRBwKLY9fPDV4WhN7Nvu4q2JZzo9uYVRjJtMDMYOV7j5xP+/3+7MTlS4vp6hbs7dW4373LfqPd3T2cS7tBF2cuK5J564tJKTDPZu3iffPHj6oyy6vdukno3/p2w01PXtAxF7fvS9ds4X+xROBne4px9GxDYWv5ZsUmZ3j0MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcCP+FQAA//+XX0rH") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f00000003c0)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x2, 0x0) 2m15.070221152s ago: executing program 32 (id=13498): syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file1\x00', 0x1004081, &(0x7f0000000380)=ANY=[], 0x1, 0x81c, &(0x7f0000001540)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f00000003c0)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x2, 0x0) 1m57.082788187s ago: executing program 1 (id=13640): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000002"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 1m56.774165817s ago: executing program 1 (id=13645): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 1m56.544121355s ago: executing program 1 (id=13649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 1m56.285567443s ago: executing program 1 (id=13653): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r0, 0x89f2, &(0x7f00000011c0)={0x6, 0xffff, 0x0, 0xd, 0x0, "5dee000000594000"}) 1m55.671838152s ago: executing program 1 (id=13658): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) link(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)='./file0\x00') 1m55.465215169s ago: executing program 1 (id=13660): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0xe}, 0x1) 1m40.247562837s ago: executing program 33 (id=13660): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0xe}, 0x1) 1m0.529932166s ago: executing program 0 (id=14145): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xd, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 59.928625805s ago: executing program 0 (id=14150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000fc0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd5000fdcbdf251f000000080001003100000008000300", @ANYRES16=r1], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 59.508571879s ago: executing program 0 (id=14153): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x1}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 59.13494784s ago: executing program 0 (id=14158): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000006400)=ANY=[@ANYBLOB="6c617374626c6f636b3d30303030303030303030303030303030303235342c6c6f6e6761642c756d61736b3d30303030303030303030303030303030303137373737372c646d6f64653d30303030303030303030303030303030303030303430302c756e686964652c73686f727461642c616e63686f723d30303030303030303030303030303030303030372c6e6f7374726963742c696f636861727365743d6b6f69382d72752c00263468691e626cd4f6d91d6fed4bb42a4515346a98d55253771fadd9bb31ceaa8d7647a551ee49f3b17bfc6ae1090b228307b8fdc1935c7e8cbbf9aea203bd"], 0x1, 0xc65, &(0x7f0000000f80)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x283016, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 58.398501754s ago: executing program 0 (id=14166): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90224fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 57.619845618s ago: executing program 0 (id=14184): unshare(0x2040400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000140), 0x0}, 0x20) 57.095399004s ago: executing program 34 (id=14184): unshare(0x2040400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000140), 0x0}, 0x20) 36.440268254s ago: executing program 4 (id=14372): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 36.281026309s ago: executing program 4 (id=14374): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 36.174656682s ago: executing program 4 (id=14375): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x4e23, 0x2f41, @mcast2, 0x80000000}}}, 0x90) 35.968798859s ago: executing program 4 (id=14378): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, &(0x7f0000000080), 0xc0000000, &(0x7f0000000140)) ptrace(0x10, r0) 35.673701378s ago: executing program 4 (id=14381): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f00000007c0)) 35.373637328s ago: executing program 4 (id=14386): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a"], 0x7c}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) 19.977999122s ago: executing program 35 (id=14386): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a"], 0x7c}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) 3.143785611s ago: executing program 7 (id=14646): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f00000060c0)=[{&(0x7f0000002b80)=""/4092, 0xffc}, {&(0x7f00000000c0)=""/127, 0x7f}, {&(0x7f0000001580)=""/174, 0xae}], 0x3}, 0x9}], 0x1, 0x40030002, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 2.741774334s ago: executing program 7 (id=14650): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)={0x200000, 0x200000}) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000300)="259374c94982", 0x0, 0x0, 0x14, 0x1, 0x0}) 2.507109921s ago: executing program 7 (id=14654): unshare(0x400) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$inet6(r0, &(0x7f0000002d40)={0xa, 0x4e25, 0x7, @remote, 0x6}, 0x15) 2.287435608s ago: executing program 7 (id=14656): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 2.083547005s ago: executing program 2 (id=14658): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x6c, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e26, 0x44, @loopback={0x5f0000000000002d, 0x2e}, 0x7f2a}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfffffffc, @mcast2, 0x5}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.013991247s ago: executing program 5 (id=14659): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000000), 0x1, 0x4ee, &(0x7f0000001100)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, 0x0, 0x0) 1.703735716s ago: executing program 2 (id=14661): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCSETAW(r0, 0x5407, 0x0) 1.631537939s ago: executing program 6 (id=14662): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000540), 0x8) 1.619826009s ago: executing program 5 (id=14663): r0 = fsopen(&(0x7f00000000c0)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000080)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000640)='source', &(0x7f0000000680)='c:::\x00', 0x0) 1.394537396s ago: executing program 2 (id=14664): syz_usb_connect(0x4, 0x34, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) 1.314579229s ago: executing program 6 (id=14665): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) write$sndseq(r0, &(0x7f0000000180)=[{0xe, 0x1, 0x0, 0xfd, @tick, {}, {0xe}, @result={0xffffffff, 0x20000}}], 0x1c) 1.268870501s ago: executing program 5 (id=14666): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000)=0x8001, 0x4) 1.052188497s ago: executing program 6 (id=14667): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x5c, r1, 0x1, 0x2000000, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4094}, 0x20000010) 687.825648ms ago: executing program 6 (id=14668): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001700)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}}, 0x40) 615.931501ms ago: executing program 2 (id=14669): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000078000000000005000000180001801400020073797a5f74756e00000000000000000008000900040000000500020005001900400003803c000380"], 0x7c}, 0x1, 0x0, 0x0, 0x404c851}, 0x20008800) 608.528801ms ago: executing program 5 (id=14670): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000680)={'pcl812\x00', [0x100, 0x1f, 0xcd, 0x2, 0x2, 0x100, 0x3, 0xfffffffa, 0x8, 0xb, 0x2, 0xb51, 0xffffffff, 0x401, 0x3, 0xf, 0x0, 0x3, 0xfe9, 0x401, 0x4, 0x2, 0x7, 0x9, 0x40048, 0x9, 0x2, 0x9, 0x8, 0x8, 0xa]}) 481.847245ms ago: executing program 7 (id=14671): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x0, 0x0, 0xdd9f83, 0x1, 0x8, 0xfffffffd, 0x8d2, 0x5, 0x7, 0x1, 0x0, 0x0, 0x2b, 0xb763599953cb091d, {0x10000, 0x6fd8e84b}, 0x2, 0xed}}) 454.229746ms ago: executing program 5 (id=14672): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000080)=0x957e) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) 306.996511ms ago: executing program 2 (id=14673): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback=0x7f00c800, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 286.660021ms ago: executing program 6 (id=14674): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) 186.177784ms ago: executing program 7 (id=14675): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) 127.174276ms ago: executing program 5 (id=14676): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4085}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x541b, &(0x7f0000000040)={'ip6gretap0\x00', @local}) 30.852509ms ago: executing program 6 (id=14677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800a0001006d6174636800c9211c0002800800024000000002080003000000000008000100736574"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 0s ago: executing program 2 (id=14678): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) kernel console output (not intermixed with test programs): 91] netlink: 'syz.0.13529': attribute type 15 has an invalid length. [ 909.489223][T15391] netlink: 'syz.0.13529': attribute type 18 has an invalid length. [ 909.674002][T15167] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 909.724285][T15167] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 909.751899][T15167] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 909.806375][T15167] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.836134][T15167] usb 2-1: config 0 descriptor?? [ 909.927159][T15376] loop4: detected capacity change from 0 to 40427 [ 909.964077][T15376] F2FS-fs (loop4): invalid crc value [ 910.009058][T15376] F2FS-fs (loop4): Found nat_bits in checkpoint [ 910.159666][ T4286] Bluetooth: hci0: command 0x0409 tx timeout [ 910.204601][T15376] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 910.269844][T15167] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 910.276745][T15167] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 910.300473][T15167] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 910.307361][T15167] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 910.371324][T15167] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 910.378851][T15167] elan 0003:04F3:0755.0005: failed to start in urb: -90 [ 910.422700][T15167] elan 0003:04F3:0755.0005: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 910.553535][T15167] usb 2-1: USB disconnect, device number 62 [ 910.673510][T15481] fido_id[15481]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 911.066326][T15279] chnl_net:caif_netlink_parms(): no params data found [ 911.478210][T15279] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.490894][T15279] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.499308][T15279] device bridge_slave_0 entered promiscuous mode [ 911.516539][T15279] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.524205][T15279] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.532704][T15279] device bridge_slave_1 entered promiscuous mode [ 911.712865][T15613] loop1: detected capacity change from 0 to 4096 [ 911.740668][T15613] EXT4-fs: Ignoring removed bh option [ 911.819192][T15613] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 911.830550][T15279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 911.853498][T15279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 911.909464][T15167] usb 3-1: new low-speed USB device number 74 using dummy_hcd [ 911.980018][T15613] EXT4-fs error (device loop1): ext4_get_first_dir_block:3603: inode #12: block 80: comm syz.1.13548: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 912.000246][ C0] vkms_vblank_simulate: vblank timer overrun [ 912.033483][T15613] EXT4-fs (loop1): Remounting filesystem read-only [ 912.054031][T15613] EXT4-fs error (device loop1): ext4_get_first_dir_block:3605: inode #12: comm syz.1.13548: directory missing '..' [ 912.087471][T15613] EXT4-fs (loop1): Remounting filesystem read-only [ 912.149608][T15167] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 912.175573][T15167] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 912.188827][T15167] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 912.217200][T15167] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 912.234795][T15279] team0: Port device team_slave_0 added [ 912.240052][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 912.244068][T15167] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.258017][T15279] team0: Port device team_slave_1 added [ 912.270216][T15167] usb 3-1: config 0 descriptor?? [ 912.275860][T15611] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 912.283162][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 912.441956][T15279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 912.449029][T15279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 912.509117][T15167] usbhid 3-1:0.0: can't add hid device: -71 [ 912.517242][T15683] loop1: detected capacity change from 0 to 256 [ 912.525713][T15167] usbhid: probe of 3-1:0.0 failed with error -71 [ 912.551485][T15279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 912.570790][T15167] usb 3-1: USB disconnect, device number 74 [ 912.571777][T15683] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 912.594228][T15279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 912.615191][T15279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 912.683891][ T27] audit: type=1800 audit(1779410613.867:589): pid=15683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.13551" name="file1" dev="loop1" ino=1048715 res=0 errno=0 [ 912.707919][T15279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 912.740639][ T4337] device hsr_slave_0 left promiscuous mode [ 912.753978][ T4337] device hsr_slave_1 left promiscuous mode [ 912.765215][T15620] loop0: detected capacity change from 0 to 32768 [ 912.766421][ T4337] bridge0: port 3(team0) entered disabled state [ 912.819088][T15620] XFS (loop0): Mounting V5 Filesystem [ 912.825783][ T4337] device bridge_slave_1 left promiscuous mode [ 912.833114][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.854567][ T4337] device bridge_slave_0 left promiscuous mode [ 912.862271][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.923609][T15620] XFS (loop0): Ending clean mount [ 912.934961][ T26] XFS (loop0): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x10 [ 912.965993][ T26] XFS (loop0): Unmount and run xfs_repair [ 912.983510][ T26] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 913.003742][ T26] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 913.023967][ T26] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 913.045923][ T26] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 913.066155][ T26] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37 ..............