last executing test programs: 2m45.678453532s ago: executing program 4 (id=1292): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000440)={0x24, 0x14, 0x105, 0x70bc26, 0x25dfdb6b, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "3916f8d66cffe8ef8d"}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) 2m45.3242189s ago: executing program 4 (id=1294): mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)="28217e5f73638f33952a8fbf3318c5f56f6df3ae4b291d6e0cc9e7961db414a8914f6df033df38d627d906f474a6aed40310ef326e2d98a5d1ba7ac41ffd68ab3ad8dd0c808f64e3f4bc5be6513ef1ac66a6aaa17bd4918a20c7ed9fbf12b64c6d27", 0x62) 2m45.119369165s ago: executing program 4 (id=1296): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="04010000160001000000000000000000fe8000000000000000000000000000aaff01000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x002'], 0x104}, 0x1, 0x0, 0x0, 0xc1}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m44.834269322s ago: executing program 4 (id=1297): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8205, &(0x7f00000043c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xa}}, {@resuid}, {@usrjquota}, {@data_err_ignore}, {@noblock_validity}, {@noinit_itable}, {@orlov}]}, 0x1, 0x610, &(0x7f0000004540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 2m43.985527553s ago: executing program 4 (id=1302): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xe, 0x0, &(0x7f0000000480)="3d25ff0706000000000000c188a8", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m43.72271923s ago: executing program 4 (id=1304): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1) 2m31.336271683s ago: executing program 32 (id=1372): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 2m28.57692674s ago: executing program 33 (id=1304): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1) 2m14.195503253s ago: executing program 1 (id=1434): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1a0}}, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d800000004021dff0010000000e8fe55a1180015000600144003600e1205875d000008000000000000000001402000", 0x2f}], 0x1}, 0x8800) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 2m13.91503695s ago: executing program 1 (id=1435): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/344], 0x6, 0x551b, &(0x7f0000006100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000340)=0xfffffff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x9, 0x800800}) 2m10.820349305s ago: executing program 1 (id=1443): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48, 0xec000000, 0xcd}]}) 2m10.191421421s ago: executing program 6 (id=1388): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0xffffffffffff8000, 0x0) close(r2) 2m9.81663685s ago: executing program 6 (id=1445): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfb, 0x1501, &(0x7f00000002c0)="$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") truncate(&(0x7f0000000080)='./file2\x00', 0x6002) chdir(&(0x7f0000000000)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) 2m9.393758451s ago: executing program 6 (id=1449): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x693, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 2m9.313588593s ago: executing program 1 (id=1450): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000b00)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@shortname_winnt}, {@numtail}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@shortname_lower}, {@fat=@sys_immutable}, {@fat=@showexec}, {@shortname_win95}, {@shortname_winnt}, {@fat=@quiet}, {@utf8no}]}, 0x0, 0x29f, &(0x7f0000000840)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhct9uW50M7TxEwRpQQwotRF1IUztREPGpGRiJCK2O7d+juLSlYL6Bbpx517cFEFw04UYaZKxaRswra1Tzf8HYU7OOe/MmZyZ8M5AJlvXn94rFwOn6NYVS5pi0rq2pcxOqWuku4y1y+Pqta5zk5/f/Xv1xs1LuXx+ftFsIbd0Pmtm0/+9evDo2f9v6pPXnk+/TGgzc2vrU/b95l+bf299XQrXXpVcW65W6+6y79lKKSg7Zld8zw08K1UCr1a3nvaiX11dbZpbWZlKrda8IDC30rSy17R61eq1prl33FLFHMexqZSGTfzQEYWNxUU3dyKDQRQm+lXWajk33rexsPErBgUAAE6XqPL/u6XASoFVqnvy+4P5f0yHyP+loc7/D4/8fxjs5P+p7vm7F/k/AAAAAAAAAAAAAAAAAAAAAAC/g+1WK91qtdLhMnwlJCUlhe+jHidOBvM/3Hp+uJeU/CeNQqPQWXbac0WV5MvT7Jj0pX08dHXKCxfz87PWltFrf60bv9YoxJUI40OZ/vFznXjrjV/TmFK9288qrZn+8dk+8Y3CuM6eaSW6W/bkKK23t1WVr5X2cb0b/3jO7MLl/L74iXY/AAAAAAD+BI59d+D6vd3uWPjYkH3tncrd+wNK/+D+wL7r61H9MxrdfgMAAAAAMEyC5sOy6/tebQgK4f8fHMsKo//okoN2HpXUrXlxWuZikEJM0lHD4z83yx8l7amZiXy6j6Pw4X7nDBikc5TfSgAAAABOQpj0j0Q9EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhtigDw8L+x/l2WM9m4tHs5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6fAtAAD//2kbF4o=") mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf9, 0x20000}, 0x20) 2m8.901696073s ago: executing program 6 (id=1451): syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f000001fc00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1814011, 0x0, 0x40, 0x0, &(0x7f0000000140)) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 2m8.892163072s ago: executing program 1 (id=1452): syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000180)=ANY=[], 0xfe, 0xa7f, &(0x7f0000000b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xdf) write$binfmt_elf32(r0, &(0x7f00000015c0)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0xed, 0x0, 0xab, 0x8001, 0x3, 0x3e, 0xfffffffc, 0x4c, 0x38, 0x1e2, 0x96, 0x7ffe, 0x20, 0x1, 0x9, 0x3c, 0x8}, [{0x4, 0x5, 0x80000000, 0xf, 0x0, 0x3, 0x1, 0x8001}]}, 0x58) creat(&(0x7f0000000180)='./file2\x00', 0x71283578ac7c5cd) 2m8.524318041s ago: executing program 6 (id=1454): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x5, 0x14, 0x0, &(0x7f00000000c0)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) 2m8.343972336s ago: executing program 1 (id=1456): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01022dbd7000000000000500000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0xe4}, 0x800) 2m7.629026253s ago: executing program 34 (id=1456): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01022dbd7000000000000500000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0xe4}, 0x800) 2m7.560577795s ago: executing program 6 (id=1461): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fchmod(0xffffffffffffffff, 0x0) 2m7.138086386s ago: executing program 35 (id=1461): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fchmod(0xffffffffffffffff, 0x0) 1m8.326449356s ago: executing program 5 (id=1877): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240), &(0x7f0000000700)=0x8) 1m7.969941985s ago: executing program 5 (id=1882): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/kexec_crash_size', 0x1, 0xcd) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x9, 0x4810000000000ffd, 0x0, 0x0, 0x19, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000fc0)) 1m7.661893903s ago: executing program 5 (id=1885): sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000fc0)={0x38, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x24, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\:$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2050}, 0x4008001) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd000020062726964c77c2d0dbdc04d355f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad1400040006bfe7b66cadbb5e41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f"], 0x270}, 0x1, 0x0, 0x0, 0x2404c010}, 0x4) 1m7.075328517s ago: executing program 5 (id=1890): mkdirat(0xffffffffffffff9c, 0x0, 0xa0) syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x200800, &(0x7f0000000140)={[{@bsdgroups}, {@uqnoenforce}, {@pquota}, {@uqnoenforce}, {@nolargeio}]}, 0x4, 0x96c0, &(0x7f0000009640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000000000)={0xe, 0x4, 0x8, 0x26, 0x5e, 0x3f, 0x8}) 1m4.870813901s ago: executing program 5 (id=1904): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1m1.539276352s ago: executing program 5 (id=1928): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/nfsv4gracetime\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 57.220068608s ago: executing program 2 (id=1948): capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)) setrlimit(0x40000000000008, &(0x7f0000000000)) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(0x0, 0xb) 56.227065673s ago: executing program 2 (id=1954): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000404000040"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x7, 0x4, 0x801, 0x1, r0, 0x15b4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) 55.928635219s ago: executing program 2 (id=1957): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x4000880}, 0x48090) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xb, 0x42, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000880), 0x1006, r0, 0x0, 0xd88d02a0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r0, &(0x7f0000000240), &(0x7f0000000340)=""/186}, 0x20) 55.420311752s ago: executing program 2 (id=1959): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x7, 0xee6, &(0x7f0000001ec0)="$eJzs3U9sHFf9APA3639p7Mbrtr9f3ZYmoaWkDeAEJ4dyS6UIpKqqeuHeKo2TCDdEpBxaJYrLKUgcClEvRRyKmhtSOCDRCglFSEj86YEzpwouIBSkSLkQKTay8956/eJh12N71t79fKSv3755s/P9jjdyZmZn3wZgYDVWfh4/Pl2E8MGn105+68rir5eXHWitcXDlZxF7zRDCSFu/yLb3eVxw7/alU8vtYtYWYXblZxoPr95qPXc8hLAQDoaboRkOHG7euTr0ytz1Dz87dPnCy2e3afcBAGCg3PjT/F9f+Mcfvzp198b+E2GstTwdnzdjfzwe9x+Nx/fpuL8R1vaLtmg3mq03FKORrTeUrTec5RkuyTeSbWekZL3RDvmG2patt58AAACwG6Xz2mYoGjNr+o3GzMz98/5ln0+OFjPnz83PXexRoQAAAEBld66s3HQrhBBCCCGEEEKIPo6lyV5fgQAAAAAGTZp3oDU/WG4hn1lgc1pba3aX/9ZLjfWfD1ug7n//8u+u/B+/5y8OAADV9evRZNqvdByd5jHI5xEcyp630eP/Rrad4Q3WWTav4G6Zb7Cszvz3ulOV1b/R17FXyurP58Pcqcrqz+fp3KnK6h+ruY6qyurfU3MdVZXV/1DNdVRVVv/emuuoqqz+8ZrrqKqs/oma66iqrP6Ha66jqrL699VcR1Vl9e+W22rL6m/WXEdVZfVP1VxHVWX1P1JzHVWV1f9ozXVUVVb/YzXX0StPxzb9HvZn4+3nz/k53W45xwMAAIBB9x/z/4ltias7oIatjZX3dHdAHUIIIYQQQghRJa70+gIEAAAA0HPpcwHpU+9LURof6jA+3GF8pMP4aIfxsQ7jAAAAQAi/uTr3xPvF6uf8NzsfXpo3Ks2/tNF5jPL5CDeaf7Pznm02/26ZtwwAAIDBUnzz5uLhkx+9PXX3xv4TbWe/i/F8N80DOhyvDXwS++m+gImsX6Rz6BNr8