@7 [ 913.079420][ T26] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 913.097588][ T26] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 913.107261][ T26] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00 ................ [ 913.125869][ T26] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 913.135541][T15620] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x10 len 4 error 74 [ 913.180416][T15620] XFS (loop0): Failed to initialize disk quotas. [ 913.253475][ T4337] infiniband syg0: set down [ 913.297143][ T4271] XFS (loop0): Unmounting Filesystem [ 913.308702][ T4337] bond7 (unregistering): Released all slaves [ 913.481142][ T4337] bond6 (unregistering): Released all slaves [ 913.613632][ T4337] bond5 (unregistering): Released all slaves [ 913.702991][ T4337] bond4 (unregistering): Released all slaves [ 913.771886][ T4337] bond3 (unregistering): Released all slaves [ 913.806005][ T4337] bond2 (unregistering): Released all slaves [ 913.855226][ T4337] bond1 (unregistering): Released all slaves [ 914.201621][ T27] audit: type=1326 audit(1779410615.387:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15753 comm="syz.4.13566" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f699ce59 code=0x7ffc0000 [ 914.248139][ T27] audit: type=1326 audit(1779410615.417:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15753 comm="syz.4.13566" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f65f699ce59 code=0x7ffc0000 [ 914.313188][ T27] audit: type=1326 audit(1779410615.427:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15753 comm="syz.4.13566" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f699ce59 code=0x7ffc0000 [ 914.339425][T15285] Bluetooth: hci0: command 0x040f tx timeout [ 914.341692][ C0] vkms_vblank_simulate: vblank timer overrun [ 914.371541][ T27] audit: type=1326 audit(1779410615.427:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15753 comm="syz.4.13566" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f65f699ce59 code=0x7ffc0000 [ 914.427888][ T27] audit: type=1326 audit(1779410615.427:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15753 comm="syz.4.13566" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f699ce59 code=0x7ffc0000 [ 914.430719][ T26] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 914.452177][ C0] vkms_vblank_simulate: vblank timer overrun [ 914.594366][T15774] binder: 15773:15774 ioctl 4018620d 0 returned -22 [ 914.659512][ T26] usb 2-1: Using ep0 maxpacket: 8 [ 914.666613][ T26] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 914.679431][ T26] usb 2-1: config 250 has an invalid interface number: 0 but max is -1 [ 914.699467][ T26] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 914.739484][ T26] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 914.761769][ T26] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 914.792748][ T26] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 914.813449][ T26] usb 2-1: Product: syz [ 914.817679][ T26] usb 2-1: SerialNumber: syz [ 914.858862][ T26] hub 2-1:250.0: bad descriptor, ignoring hub [ 914.875376][ T26] hub: probe of 2-1:250.0 failed with error -5 [ 914.969056][T15766] loop4: detected capacity change from 0 to 32768 [ 915.369942][ T4337] device team_slave_1 left promiscuous mode [ 915.390162][ T4337] team0 (unregistering): Port device team_slave_1 removed [ 915.401595][ T4790] usb 2-1: reset high-speed USB device number 63 using dummy_hcd [ 915.523963][ T4337] device team_slave_0 left promiscuous mode [ 915.531451][ T4337] team0 (unregistering): Port device team_slave_0 removed [ 915.631619][ T4337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 915.703184][ T4337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 915.919660][T14059] usb 2-1: USB disconnect, device number 63 [ 916.102087][ T4337] bond0 (unregistering): Released all slaves [ 916.109935][ T5170] smc: removing ib device syg0 [ 916.231702][ T4318] team0 speed is unknown, defaulting to 1000 [ 916.241977][T15167] infiniband syg0: ib_query_port failed (-19) [ 916.261664][T15793] lo speed is unknown, defaulting to 1000 [ 916.267654][T15793] lo speed is unknown, defaulting to 1000 [ 916.273754][T15807] tipc: Started in network mode [ 916.278670][T15807] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 916.293358][T15807] tipc: Enabling of bearer rejected, failed to enable media [ 916.399589][T15285] Bluetooth: hci0: command 0x0419 tx timeout [ 916.437595][T15793] lo speed is unknown, defaulting to 1000 [ 916.505277][T15793] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 916.535623][T15279] device hsr_slave_0 entered promiscuous mode [ 916.628261][T15279] device hsr_slave_1 entered promiscuous mode [ 916.666337][T15279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 916.684939][T15279] Cannot create hsr debugfs directory [ 916.697800][T15840] loop1: detected capacity change from 0 to 4096 [ 916.728567][T15793] lo speed is unknown, defaulting to 1000 [ 916.736821][T15851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13578'. [ 916.767719][T15851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13578'. [ 916.803767][T15840] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 916.819286][T15851] netlink: 'syz.4.13578': attribute type 14 has an invalid length. [ 916.853736][T15851] netlink: 'syz.4.13578': attribute type 13 has an invalid length. [ 916.912833][T15857] loop0: detected capacity change from 0 to 256 [ 916.950308][T15793] lo speed is unknown, defaulting to 1000 [ 916.957550][T15793] lo speed is unknown, defaulting to 1000 [ 916.987510][T15857] FAT-fs (loop0): Directory bread(block 64) failed [ 917.007258][T15857] FAT-fs (loop0): Directory bread(block 65) failed [ 917.031900][T15857] FAT-fs (loop0): Directory bread(block 66) failed [ 917.050498][T15857] FAT-fs (loop0): Directory bread(block 67) failed [ 917.057157][T15857] FAT-fs (loop0): Directory bread(block 68) failed [ 917.079070][T15793] lo speed is unknown, defaulting to 1000 [ 917.090521][T15857] FAT-fs (loop0): Directory bread(block 69) failed [ 917.097165][T15857] FAT-fs (loop0): Directory bread(block 70) failed [ 917.146299][T15857] FAT-fs (loop0): Directory bread(block 71) failed [ 917.177542][T15857] FAT-fs (loop0): Directory bread(block 72) failed [ 917.215839][T15857] FAT-fs (loop0): Directory bread(block 73) failed [ 917.233625][T15840] ntfs3: loop1: ino=1b, "file0" attr_set_size [ 917.285148][T15793] lo speed is unknown, defaulting to 1000 [ 917.453222][ T4273] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 917.470718][ T4273] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 917.487720][ T4273] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 918.155210][T15967] loop1: detected capacity change from 0 to 512 [ 918.204683][T15279] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 918.262704][T15967] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 918.314593][T15279] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 918.333548][T15967] ext4 filesystem being mounted at /2759/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 918.384271][T15279] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 918.432109][T15279] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 918.805172][T15279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 918.856937][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 918.863547][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 918.896054][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 918.948995][T15279] 8021q: adding VLAN 0 to HW filter on device team0 [ 919.002915][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 919.022923][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 919.035257][T15991] loop4: detected capacity change from 0 to 64 [ 919.082459][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.089661][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 919.195633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 919.207980][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 919.226432][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 919.280522][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.287688][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 919.304462][T15954] loop0: detected capacity change from 0 to 32768 [ 919.368569][T15954] JBD2: Ignoring recovery information on journal [ 919.371020][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 919.444512][T15279] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 919.459155][T15279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 919.471797][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 919.518669][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 919.538332][T15954] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 919.571835][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 919.596174][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 919.653080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 919.700496][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 919.734809][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 919.760595][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 919.797825][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 919.832298][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 919.880249][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 920.050378][T16024] sctp: [Deprecated]: syz.1.13596 (pid 16024) Use of int in maxseg socket option. [ 920.050378][T16024] Use struct sctp_assoc_value instead [ 920.159034][ T4271] ocfs2: Unmounting device (7,0) on (node local) [ 920.524327][T16048] netlink: 'syz.0.13599': attribute type 1 has an invalid length. [ 920.703017][T16058] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 920.726199][T16052] loop1: detected capacity change from 0 to 4096 [ 920.756740][T16058] mkiss: ax0: crc mode is auto. [ 920.795185][T16052] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 920.855776][T16052] EXT4-fs (loop1): resizing filesystem from 512 to 0 blocks [ 920.863430][T16052] EXT4-fs warning (device loop1): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 920.898958][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 920.928776][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 921.013181][T15279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 921.101661][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 921.667943][T16099] Bluetooth: MGMT ver 1.22 [ 922.075111][T16080] loop0: detected capacity change from 0 to 32768 [ 922.148838][T16080] JBD2: Ignoring recovery information on journal [ 922.234123][T16080] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 922.288696][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 922.324830][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 922.402485][T15279] device veth0_vlan entered promiscuous mode [ 922.446087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 922.461578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 922.513953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 922.541655][ T4271] ocfs2: Unmounting device (7,0) on (node local) [ 922.541808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 922.574112][T16137] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13620'. [ 922.596537][T15279] device veth1_vlan entered promiscuous mode [ 922.683411][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 922.701067][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 922.779975][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 922.810722][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 922.824066][T16144] loop1: detected capacity change from 0 to 256 [ 922.843321][T15279] device veth0_macvtap entered promiscuous mode [ 922.895013][T15279] device veth1_macvtap entered promiscuous mode [ 922.943774][T16144] FAT-fs (loop1): Directory bread(block 64) failed [ 922.969645][T16144] FAT-fs (loop1): Directory bread(block 65) failed [ 922.981629][T15279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 922.997375][T16144] FAT-fs (loop1): Directory bread(block 66) failed [ 923.016827][T16144] FAT-fs (loop1): Directory bread(block 67) failed [ 923.029773][T15279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 923.044323][T16144] FAT-fs (loop1): Directory bread(block 68) failed [ 923.061517][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 923.099487][T16144] FAT-fs (loop1): Directory bread(block 69) failed [ 923.106139][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 923.106171][T16144] FAT-fs (loop1): Directory bread(block 70) failed [ 923.159751][T16144] FAT-fs (loop1): Directory bread(block 71) failed [ 923.166787][T16144] FAT-fs (loop1): Directory bread(block 72) failed [ 923.176455][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 923.207419][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 923.233047][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 923.239684][T16144] FAT-fs (loop1): Directory bread(block 73) failed [ 923.255591][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 923.287264][T15279] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.306514][T15279] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.363463][T15279] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.403933][T15279] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.454797][T16168] lo: MTU too low for tipc bearer [ 923.463583][T16168] tipc: Enabling of bearer rejected, failed to enable media [ 923.690949][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 923.698831][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.750345][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 923.803890][ T1243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 923.829417][ T1243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.840001][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 923.942591][T16191] loop0: detected capacity change from 0 to 4096 [ 924.008475][T16191] EXT4-fs: inline encryption not supported [ 924.086072][T16191] EXT4-fs (loop0): Test dummy encryption mode enabled [ 924.140594][T16191] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0003] [ 924.212681][T16191] System zones: 0-5 [ 924.285215][T16191] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 924.333123][T16191] EXT4-fs: inline encryption not supported [ 924.399660][T16191] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 924.563834][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 925.238216][T16271] loop4: detected capacity change from 0 to 1024 [ 925.248129][T16273] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 925.541328][T16286] loop5: detected capacity change from 0 to 128 [ 925.595564][T16286] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 925.641423][T16286] hpfs: filesystem error: improperly stopped [ 925.667887][T16286] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 925.699823][T16286] hpfs: You really don't want any checks? You are crazy... [ 925.707448][T16286] hpfs: hpfs_map_sector(): read error [ 925.760192][T16286] hpfs: code page support is disabled [ 925.780223][T16286] hpfs: hpfs_map_4sectors(): unaligned read [ 925.822254][T16286] hpfs: hpfs_map_4sectors(): unaligned read [ 925.858769][T16286] hpfs: filesystem error: unable to find root dir [ 925.954254][T16286] hpfs: hpfs_map_4sectors(): unaligned read [ 925.998859][T16286] hpfs: hpfs_map_sector(): read error [ 926.032788][T16309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13657'. [ 927.886236][T16388] loop5: detected capacity change from 0 to 24 [ 927.930513][T16388] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 928.009518][T16388] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 928.188157][T16398] vivid-000: disconnect [ 928.215949][T16396] vivid-000: reconnect [ 928.489513][ T4318] kernel write not supported for file /sysvipc/msg (pid: 4318 comm: kworker/0:6) [ 928.627659][T16416] option changes via remount are deprecated (pid=16415 comm=syz.2.13687) [ 928.855733][T16428] loop5: detected capacity change from 0 to 164 [ 928.903732][T16428] Unsupported NM flag settings (240) [ 929.801747][T16473] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13703'. [ 929.850700][T16475] program syz.5.13704 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 930.409580][ T4779] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 930.599599][ T4779] usb 6-1: Using ep0 maxpacket: 32 [ 930.607584][ T4779] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 930.679945][ T4779] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 930.703696][ T4779] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 930.733082][ T4779] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.771713][ T4779] usb 6-1: config 0 descriptor?? [ 930.866864][T16516] sp0: Synchronizing with TNC [ 931.188940][ T4779] ft260 0003:0403:6030.0006: item fetching failed at offset 0/2 [ 931.215909][ T4779] ft260 0003:0403:6030.0006: failed to parse HID [ 931.236238][ T4779] ft260: probe of 0003:0403:6030.0006 failed with error -22 [ 931.369595][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.376038][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.416425][T16543] comedi comedi0: bad chanlist[0]=0x00000009 chan=9 range length=0 [ 931.425787][ T4779] usb 6-1: USB disconnect, device number 2 [ 931.562575][T16556] loop0: detected capacity change from 0 to 512 [ 931.604185][T16556] EXT4-fs: Ignoring removed nobh option [ 931.616200][T16556] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 931.642066][T16556] EXT4-fs (loop0): 1 truncate cleaned up [ 931.647962][T16556] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 931.812082][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 933.425703][T16594] loop5: detected capacity change from 0 to 32768 [ 933.534987][T16594] XFS (loop5): Mounting V5 Filesystem [ 933.743777][T16594] XFS (loop5): Ending clean mount [ 933.812682][ T27] audit: type=1800 audit(1779410634.997:595): pid=16594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.13726" name="file2" dev="loop5" ino=9287 res=0 errno=0 [ 933.945987][T15279] XFS (loop5): Unmounting Filesystem [ 935.346515][T16674] loop5: detected capacity change from 0 to 32768 [ 935.379055][T16674] JBD2: Ignoring recovery information on journal [ 935.417685][T16674] jbd2_journal_bmap: journal block not found at offset 32 on loop5-75 [ 935.467434][T16674] JBD2: bad block at offset 32 [ 935.509071][T16674] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 935.712412][T15279] ocfs2: Unmounting device (7,5) on (node local) [ 936.114132][T16718] loop5: detected capacity change from 0 to 64 [ 937.044396][T16743] loop0: detected capacity change from 0 to 64 [ 937.193567][T16743] syz.0.13760: attempt to access beyond end of device [ 937.193567][T16743] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 937.293443][T16743] Buffer I/O error on dev loop0, logical block 512, async page read [ 937.329697][T16743] syz.0.13760: attempt to access beyond end of device [ 937.329697][T16743] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 937.392838][T16756] vivid-000: disconnect [ 937.411896][T16755] vivid-000: reconnect [ 937.430642][T16743] Buffer I/O error on dev loop0, logical block 56576, async page read [ 937.549846][T16751] syz.0.13760: attempt to access beyond end of device [ 937.549846][T16751] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 937.609672][T16751] Buffer I/O error on dev loop0, logical block 512, async page read [ 937.629479][T16751] syz.0.13760: attempt to access beyond end of device [ 937.629479][T16751] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 937.711846][T16751] Buffer I/O error on dev loop0, logical block 56576, async page read [ 937.788190][T16767] wg1 speed is unknown, defaulting to 1000 [ 937.800715][T16767] lo speed is unknown, defaulting to 1000 [ 937.947515][T16784] loop4: detected capacity change from 0 to 1024 [ 938.085268][ T27] audit: type=1800 audit(1779410639.267:596): pid=16784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.13769" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 938.276993][ T9] hfsplus: b-tree write err: -5, ino 25 [ 938.284146][ T9] hfsplus: b-tree write err: -5, ino 4 [ 938.303357][ T9] hfsplus: b-tree write err: -5, ino 2 [ 939.336116][ T27] audit: type=1326 audit(1779410640.517:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16840 comm="syz.0.13779" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed52b9ce59 code=0x7ffc0000 [ 939.468802][ T27] audit: type=1326 audit(1779410640.517:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16840 comm="syz.0.13779" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed52b9ce59 code=0x7ffc0000 [ 939.579889][ T27] audit: type=1326 audit(1779410640.547:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16840 comm="syz.0.13779" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7fed52b9ce59 code=0x7ffc0000 [ 939.659751][ T27] audit: type=1326 audit(1779410640.547:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16840 comm="syz.0.13779" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed52b9ce59 code=0x7ffc0000 [ 939.688896][T16852] sp0: Synchronizing with TNC [ 939.746795][ T27] audit: type=1326 audit(1779410640.547:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16840 comm="syz.0.13779" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed52b9ce59 code=0x7ffc0000 [ 940.276794][T16873] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 941.146601][T16870] loop0: detected capacity change from 0 to 32768 [ 941.304778][T16870] XFS (loop0): Mounting V5 Filesystem [ 941.449217][T16870] XFS (loop0): Ending clean mount [ 941.463817][T16870] XFS (loop0): Unmounting Filesystem [ 942.599758][ T4286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 942.620865][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 942.631087][ T4286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 942.655839][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 942.663745][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 942.671337][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 942.925243][T16942] wg1 speed is unknown, defaulting to 1000 [ 943.069712][T16942] lo speed is unknown, defaulting to 1000 [ 943.434925][T17016] loop4: detected capacity change from 0 to 1024 [ 943.459203][T17016] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 943.539131][T17016] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 943.834980][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 943.876626][T16942] chnl_net:caif_netlink_parms(): no params data found [ 944.234711][T16942] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.285425][T16942] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.316796][T16942] device bridge_slave_0 entered promiscuous mode [ 944.356996][T16942] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.389166][T16942] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.437676][T16942] device bridge_slave_1 entered promiscuous mode [ 944.538885][T16942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 944.571027][T16942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 944.712400][T16942] team0: Port device team_slave_0 added [ 944.719573][T15285] Bluetooth: hci2: command 0x0409 tx timeout [ 944.784562][T16942] team0: Port device team_slave_1 added [ 944.850848][T17173] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13819'. [ 945.011013][T16942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 945.028326][T16942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 945.122911][T16942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 945.182218][T16942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 945.210135][T16942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 945.308067][T16942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.376602][ T9] device .*! left promiscuous mode [ 945.445006][T17225] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13826'. [ 945.489569][T17225] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13826'. [ 945.717861][T16942] device hsr_slave_0 entered promiscuous mode [ 945.746415][T16942] device hsr_slave_1 entered promiscuous mode [ 945.782348][T16942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 945.812698][T16942] Cannot create hsr debugfs directory [ 946.064352][T17277] CUSE: unknown device info "" [ 946.069690][T15167] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 946.084167][T17277] CUSE: unknown device info "" [ 946.089081][T17277] CUSE: unknown device info "" [ 946.101795][T17277] CUSE: unknown device info "" [ 946.106697][T17277] CUSE: unknown device info "" [ 946.116265][T17277] CUSE: unknown device info "" [ 946.121256][T17277] CUSE: unknown device info "" [ 946.126276][T17277] CUSE: zero length info key specified [ 946.168414][T17264] device ipvlan2 entered promiscuous mode [ 946.290729][T15167] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 946.308295][T15167] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 946.347069][T15167] usb 3-1: config 220 has no interface number 2 [ 946.355283][T15167] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 946.421600][T15167] usb 3-1: config 220 interface 0 has no altsetting 0 [ 946.444746][T17325] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13837'. [ 946.456220][T15167] usb 3-1: config 220 interface 76 has no altsetting 0 [ 946.469220][T15167] usb 3-1: config 220 interface 1 has no altsetting 0 [ 946.490929][T15167] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 946.509452][T15167] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.525041][T15167] usb 3-1: Product: syz [ 946.536029][T15167] usb 3-1: Manufacturer: syz [ 946.546469][T15167] usb 3-1: SerialNumber: syz [ 946.777023][T15167] usb 3-1: selecting invalid altsetting 0 [ 946.799646][T15285] Bluetooth: hci2: command 0x041b tx timeout [ 946.833914][T15167] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 946.876548][T15167] usb 3-1: No valid video chain found. [ 946.949910][T15167] usb 3-1: selecting invalid altsetting 0 [ 946.984218][T15167] usbtest: probe of 3-1:220.1 failed with error -22 [ 947.008492][T15167] usb 3-1: USB disconnect, device number 75 [ 947.837120][T17421] loop0: detected capacity change from 0 to 64 [ 947.874675][T17418] use of bytesused == 0 is deprecated and will be removed in the future, [ 947.901850][T17423] loop4: detected capacity change from 0 to 1024 [ 947.945490][T17418] use the actual size instead. [ 947.979038][T17423] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 948.033971][T17423] ext4 filesystem being mounted at /2375/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 948.134221][T16942] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 948.220260][T17423] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: comm syz.4.13846: lblock 0 mapped to illegal pblock 0 (length 6) [ 948.276949][T17423] EXT4-fs (loop4): Remounting filesystem read-only [ 948.407652][T16942] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 948.445469][T16942] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 948.467953][T17457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13855'. [ 948.486365][T16942] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 948.493961][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 948.568549][T17460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13854'. [ 948.743136][T17469] loop4: detected capacity change from 0 to 128 [ 948.846635][T17469] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 948.879570][T15285] Bluetooth: hci2: command 0x040f tx timeout [ 948.886823][T17469] hpfs: filesystem error: improperly stopped [ 948.918748][T17469] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 948.987481][T17469] hpfs: You really don't want any checks? You are crazy... [ 949.018268][T17469] hpfs: hpfs_map_sector(): read error [ 949.068875][T17469] hpfs: code page support is disabled [ 949.089659][T17469] hpfs: hpfs_map_4sectors(): unaligned read [ 949.108091][T17469] hpfs: hpfs_map_4sectors(): unaligned read [ 949.142230][T17469] hpfs: filesystem error: unable to find root dir [ 949.224881][T16942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.309629][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 949.330238][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 949.376097][T16942] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.600270][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 949.617582][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 949.626729][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.629670][T14059] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 949.634091][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 949.750199][T17512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13866'. [ 949.789549][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 949.799007][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 949.830286][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 949.863858][T14059] usb 3-1: Using ep0 maxpacket: 8 [ 949.871532][T14059] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 949.880382][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.887543][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 949.930457][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 949.940184][T14059] usb 3-1: config 179 has no interface number 0 [ 949.948890][T14059] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 949.952915][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 950.019378][T14059] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 950.040883][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 950.047503][T14059] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 950.083379][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 950.096931][T14059] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 950.108195][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 950.137792][T14059] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 950.143932][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 950.191420][T14059] usb 3-1: config 179 interface 65 has no altsetting 0 [ 950.196039][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 950.227893][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 950.229771][T14059] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 950.271298][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 950.297756][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 950.321664][T14059] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.333046][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 950.365058][T16942] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 950.436686][T14059] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input59 [ 950.627301][T17493] loop0: detected capacity change from 0 to 32768 [ 950.708458][ T4318] usb 3-1: USB disconnect, device number 76 [ 950.737318][ T4318] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 950.959498][T15285] Bluetooth: hci2: command 0x0419 tx timeout [ 951.069664][ T9] device hsr_slave_0 left promiscuous mode [ 951.126533][ T9] device hsr_slave_1 left promiscuous mode [ 951.157795][ T9] device dummy0 left promiscuous mode [ 951.173203][ T9] bridge0: port 3(dummy0) entered disabled state [ 951.191972][ T9] device bridge_slave_1 left promiscuous mode [ 951.198236][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.320565][ T9] device bridge_slave_0 left promiscuous mode [ 951.326978][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.051636][ T9] bond4 (unregistering): Released all slaves [ 953.079546][T17627] loop0: detected capacity change from 0 to 4096 [ 953.140072][T17627] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 953.204553][T17627] ntfs: volume version 3.1. [ 953.357502][T17635] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 953.593843][ T9] bond3 (unregistering): Released all slaves [ 953.968682][ T9] bond2 (unregistering): Released all slaves [ 954.262064][ T9] bond1 (unregistering): Released all slaves [ 955.168426][ T9] team0 (unregistering): Port device team_slave_1 removed [ 955.228791][ T9] team0 (unregistering): Port device team_slave_0 removed [ 955.285826][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 955.351054][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 955.774092][ T9] bond0 (unregistering): Released all slaves [ 956.477886][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 956.498173][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 956.527471][T16942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 956.638476][T15167] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 956.880130][T15167] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 956.889248][T15167] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.912343][T15167] usb 3-1: config 0 descriptor?? [ 956.927187][T17703] loop0: detected capacity change from 0 to 32768 [ 956.938551][T15167] cp210x 3-1:0.0: cp210x converter detected [ 956.973244][T17703] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.13902 (17703) [ 957.050129][T17703] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 957.147984][T17703] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 957.192514][T17703] BTRFS info (device loop0): using free space tree [ 957.450412][T17703] BTRFS info (device loop0): enabling ssd optimizations [ 957.547911][T15167] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 957.569658][T15167] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 957.622259][T15167] usb 3-1: cp210x converter now attached to ttyUSB0 [ 957.643499][T15167] usb 3-1: USB disconnect, device number 77 [ 957.667661][ T4271] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 957.697604][T15167] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 957.732246][T15167] cp210x 3-1:0.0: device disconnected [ 958.277469][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 958.288614][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 958.324513][T17805] loop4: detected capacity change from 0 to 512 [ 958.416437][T17805] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 958.443595][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 958.487858][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 958.533983][T16942] device veth0_vlan entered promiscuous mode [ 958.602180][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 958.630599][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 958.674119][T16942] device veth1_vlan entered promiscuous mode [ 958.792936][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 958.824041][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 958.870457][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 958.882334][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 958.926603][T16942] device veth0_macvtap entered promiscuous mode [ 958.968334][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 958.971899][T16942] device veth1_macvtap entered promiscuous mode [ 959.082025][T16942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 959.117945][T16942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 959.183528][T16942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 959.212553][T17838] device macsec1 entered promiscuous mode [ 959.220905][T17838] device vlan1 entered promiscuous mode [ 959.236245][T17844] loop4: detected capacity change from 0 to 1024 [ 959.247443][T17848] loop0: detected capacity change from 0 to 256 [ 959.258443][T17838] device vlan1 left promiscuous mode [ 959.290234][T17844] EXT4-fs: Ignoring removed orlov option [ 959.373324][T17844] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz.4.13919: Invalid inode table block 0 in block_group 0 [ 959.429666][T17844] EXT4-fs (loop4): Remounting filesystem read-only [ 959.436311][T17844] EXT4-fs (loop4): get root inode failed [ 959.449489][T17844] EXT4-fs (loop4): mount failed [ 959.511004][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 959.532381][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 959.559252][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 959.597846][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 959.630697][T16942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 959.653687][T16942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 959.697691][T16942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 959.724331][T17844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13919'. [ 959.769142][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 959.812475][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 959.854355][T16942] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.877067][T16942] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.949391][T16942] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.958165][T16942] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.233673][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 960.273792][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 960.297250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 960.339251][T17901] Bluetooth: MGMT ver 1.22 [ 960.354112][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 960.375503][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 960.399794][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 961.046270][T17930] loop0: detected capacity change from 0 to 2048 [ 961.135677][T17930] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 961.351247][T17944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13941'. [ 961.380837][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 961.407974][T17946] loop4: detected capacity change from 0 to 128 [ 961.554243][T17946] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 961.583003][T17946] ext4 filesystem being mounted at /2399/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 961.762522][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 961.779939][T17963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13943'. [ 962.152766][T17983] loop0: detected capacity change from 0 to 256 [ 962.867160][T18009] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 963.935344][T18044] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 963.941939][T18044] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 963.995038][T18044] vhci_hcd vhci_hcd.0: Device attached [ 964.076336][T18016] loop4: detected capacity change from 0 to 32768 [ 964.176634][T18016] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 964.259488][ T4815] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 964.289391][ T26] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 964.424545][ T4278] ocfs2: Unmounting device (7,4) on (node local) [ 964.479901][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 964.503579][T18048] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 964.524905][ T26] usb 1-1: unable to get BOS descriptor or descriptor too short [ 964.537969][ T9] vhci_hcd: stop threads [ 964.549425][ T26] usb 1-1: no configurations [ 964.564324][ T9] vhci_hcd: release socket [ 964.573151][ T26] usb 1-1: can't read configurations, error -22 [ 964.583817][ T9] vhci_hcd: disconnect device [ 964.940922][T18090] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.13973'. [ 965.344202][T18104] wg1 speed is unknown, defaulting to 1000 [ 965.388057][T18104] lo speed is unknown, defaulting to 1000 [ 966.209144][T18092] loop4: detected capacity change from 0 to 40427 [ 966.251919][T18092] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 966.288921][T18092] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 966.350505][T18092] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 966.431920][T18092] F2FS-fs (loop4): Found nat_bits in checkpoint [ 966.679370][T18092] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 966.733496][T18092] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 966.902720][T18191] loop0: detected capacity change from 0 to 64 [ 967.220549][T18200] netlink: 136 bytes leftover after parsing attributes in process `syz.5.13995'. [ 967.570477][T18168] loop6: detected capacity change from 0 to 32768 [ 967.643842][T18168] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.13987 (18168) [ 967.780847][T18168] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 967.842869][T18168] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 967.879451][T18168] BTRFS info (device loop6): using free space tree [ 968.367868][T18168] BTRFS info (device loop6): enabling ssd optimizations [ 968.457268][T18257] netlink: 'syz.5.14005': attribute type 29 has an invalid length. [ 968.542397][T18257] netlink: 'syz.5.14005': attribute type 29 has an invalid length. [ 968.560085][T18262] netlink: 'syz.5.14005': attribute type 29 has an invalid length. [ 968.712084][T16942] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 969.439868][ T4815] vhci_hcd: vhci_device speed not set [ 970.005022][T18279] loop0: detected capacity change from 0 to 32768 [ 970.090152][T18279] JBD2: Ignoring recovery information on journal [ 970.194357][T18279] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 970.274285][T18319] loop6: detected capacity change from 0 to 8192 [ 970.468433][ T4271] ocfs2: Unmounting device (7,0) on (node local) [ 971.138863][T18369] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14029'. [ 971.294112][T18377] loop4: detected capacity change from 0 to 512 [ 971.331309][T18377] EXT4-fs: Ignoring removed bh option [ 971.360411][T18379] support for cryptoloop has been removed. Use dm-crypt instead. [ 971.376255][T18377] EXT4-fs: inline encryption not supported [ 971.427197][T18377] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 971.584634][T18377] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 971.668125][T18377] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.14038: bg 0: block 248: padding at end of block bitmap is not set [ 971.771077][T18377] Quota error (device loop4): write_blk: dquota write failed [ 971.778585][T18377] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 971.821093][T18407] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14043'. [ 971.827134][T18377] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.14038: Failed to acquire dquot type 1 [ 971.890247][T18377] EXT4-fs (loop4): 1 truncate cleaned up [ 971.906310][T18377] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 972.213439][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 972.221151][T18422] netlink: 'syz.5.14046': attribute type 1 has an invalid length. [ 972.236414][T18424] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14048'. [ 972.559255][T18438] xt_l2tp: invalid flags combination: c [ 972.762756][T18447] loop4: detected capacity change from 0 to 1024 [ 972.864890][T18447] EXT4-fs: Ignoring removed nomblk_io_submit option [ 973.076621][T18447] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 973.153840][T18474] usb usb8: usbfs: process 18474 (syz.5.14061) did not claim interface 0 before use [ 973.228932][T18447] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.14054: bg 0: block 315: padding at end of block bitmap is not set [ 973.353478][T18484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14062'. [ 973.395676][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 973.519806][T14054] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 973.658486][T18500] netlink: 'syz.4.14065': attribute type 4 has an invalid length. [ 973.686599][T18500] netlink: 'syz.4.14065': attribute type 8 has an invalid length. [ 973.695136][T18500] netlink: 197344 bytes leftover after parsing attributes in process `syz.4.14065'. [ 973.741440][T14054] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 973.755719][T18504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14068'. [ 973.769391][T14054] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 973.810861][T14054] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 973.856115][T14054] usb 3-1: config 0 interface 0 has no altsetting 0 [ 973.878656][T14054] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 973.927179][T14054] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.007243][T14054] usb 3-1: config 0 descriptor?? [ 974.357781][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 974.382167][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 974.401481][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 974.408959][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 974.434221][T14054] holtek 0003:1241:5015.0008: unbalanced collection at end of report description [ 974.453807][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 974.461011][T14054] holtek 0003:1241:5015.0008: parse failed [ 974.466332][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 974.477526][T14054] holtek: probe of 0003:1241:5015.0008 failed with error -22 [ 974.504824][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 974.523072][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 974.535209][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 974.544697][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 974.556989][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 974.574271][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 974.595288][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 974.619432][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 974.634566][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 974.651320][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 974.667351][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 974.676906][T14054] usb 3-1: USB disconnect, device number 78 [ 974.684073][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 974.693302][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 974.726028][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 974.751735][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 974.769462][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 974.777175][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 974.785087][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 974.801633][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 974.815803][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 974.850173][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 974.857656][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 974.872487][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 974.889472][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 974.907162][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 974.919909][T18563] ieee802154 phy0 wpan0: encryption failed: -22 [ 974.930081][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 974.957965][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 974.978445][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 974.992040][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.019405][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.046333][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.069482][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.086866][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.096834][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.110983][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.119029][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.131739][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.141766][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.149216][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.163101][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.179486][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.197205][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.215399][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.237483][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.260171][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.284615][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.307455][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.327457][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.337432][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.346258][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.354064][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.362081][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.389424][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.412167][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.421880][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.429700][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.437323][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.445819][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.455091][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.470390][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.478513][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.491201][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.498863][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.506897][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.514752][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.559648][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.567326][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.575337][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.583652][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.592014][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.599866][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.613823][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.623921][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.634010][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.649535][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.666589][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.683810][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.700394][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.717192][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.736151][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.755147][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.772074][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.788153][T18584] netlink: 'syz.5.14088': attribute type 29 has an invalid length. [ 975.791875][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.811822][T18584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14088'. [ 975.814101][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.837982][T18584] netlink: 'syz.5.14088': attribute type 29 has an invalid length. [ 975.846309][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.857995][T18584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14088'. [ 975.864927][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.885372][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.894992][T18588] netlink: 'syz.5.14088': attribute type 29 has an invalid length. [ 975.902452][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.919430][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.929717][T18588] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14088'. [ 975.935333][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.959949][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.976465][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 975.998829][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 976.012291][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 976.027726][ T4815] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 976.067345][ T4815] hid-generic 0000:0000:0004.0007: hidraw0: HID v0.03 Device [syz0] on syz1 [ 976.149838][T18578] netlink: 'syz.0.14084': attribute type 4 has an invalid length. [ 976.205325][T18599] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14089'. [ 976.238467][T18599] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14089'. [ 976.286774][T18610] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14089'. [ 976.319912][T18610] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14089'. [ 976.499552][ T4803] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 976.689498][ T4803] usb 6-1: Using ep0 maxpacket: 32 [ 976.701527][ T4803] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 976.749423][ T4803] usb 6-1: config 0 has no interface number 0 [ 976.779941][ T4803] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 976.823758][ T4803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.851033][T18628] fido_id[18628]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 976.874900][ T4803] usb 6-1: Product: syz [ 976.890110][ T4803] usb 6-1: Manufacturer: syz [ 976.890627][T18631] loop6: detected capacity change from 0 to 4096 [ 976.894761][ T4803] usb 6-1: SerialNumber: syz [ 976.959192][ T4803] usb 6-1: config 0 descriptor?? [ 977.004487][T18644] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 977.022759][ T4803] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 977.075422][ T4803] usb 6-1: selecting invalid altsetting 1 [ 977.075541][T18631] ntfs3: loop6: failed to convert "046c" to maccroatian [ 977.118306][ T4803] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 977.166522][ T4803] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 977.240402][ T4803] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 977.285650][ T4803] usb 6-1: media controller created [ 977.343411][ T4803] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 978.099828][T18687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 978.129952][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 978.325613][T18602] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 978.337403][T18705] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 978.373149][ T4803] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 978.400301][ T4803] zl10353_read_register: readreg error (reg=127, ret==-71) [ 978.412562][T18712] loop0: detected capacity change from 0 to 64 [ 978.435712][ T4803] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 978.568000][T18712] Trying to free block not in datazone [ 978.593497][ T4803] usb 6-1: USB disconnect, device number 3 [ 978.814820][T18732] netlink: 'syz.6.14118': attribute type 298 has an invalid length. [ 979.178418][T18749] loop4: detected capacity change from 0 to 1024 [ 979.220012][T18749] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 979.272611][T18749] EXT4-fs error (device loop4): ext4_get_journal_inode:5762: inode #32: comm syz.4.14122: iget: special inode unallocated [ 979.340179][T18749] EXT4-fs (loop4): no journal found [ 979.345487][T18749] EXT4-fs (loop4): can't get journal size [ 979.404336][T18749] EXT4-fs (loop4): filesystem is read-only [ 979.412070][T18749] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 979.560922][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 979.723820][ T9849] kernel write not supported for file /snd/seq (pid: 9849 comm: kworker/1:9) [ 979.879257][T18765] loop0: detected capacity change from 0 to 8192 [ 979.985196][T18789] loop6: detected capacity change from 0 to 64 [ 980.001652][T18765] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 980.073020][T18765] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 980.082849][T18765] REISERFS (device loop0): using ordered data mode [ 980.090383][T18765] reiserfs: using flush barriers [ 980.100015][T18765] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 980.149840][T18765] REISERFS (device loop0): checking transaction log (loop0) [ 980.209562][T18765] REISERFS (device loop0): Using r5 hash to sort names [ 980.216985][T18765] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 981.347672][T18839] loop4: detected capacity change from 0 to 4096 [ 981.465953][T18839] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 981.524779][T18839] ntfs3: loop4: Failed to load $Extend. [ 981.638017][T18839] ntfs3: loop4: ino=1b, "file0" directory corrupted [ 981.831261][T18862] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14150'. [ 982.648294][T18902] loop0: detected capacity change from 0 to 2048 [ 982.709771][T18902] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 982.798320][T18902] overlayfs: upper fs needs to support d_type. [ 982.922698][T18902] overlayfs: cleanup of 'work/#3' failed (-2) [ 982.941258][T18902] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 982.974256][T18913] netlink: 48 bytes leftover after parsing attributes in process `syz.2.14163'. [ 982.982348][T18902] overlayfs: failed to set xattr on upper [ 983.010236][T18902] overlayfs: ...falling back to index=off,metacopy=off. [ 983.048741][T18913] team0: Device vlan0 is already an upper device of the team interface [ 983.196603][ T4271] UDF-fs: error (device loop0): udf_read_inode: (ino 1440) failed !bh [ 983.240473][ T4271] UDF-fs: error (device loop0): udf_read_inode: (ino 1440) failed !bh [ 983.521245][T18936] Invalid ELF header magic: != ELF [ 983.618138][T18943] loop4: detected capacity change from 0 to 1024 [ 983.658848][T18943] EXT4-fs: Ignoring removed orlov option [ 983.762302][T18943] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 983.784793][T18960] loop6: detected capacity change from 0 to 64 [ 983.831691][T18960] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing [ 983.981264][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 985.196914][T19024] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14189'. [ 985.581351][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 985.594068][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 985.603302][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 985.616950][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 985.626729][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 985.634808][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 985.739987][T14054] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 985.829938][T19045] wg1 speed is unknown, defaulting to 1000 [ 985.870918][T19045] lo speed is unknown, defaulting to 1000 [ 985.960072][T14054] usb 3-1: Using ep0 maxpacket: 16 [ 985.978538][T14054] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.049827][T14054] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.118944][T14054] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 986.128862][T19050] loop6: detected capacity change from 0 to 32768 [ 986.184118][T14054] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 986.231608][T19050] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 986.240629][T14054] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.261158][T14054] usb 3-1: config 0 descriptor?? [ 986.473113][T19045] chnl_net:caif_netlink_parms(): no params data found [ 986.517282][T16942] ocfs2: Unmounting device (7,6) on (node local) [ 986.636977][T19136] Bluetooth: MGMT ver 1.22 [ 986.686056][T14054] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 986.741484][T19163] loop6: detected capacity change from 0 to 64 [ 986.750411][T14054] microsoft 0003:045E:07DA.0009: No inputs registered, leaving [ 986.884031][T14054] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 986.897305][T14054] microsoft 0003:045E:07DA.0009: no inputs found [ 986.921130][T14054] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 986.954612][T14054] usb 3-1: USB disconnect, device number 79 [ 986.996854][T19045] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.109477][T19045] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.118543][T19045] device bridge_slave_0 entered promiscuous mode [ 987.151718][T19045] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.158952][T19045] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.191588][T19045] device bridge_slave_1 entered promiscuous mode [ 987.349112][T19045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 987.383120][T19218] fido_id[19218]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 987.439656][ T27] audit: type=1326 audit(1779410688.627:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19243 comm="syz.5.14204" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a8319ce59 code=0x0 [ 987.494911][T19045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 987.657241][T19045] team0: Port device team_slave_0 added [ 987.681050][ T4286] Bluetooth: hci1: command 0x0409 tx timeout [ 987.703805][T19045] team0: Port device team_slave_1 added [ 987.757797][T19045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 987.773907][T19045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.841610][T19045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 987.881798][T19045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 987.899128][T19045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.984146][T19045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 988.134315][T19045] device hsr_slave_0 entered promiscuous mode [ 988.152394][T19298] loop6: detected capacity change from 0 to 4096 [ 988.172080][T19298] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 988.196102][T19045] device hsr_slave_1 entered promiscuous mode [ 988.254311][T19328] loop4: detected capacity change from 0 to 512 [ 988.273089][T19045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 988.287911][T19045] Cannot create hsr debugfs directory [ 988.334692][T19328] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 988.389503][T19328] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 988.450419][T19328] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 988.551792][T19328] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 988.579615][T19328] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 988.619660][T19328] EXT4-fs (loop4): failed to initialize system zone (-117) [ 988.627099][T19328] EXT4-fs (loop4): mount failed [ 989.189716][T19045] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 989.250146][T19045] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 989.275434][ T4815] kernel write not supported for file /input/event0 (pid: 4815 comm: kworker/1:17) [ 989.300621][T19045] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 989.339157][T19045] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 989.379652][T19446] netlink: 'syz.6.14220': attribute type 5 has an invalid length. [ 989.688492][T19045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 989.744426][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 989.745124][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 989.754649][T19045] 8021q: adding VLAN 0 to HW filter on device team0 [ 989.760346][ T4286] Bluetooth: hci1: command 0x041b tx timeout [ 989.814347][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 989.830431][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 989.895002][T19467] syz.4.14225[19467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 989.895195][T19467] syz.4.14225[19467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 989.901973][ T1243] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.925480][ T1243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 989.996018][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 990.050644][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 990.070570][ T1243] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.077746][ T1243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 990.126297][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 990.174888][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 990.190742][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 990.262184][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 990.364621][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 990.400624][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 990.444267][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 990.480453][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 990.517008][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 990.554883][T19045] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 990.590946][T19045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 990.624652][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 990.635036][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 990.663387][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 990.793986][T19498] loop4: detected capacity change from 0 to 128 [ 990.969132][T19498] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 991.010820][T19498] ext4 filesystem being mounted at /2452/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 991.315324][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 991.389824][T19519] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14238'. [ 991.418457][T19477] loop6: detected capacity change from 0 to 32768 [ 991.552757][T19477] XFS (loop6): Mounting V5 Filesystem [ 991.683179][T19477] XFS (loop6): Ending clean mount [ 991.747628][T19477] XFS (loop6): Quotacheck needed: Please wait. [ 991.844077][ T4286] Bluetooth: hci1: command 0x040f tx timeout [ 991.873419][T19045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 991.905088][T19477] XFS (loop6): Quotacheck: Done. [ 991.914928][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 991.937226][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 992.124924][T16942] XFS (loop6): Unmounting Filesystem [ 992.803858][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.810368][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.235555][T19549] loop4: detected capacity change from 0 to 32768 [ 993.286506][T19549] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.14244 (19549) [ 993.364737][T19592] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14252'. [ 993.399526][T19549] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 993.434780][T19549] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 993.470794][T19549] BTRFS info (device loop4): setting nodatacow, compression disabled [ 993.502001][T19549] BTRFS info (device loop4): enabling auto defrag [ 993.508561][T19549] BTRFS info (device loop4): metadata ratio 5 [ 993.537995][T19549] BTRFS info (device loop4): max_inline at 0 [ 993.570146][T19549] BTRFS info (device loop4): using free space tree [ 993.611218][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 993.651700][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 993.745961][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 993.795685][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 993.903851][T19045] device veth0_vlan entered promiscuous mode [ 993.921552][ T4286] Bluetooth: hci1: command 0x0419 tx timeout [ 993.935704][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 994.013042][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 994.094779][T19045] device veth1_vlan entered promiscuous mode [ 994.211902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 994.256069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 994.300437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 994.342786][ T4278] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 994.360303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 994.397853][T19045] device veth0_macvtap entered promiscuous mode [ 994.442032][T19045] device veth1_macvtap entered promiscuous mode [ 994.550876][T19045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 994.589415][T19045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.645294][T19045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 994.701824][T19045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.750764][T19045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 994.758173][T19638] netlink: 'syz.5.14259': attribute type 10 has an invalid length. [ 995.066561][T19638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 995.098153][T19638] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 995.127185][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 995.140600][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 995.148893][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 995.180938][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 995.199018][T19644] netlink: 'syz.5.14259': attribute type 10 has an invalid length. [ 995.213677][T19644] netlink: 40 bytes leftover after parsing attributes in process `syz.5.14259'. [ 995.269557][T19644] device batadv0 entered promiscuous mode [ 995.276907][T19644] bond0: (slave batadv0): Releasing backup interface [ 995.318333][T19644] bridge0: port 3(batadv0) entered blocking state [ 995.340322][T19644] bridge0: port 3(batadv0) entered disabled state [ 995.351535][T19045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.409362][T19045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.454596][T19045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.509642][T19045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.542412][T19045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 995.578886][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 995.602660][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 995.666670][T19045] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.689081][T19045] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.721480][T19045] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.770750][T19045] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.825545][ T1243] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 995.836220][ T1243] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 996.059049][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.075191][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.132487][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 996.215336][ T1243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.226293][ T1243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.260619][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 996.573249][T19723] loop4: detected capacity change from 0 to 2048 [ 996.621160][T19723] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 996.745518][T19730] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 996.817823][ T5676] udevd[5676]: incorrect nilfs2 checksum on /dev/loop4 [ 997.495842][T19766] loop4: detected capacity change from 0 to 512 [ 997.576767][T19766] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 997.633325][T19766] System zones: 1-12 [ 997.677747][T19766] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.14287: corrupted in-inode xattr [ 997.733626][T19766] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.14287: couldn't read orphan inode 15 (err -117) [ 997.782978][T19766] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 998.008204][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 998.558799][T19820] loop7: detected capacity change from 0 to 2048 [ 998.684451][T19820] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 999.108801][T19843] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 999.158874][T19843] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 999.531345][T19864] xt_CT: You must specify a L4 protocol and not use inversions on it [ 999.541033][T19867] ax25_connect(): syz.7.14314 uses autobind, please contact jreuter@yaina.de [ 999.843738][T19889] loop4: detected capacity change from 0 to 256 [ 999.946645][T19889] FAT-fs (loop4): Directory bread(block 64) failed [ 999.969416][T19889] FAT-fs (loop4): Directory bread(block 65) failed [ 1000.009841][T19889] FAT-fs (loop4): Directory bread(block 66) failed [ 1000.016464][T19889] FAT-fs (loop4): Directory bread(block 67) failed [ 1000.109509][T19889] FAT-fs (loop4): Directory bread(block 68) failed [ 1000.116131][T19889] FAT-fs (loop4): Directory bread(block 69) failed [ 1000.170126][T19897] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14324'. [ 1000.196878][T19901] [U]  [ 1000.199724][T19901] [U] K{ [ 1000.207654][T19889] FAT-fs (loop4): Directory bread(block 70) failed [ 1000.224645][T19901] [U] t 1ŠFfˊ`GJgo/mC [ 1000.247698][T19889] FAT-fs (loop4): Directory bread(block 71) failed [ 1000.270360][T19901] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 1000.302605][T19889] FAT-fs (loop4): Directory bread(block 72) failed [ 1000.309226][T19889] FAT-fs (loop4): Directory bread(block 73) failed [ 1000.367828][T19901] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 1000.413551][T19901] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 1000.529631][T19901] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 1000.648257][T19901] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 1000.719954][T19901] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 1000.792948][T19901] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/< rejected, failed to enable media [ 1016.934495][T20623] option changes via remount are deprecated (pid=20622 comm=syz.6.14481) [ 1016.985041][T20623] cgroup: option or name mismatch, new: 0x0 ".", old: 0x0 "" [ 1017.005361][T20628] bridge0: port 3(bond0) entered blocking state [ 1017.029591][T20628] bridge0: port 3(bond0) entered disabled state [ 1017.061433][T20628] device bond0 entered promiscuous mode [ 1017.097295][T20628] device bond_slave_0 entered promiscuous mode [ 1017.121850][T20628] device bond_slave_1 entered promiscuous mode [ 1017.185133][T20628] bridge0: port 3(bond0) entered blocking state [ 1017.191605][T20628] bridge0: port 3(bond0) entered forwarding state [ 1017.297250][T14044] libceph: connect (1)[c::]:6789 error -101 [ 1017.332619][T14044] libceph: mon0 (1)[c::]:6789 connect error [ 1017.371447][T14044] libceph: connect (1)[c::]:6789 error -101 [ 1017.392282][T14044] libceph: mon0 (1)[c::]:6789 connect error [ 1017.674970][T14060] libceph: connect (1)[c::]:6789 error -101 [ 1017.683117][T14060] libceph: mon0 (1)[c::]:6789 connect error [ 1017.914840][T20631] ceph: No mds server is up or the cluster is laggy [ 1018.645482][T20692] loop7: detected capacity change from 0 to 16 [ 1018.739868][T20692] erofs: (device loop7): mounted with root inode @ nid 36. [ 1019.266066][T20671] loop6: detected capacity change from 0 to 32768 [ 1019.327391][T20671] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 1019.336117][T14044] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1019.377213][T20671] JBD2: Ignoring recovery information on journal [ 1019.531201][T14044] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1019.567198][T14044] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1019.610064][T14044] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1019.643322][T20671] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1019.683086][T14044] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1019.732553][T14044] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.783205][T14044] usb 6-1: config 0 descriptor?? [ 1020.036362][T16942] ocfs2: Unmounting device (7,6) on (node local) [ 1020.200905][T14044] steelseries_srws1 0003:1038:1410.000B: unknown main item tag 0x1 [ 1020.220215][T14044] steelseries_srws1 0003:1038:1410.000B: not enough fields in HID_OUTPUT_REPORT 0 [ 1020.408364][T14044] usb 6-1: USB disconnect, device number 6 [ 1020.464189][T20745] loop6: detected capacity change from 0 to 2048 [ 1020.515845][T20745] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1020.877966][T20764] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.14507'. [ 1021.319444][T14044] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 1021.531546][T14044] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1021.568936][T14044] usb 3-1: config 0 has no interface number 0 [ 1021.581489][T14044] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1021.619652][T14044] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.669372][T14044] usb 3-1: Product: syz [ 1021.673634][T14044] usb 3-1: Manufacturer: syz [ 1021.678269][T14044] usb 3-1: SerialNumber: syz [ 1021.723082][T14044] usb 3-1: config 0 descriptor?? [ 1021.755106][T14044] usb 3-1: selecting invalid altsetting 1 [ 1021.801779][T14044] dvb_ttusb_budget: ttusb_init_controller: error [ 1021.808177][T14044] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1022.071318][T20778] loop6: detected capacity change from 0 to 40427 [ 1022.101568][T20778] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 1022.119745][T14044] DVB: Unable to find symbol stv0299_attach() [ 1022.140547][T20778] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1022.148981][T20778] F2FS-fs (loop6): build fault injection attr: rate: 17008, type: 0x3ffff [ 1022.213522][T20778] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x1f8 [ 1022.270163][T20778] F2FS-fs (loop6): invalid crc value [ 1022.331809][T14044] DVB: Unable to find symbol tda8083_attach() [ 1022.344658][T20778] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1022.351158][T14044] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1022.399901][T14044] usb 3-1: USB disconnect, device number 81 [ 1022.560251][T20778] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1022.579321][T20778] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1022.831568][T15285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1022.843290][T15285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1022.852069][T15285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1022.861170][ T4288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1022.868819][ T4288] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1022.876419][ T4288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1023.000780][T16942] syz-executor: attempt to access beyond end of device [ 1023.000780][T16942] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1023.191823][T20842] wg1 speed is unknown, defaulting to 1000 [ 1023.207424][T20842] lo speed is unknown, defaulting to 1000 [ 1023.426211][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.685166][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.881804][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.082293][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.213926][T20954] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1024.475651][T20842] chnl_net:caif_netlink_parms(): no params data found [ 1024.744881][ T11] tipc: Left network mode [ 1024.959695][ T4288] Bluetooth: hci3: command 0x0409 tx timeout [ 1025.240441][T20842] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.247668][T20842] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.276666][T20842] device bridge_slave_0 entered promiscuous mode [ 1025.418660][T20842] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.428755][T20842] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.467369][T20842] device bridge_slave_1 entered promiscuous mode [ 1025.747540][T20842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1025.812784][T21087] loop6: detected capacity change from 0 to 512 [ 1025.843210][T20842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1025.953401][T21087] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.14544: invalid indirect mapped block 4294967295 (level 1) [ 1025.992399][T21087] EXT4-fs (loop6): Remounting filesystem read-only [ 1025.998985][T21087] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.14544: invalid indirect mapped block 4294967295 (level 1) [ 1026.034367][T21087] EXT4-fs (loop6): Remounting filesystem read-only [ 1026.056278][T21087] EXT4-fs (loop6): 2 truncates cleaned up [ 1026.081110][T21087] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1026.118566][T20842] team0: Port device team_slave_0 added [ 1026.171056][T21087] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1450: inode #12: block 7: comm syz.6.14544: path /119/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 1026.204042][T21087] EXT4-fs (loop6): Remounting filesystem read-only [ 1026.294122][T20842] team0: Port device team_slave_1 added [ 1026.346654][T16942] EXT4-fs (loop6): unmounting filesystem. [ 1026.377659][T20842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1026.409750][T20842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1026.435695][ C0] vkms_vblank_simulate: vblank timer overrun [ 1026.516718][T20842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1026.667131][T20842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1026.710062][T20842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1026.823328][T20842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.043299][ T4288] Bluetooth: hci3: command 0x041b tx timeout [ 1027.187550][T20842] device hsr_slave_0 entered promiscuous mode [ 1027.232552][T20842] device hsr_slave_1 entered promiscuous mode [ 1027.256873][T20842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1027.285481][T20842] Cannot create hsr debugfs directory [ 1027.535067][T21212] netlink: 536 bytes leftover after parsing attributes in process `syz.6.14557'. [ 1027.580018][ T11] IPVS: stopping backup sync thread 26615 ... [ 1027.932189][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 1028.182833][T21291] loop7: detected capacity change from 0 to 4096 [ 1028.304315][T21319] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1028.313283][T20842] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1028.878043][T20842] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1028.918346][T20842] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1028.968023][T20842] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1029.119755][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 1029.475627][ T11] device hsr_slave_0 left promiscuous mode [ 1029.516983][ T11] device hsr_slave_1 left promiscuous mode [ 1029.539114][ T11] device dummy0 left promiscuous mode [ 1029.559651][ T11] bridge0: port 3(dummy0) entered disabled state [ 1029.638275][ T11] device bridge_slave_1 left promiscuous mode [ 1029.647535][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.673959][T21310] loop6: detected capacity change from 0 to 32768 [ 1029.698600][ T11] device bridge_slave_0 left promiscuous mode [ 1029.708097][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.787501][T21310] MetaData crosses page boundary!! [ 1029.820923][T21310] lblock = 6161616161, size = 370544640 [ 1029.848347][T21310] CPU: 1 PID: 21310 Comm: syz.6.14565 Not tainted syzkaller #0 [ 1029.855989][T21310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1029.866104][T21310] Call Trace: [ 1029.869500][T21310] [ 1029.872531][T21310] dump_stack_lvl+0x188/0x24e [ 1029.877315][T21310] ? __wake_up_bit+0x210/0x210 [ 1029.882186][T21310] ? show_regs_print_info+0x12/0x12 [ 1029.887445][T21310] ? load_image+0x400/0x400 [ 1029.892055][T21310] __get_metapage+0xaa8/0xfa0 [ 1029.896842][T21310] dtSearch+0x5d5/0x2050 [ 1029.901169][T21310] jfs_symlink+0x851/0xfb0 [ 1029.905653][T21310] ? jfs_unlink+0xa00/0xa00 [ 1029.910254][T21310] ? make_kgid+0x660/0x660 [ 1029.914744][T21310] ? apparmor_path_symlink+0x1ac/0x230 [ 1029.920316][T21310] ? lookup_one_qstr_excl+0x11c/0x240 [ 1029.925799][T21310] ? generic_permission+0x230/0x510 [ 1029.931047][T21310] ? inode_permission+0xef/0x480 [ 1029.936045][T21310] ? bpf_lsm_inode_symlink+0x5/0x10 [ 1029.941359][T21310] ? security_inode_symlink+0xb2/0x100 [ 1029.946963][T21310] vfs_symlink+0x247/0x3d0 [ 1029.951440][T21310] do_symlinkat+0x1b6/0x400 [ 1029.956035][T21310] ? vfs_symlink+0x3d0/0x3d0 [ 1029.960764][T21310] ? getname_flags+0x206/0x500 [ 1029.965608][T21310] __x64_sys_symlink+0x7a/0x90 [ 1029.970424][T21310] do_syscall_64+0x4c/0xa0 [ 1029.974903][T21310] ? clear_bhb_loop+0x60/0xb0 [ 1029.979705][T21310] ? clear_bhb_loop+0x60/0xb0 [ 1029.984455][T21310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1029.990425][T21310] RIP: 0033:0x7f93ae99ce59 [ 1029.994953][T21310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1030.014668][T21310] RSP: 002b:00007f93af948028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 1030.023212][T21310] RAX: ffffffffffffffda RBX: 00007f93aec15fa0 RCX: 00007f93ae99ce59 [ 1030.031283][T21310] RDX: 0000000000000000 RSI: 0000200000000cc0 RDI: 000020000000a900 [ 1030.039296][T21310] RBP: 00007f93aea32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1030.047308][T21310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1030.055409][T21310] R13: 00007f93aec16038 R14: 00007f93aec15fa0 R15: 00007ffcd4a4d278 [ 1030.063466][T21310] [ 1030.067042][ C1] vkms_vblank_simulate: vblank timer overrun [ 1030.129935][ T11] device veth0_macvtap left promiscuous mode [ 1030.267105][T21310] bread failed! [ 1030.577145][ T11] bond8 (unregistering): Released all slaves [ 1030.718663][ T11] bond7 (unregistering): Released all slaves [ 1030.730064][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 1030.861811][ T11] bond6 (unregistering): Released all slaves [ 1030.886164][ T11] bond5 (unregistering): Released all slaves [ 1031.029590][T14044] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1031.210155][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 1031.216309][T14044] usb 3-1: Using ep0 maxpacket: 8 [ 1031.231569][T14044] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 1031.243500][T14044] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1031.256938][T14044] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1031.264440][T14044] usb 3-1: New USB device found, idVendor=04b3, idProduct=3100, bcdDevice= 0.00 [ 1031.274082][T14044] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.285069][T14044] usb 3-1: config 0 descriptor?? [ 1031.620494][ T11] bond4 (unregistering): Released all slaves [ 1031.676147][ T11] bond3 (unregistering): Released all slaves [ 1031.703654][T14044] lenovo 0003:04B3:3100.000C: unknown main item tag 0x2 [ 1031.721406][T14044] lenovo 0003:04B3:3100.000C: unknown main item tag 0x0 [ 1031.728431][T14044] lenovo 0003:04B3:3100.000C: unknown main item tag 0x0 [ 1031.756292][T14044] lenovo 0003:04B3:3100.000C: unknown main item tag 0x0 [ 1031.782608][T14044] lenovo 0003:04B3:3100.000C: unknown main item tag 0x0 [ 1031.825741][T14044] lenovo 0003:04B3:3100.000C: unknown main item tag 0x0 [ 1031.839135][ T11] bond2 (unregistering): Released all slaves [ 1031.845977][T14044] lenovo 0003:04B3:3100.000C: unknown main item tag 0x0 [ 1031.866196][T14044] lenovo 0003:04B3:3100.000C: unknown main item tag 0x0 [ 1031.903490][T14044] lenovo 0003:04B3:3100.000C: hidraw0: USB HID v0.04 Device [HID 04b3:3100] on usb-dummy_hcd.2-1/input0 [ 1031.917562][ T11] bond1 (unregistering): Released all slaves [ 1031.990359][T14044] usb 3-1: USB disconnect, device number 82 [ 1032.316655][T21406] fido_id[21406]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1032.395296][T21415] loop6: detected capacity change from 0 to 512 [ 1032.463836][T21415] EXT4-fs: Ignoring removed oldalloc option [ 1032.571469][T21415] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1032.707142][T21415] EXT4-fs (loop6): 1 truncate cleaned up [ 1032.734639][T21415] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1032.963955][T16942] EXT4-fs (loop6): unmounting filesystem. [ 1033.133138][T21434] loop6: detected capacity change from 0 to 512 [ 1033.194359][T21434] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1033.207043][T21439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14587'. [ 1033.219783][T21434] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1033.558213][T16942] EXT4-fs (loop6): unmounting filesystem. [ 1033.745495][ T27] audit: type=1326 audit(1779410734.927:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21457 comm="syz.6.14591" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ae99ce59 code=0x7ffc0000 [ 1033.859563][ T27] audit: type=1326 audit(1779410734.977:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21457 comm="syz.6.14591" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f93ae99ce59 code=0x7ffc0000 [ 1033.943117][ T27] audit: type=1326 audit(1779410734.977:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21457 comm="syz.6.14591" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ae99ce59 code=0x7ffc0000 [ 1034.065997][ T27] audit: type=1326 audit(1779410734.977:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21457 comm="syz.6.14591" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ae99ce59 code=0x7ffc0000 [ 1034.161094][ T27] audit: type=1326 audit(1779410734.977:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21457 comm="syz.6.14591" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f93ae99ce59 code=0x7ffc0000 [ 1034.275915][ T27] audit: type=1326 audit(1779410734.977:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21457 comm="syz.6.14591" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ae99ce59 code=0x7ffc0000 [ 1034.380172][ T27] audit: type=1326 audit(1779410734.977:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21457 comm="syz.6.14591" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ae99ce59 code=0x7ffc0000 [ 1034.961898][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1035.080864][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1035.661046][ T11] bond0 (unregistering): Released all slaves [ 1035.957384][T20842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1036.048394][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1036.081690][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1036.105067][T20842] 8021q: adding VLAN 0 to HW filter on device team0 [ 1036.158792][T21548] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1036.168393][T19704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1036.188958][T19704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1036.213321][T19704] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.220559][T19704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1036.286771][T19704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1036.332440][T19704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1036.380148][T19704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1036.413772][T19704] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.420998][T19704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1036.475658][T19704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1036.524975][T19704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1036.532340][T21561] comedi comedi3: pcl724: I/O port conflict (0x4f29,4) [ 1036.600060][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1036.654945][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1036.708854][T20842] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1036.811628][T20842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1036.848457][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1036.860316][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1036.881346][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1036.947597][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1037.013617][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1037.043064][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1037.080411][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1037.115973][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1037.518910][T21599] loop6: detected capacity change from 0 to 256 [ 1038.236252][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1038.250115][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1038.296018][T20842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1039.097078][T21673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14653'. [ 1039.225815][T21670] loop6: detected capacity change from 0 to 4096 [ 1039.453717][T21670] ntfs3: loop6: failed to convert "0000" to iso8859-1 [ 1039.475736][T21670] ntfs3: loop6: failed to convert name for inode 1e. [ 1039.650368][T21692] tipc: Started in network mode [ 1039.662113][T21692] tipc: Node identity _, cluster identity 4711 [ 1039.688745][T21692] tipc: Enabling of bearer rejected, failed to enable media [ 1039.879775][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1039.902515][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1039.966393][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1040.005918][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1040.067683][T20842] device veth0_vlan entered promiscuous mode [ 1040.088539][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1040.123496][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1040.175204][T20842] device veth1_vlan entered promiscuous mode [ 1040.282096][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1040.305392][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1040.331454][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1040.374715][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1040.423314][T20842] device veth0_macvtap entered promiscuous mode [ 1040.468261][T20842] device veth1_macvtap entered promiscuous mode [ 1040.541794][T20842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1040.580698][T20842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.604741][T20842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1040.646243][T20842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.688607][T20842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1040.710548][T20842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.748705][T20842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1040.790580][T15785] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1040.809728][T15785] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1040.825859][T15785] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1040.865470][T15785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1040.876481][T20842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1040.895941][T20842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.929450][T20842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1040.964900][T20842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.000739][T20842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1041.041513][T20842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.082712][T20842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1041.133415][T15785] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1041.163871][T15785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1041.193224][T20842] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.225387][T20842] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.265035][T20842] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.288286][T20842] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.593332][ T1243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1041.617080][T21757] loop7: detected capacity change from 0 to 1024 [ 1041.622322][ T1243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1041.664760][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1041.708424][T21773] [ 1041.710810][T21773] ====================================================== [ 1041.717868][T21773] WARNING: possible circular locking dependency detected [ 1041.724920][T21773] syzkaller #0 Not tainted [ 1041.729364][T21773] ------------------------------------------------------ [ 1041.736407][T21773] syz.6.14677/21773 is trying to acquire lock: [ 1041.742585][T21773] ffffffff97024038 (nfnl_subsys_ipset){+.+.}-{3:3}, at: ip_set_nfnl_get_byindex+0x63/0x230 [ 1041.752770][T21773] [ 1041.752770][T21773] but task is already holding lock: [ 1041.760161][T21773] ffff888027670cb8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x37/0x100 [ 1041.770567][T21773] [ 1041.770567][T21773] which lock already depends on the new lock. [ 1041.770567][T21773] [ 1041.781019][T21773] [ 1041.781019][T21773] the existing dependency chain (in reverse order) is: [ 1041.790070][T21773] [ 1041.790070][T21773] -> #2 (&nft_net->commit_mutex){+.+.}-{3:3}: [ 1041.798369][T21773] __mutex_lock+0x12d/0xaf0 [ 1041.803533][T21773] nf_tables_dumpreset_obj+0x6e/0x90 [ 1041.809437][T21773] netlink_dump+0x6a3/0xd00 [ 1041.814537][T21773] __netlink_dump_start+0x537/0x6f0 [ 1041.820302][T21773] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 1041.826501][T21773] nf_tables_getobj_reset+0x1cb/0x610 [ 1041.832432][T21773] nfnetlink_rcv_msg+0x8a0/0x12b0 [ 1041.838112][T21773] netlink_rcv_skb+0x1fb/0x450 [ 1041.843448][T21773] nfnetlink_rcv+0x2b0/0x2480 [ 1041.848695][T21773] netlink_unicast+0x74d/0x8d0 [ 1041.854027][T21773] netlink_sendmsg+0x8ad/0xbd0 [ 1041.859374][T21773] ____sys_sendmsg+0x5be/0x970 [ 1041.864799][T21773] ___sys_sendmsg+0x2a2/0x360 [ 1041.870048][T21773] __se_sys_sendmsg+0x1bb/0x2a0 [ 1041.875465][T21773] do_syscall_64+0x4c/0xa0 [ 1041.880456][T21773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1041.886922][T21773] [ 1041.886922][T21773] -> #1 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}: [ 1041.895224][T21773] __mutex_lock+0x12d/0xaf0 [ 1041.900317][T21773] __netlink_dump_start+0x11f/0x6f0 [ 1041.906101][T21773] ip_set_dump+0x152/0x1e0 [ 1041.911088][T21773] nfnetlink_rcv_msg+0xbec/0x12b0 [ 1041.916690][T21773] netlink_rcv_skb+0x1fb/0x450 [ 1041.922041][T21773] nfnetlink_rcv+0x2b0/0x2480 [ 1041.927292][T21773] netlink_unicast+0x74d/0x8d0 [ 1041.932624][T21773] netlink_sendmsg+0x8ad/0xbd0 [ 1041.937974][T21773] ____sys_sendmsg+0x5be/0x970 [ 1041.943311][T21773] ___sys_sendmsg+0x2a2/0x360 [ 1041.948554][T21773] __se_sys_sendmsg+0x1bb/0x2a0 [ 1041.953973][T21773] do_syscall_64+0x4c/0xa0 [ 1041.958954][T21773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1041.965415][T21773] [ 1041.965415][T21773] -> #0 (nfnl_subsys_ipset){+.+.}-{3:3}: [ 1041.973282][T21773] __lock_acquire+0x2d07/0x7d10 [ 1041.978724][T21773] lock_acquire+0x1bb/0x4a0 [ 1041.983799][T21773] __mutex_lock+0x12d/0xaf0 [ 1041.988870][T21773] ip_set_nfnl_get_byindex+0x63/0x230 [ 1041.994820][T21773] set_match_v1_checkentry+0x6d/0x220 [ 1042.000760][T21773] xt_check_match+0x4e6/0xc50 [ 1042.006025][T21773] __nft_match_init+0x663/0x890 [ 1042.011505][T21773] nf_tables_newrule+0x1731/0x2810 [ 1042.017180][T21773] nfnetlink_rcv+0x1124/0x2480 [ 1042.022512][T21773] netlink_unicast+0x74d/0x8d0 [ 1042.027838][T21773] netlink_sendmsg+0x8ad/0xbd0 [ 1042.033185][T21773] ____sys_sendmsg+0x5be/0x970 [ 1042.038518][T21773] ___sys_sendmsg+0x2a2/0x360 [ 1042.043783][T21773] __se_sys_sendmsg+0x1bb/0x2a0 [ 1042.049205][T21773] do_syscall_64+0x4c/0xa0 [ 1042.054201][T21773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1042.060659][T21773] [ 1042.060659][T21773] other info that might help us debug this: [ 1042.060659][T21773] [ 1042.070922][T21773] Chain exists of: [ 1042.070922][T21773] nfnl_subsys_ipset --> nlk_cb_mutex-NETFILTER --> &nft_net->commit_mutex [ 1042.070922][T21773] [ 1042.085401][T21773] Possible unsafe locking scenario: [ 1042.085401][T21773] [ 1042.092880][T21773] CPU0 CPU1 [ 1042.098273][T21773] ---- ---- [ 1042.103671][T21773] lock(&nft_net->commit_mutex); [ 1042.108745][T21773] lock(nlk_cb_mutex-NETFILTER); [ 1042.116341][T21773] lock(&nft_net->commit_mutex); [ 1042.123918][T21773] lock(nfnl_subsys_ipset); [ 1042.128548][T21773] [ 1042.128548][T21773] *** DEADLOCK *** [ 1042.128548][T21773] [ 1042.136723][T21773] 1 lock held by syz.6.14677/21773: [ 1042.141950][T21773] #0: ffff888027670cb8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x37/0x100 [ 1042.152719][T21773] [ 1042.152719][T21773] stack backtrace: [ 1042.158629][T21773] CPU: 0 PID: 21773 Comm: syz.6.14677 Not tainted syzkaller #0 [ 1042.166210][T21773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1042.176305][T21773] Call Trace: [ 1042.179618][T21773] [ 1042.182582][T21773] dump_stack_lvl+0x188/0x24e [ 1042.187316][T21773] ? load_image+0x400/0x400 [ 1042.191884][T21773] ? show_regs_print_info+0x12/0x12 [ 1042.197142][T21773] ? print_circular_bug+0x12b/0x1a0 [ 1042.202402][T21773] check_noncircular+0x296/0x330 [ 1042.207393][T21773] ? add_chain_block+0x940/0x940 [ 1042.212378][T21773] ? lockdep_lock+0xf1/0x1f0 [ 1042.217023][T21773] ? _find_first_zero_bit+0xcf/0x100 [ 1042.222445][T21773] __lock_acquire+0x2d07/0x7d10 [ 1042.227354][T21773] ? mark_lock+0x94/0x320 [ 1042.231766][T21773] ? verify_lock_unused+0x140/0x140 [ 1042.237029][T21773] ? __lock_acquire+0x12f4/0x7d10 [ 1042.242113][T21773] lock_acquire+0x1bb/0x4a0 [ 1042.246673][T21773] ? ip_set_nfnl_get_byindex+0x63/0x230 [ 1042.252280][T21773] ? __might_sleep+0xd0/0xd0 [ 1042.256982][T21773] ? read_lock_is_recursive+0x10/0x10 [ 1042.262411][T21773] __mutex_lock+0x12d/0xaf0 [ 1042.266952][T21773] ? ip_set_nfnl_get_byindex+0x63/0x230 [ 1042.272525][T21773] ? ip_set_pernet+0x23/0x230 [ 1042.277250][T21773] ? ip_set_nfnl_get_byindex+0x63/0x230 [ 1042.282848][T21773] ? mutex_lock_nested+0x10/0x10 [ 1042.287855][T21773] ? __flush_work+0x10d/0xae0 [ 1042.292703][T21773] ? ip_set_pernet+0x23/0x230 [ 1042.297427][T21773] ? ip_set_pernet+0x23/0x230 [ 1042.302165][T21773] ip_set_nfnl_get_byindex+0x63/0x230 [ 1042.307590][T21773] set_match_v1_checkentry+0x6d/0x220 [ 1042.313025][T21773] xt_check_match+0x4e6/0xc50 [ 1042.317749][T21773] ? xt_check_proc_name+0x270/0x270 [ 1042.322995][T21773] ? __stack_depot_save+0x35/0x460 [ 1042.328259][T21773] __nft_match_init+0x663/0x890 [ 1042.333214][T21773] ? ___sys_sendmsg+0x2a2/0x360 [ 1042.338134][T21773] ? nft_match_large_dump+0x40/0x40 [ 1042.343384][T21773] ? __kmem_cache_alloc_node+0x140/0x260 [ 1042.349122][T21773] ? nf_tables_newrule+0x1503/0x2810 [ 1042.354455][T21773] ? rcu_is_watching+0x11/0xa0 [ 1042.359392][T21773] ? nf_tables_newrule+0x1503/0x2810 [ 1042.364727][T21773] ? __kmalloc+0xe1/0x240 [ 1042.369195][T21773] nf_tables_newrule+0x1731/0x2810 [ 1042.374355][T21773] ? nf_tables_delchain+0xf00/0xf00 [ 1042.379600][T21773] ? __lock_acquire+0x7d10/0x7d10 [ 1042.384675][T21773] ? mutex_unlock+0x10/0x10 [ 1042.389234][T21773] ? __nla_parse+0x3c/0x50 [ 1042.393698][T21773] nfnetlink_rcv+0x1124/0x2480 [ 1042.398522][T21773] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 1042.404123][T21773] ? ref_tracker_free+0x68c/0x840 [ 1042.409215][T21773] ? netlink_deliver_tap+0x2e/0x1b0 [ 1042.414466][T21773] ? netlink_deliver_tap+0x2e/0x1b0 [ 1042.419723][T21773] netlink_unicast+0x74d/0x8d0 [ 1042.424553][T21773] netlink_sendmsg+0x8ad/0xbd0 [ 1042.429378][T21773] ? netlink_getsockopt+0x550/0x550 [ 1042.434643][T21773] ? aa_sock_msg_perm+0x94/0x150 [ 1042.439635][T21773] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1042.445037][T21773] ? security_socket_sendmsg+0x7c/0xa0 [ 1042.450546][T21773] ? netlink_getsockopt+0x550/0x550 [ 1042.455816][T21773] ____sys_sendmsg+0x5be/0x970 [ 1042.460661][T21773] ? __sys_sendmsg_sock+0x30/0x30 [ 1042.465729][T21773] ? __import_iovec+0x315/0x500 [ 1042.470648][T21773] ? import_iovec+0x6f/0xa0 [ 1042.475182][T21773] ___sys_sendmsg+0x2a2/0x360 [ 1042.479899][T21773] ? try_to_wake_up+0x67c/0x1080 [ 1042.484972][T21773] ? __sys_sendmsg+0x290/0x290 [ 1042.489833][T21773] __se_sys_sendmsg+0x1bb/0x2a0 [ 1042.494733][T21773] ? __x64_sys_sendmsg+0x80/0x80 [ 1042.499735][T21773] ? lockdep_hardirqs_on+0x94/0x140 [ 1042.505053][T21773] do_syscall_64+0x4c/0xa0 [ 1042.509519][T21773] ? clear_bhb_loop+0x60/0xb0 [ 1042.514233][T21773] ? clear_bhb_loop+0x60/0xb0 [ 1042.518967][T21773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1042.524901][T21773] RIP: 0033:0x7f93ae99ce59 [ 1042.529350][T21773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1042.548986][T21773] RSP: 002b:00007f93af948028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1042.557441][T21773] RAX: ffffffffffffffda RBX: 00007f93aec15fa0 RCX: 00007f93ae99ce59 [ 1042.565487][T21773] RDX: 0000000024044010 RSI: 0000200000000100 RDI: 0000000000000003 [ 1042.573492][T21773] RBP: 00007f93aea32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1042.581492][T21773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1042.589496][T21773] R13: 00007f93aec16038 R14: 00007f93aec15fa0 R15: 00007ffcd4a4d278 [ 1042.597517][T21773] [ 1042.603867][T21773] Cannot find set identified by id 0 to match [ 1042.638339][ T1243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.657020][ T1243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.675237][T21757] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1042.689007][T15785] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1042.696561][T21757] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1042.781382][T21757] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.14675: bg 0: block 112: padding at end of block bitmap is not set [ 1042.798575][T21757] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 1042.844070][T21757] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1042.844070][T21757] [ 1042.868843][T21757] EXT4-fs (loop7): Total free blocks count 0 [ 1042.876804][T21757] EXT4-fs (loop7): Free/Dirty block details [ 1042.883673][T21757] EXT4-fs (loop7): free_blocks=0 [ 1042.888692][T21757] EXT4-fs (loop7): dirty_blocks=64 [ 1042.896152][T21757] EXT4-fs (loop7): Block reservation details [ 1042.904497][T21757] EXT4-fs (loop7): i_reserved_data_blocks=4 [ 1042.939206][T19045] EXT4-fs (loop7): unmounting filesystem.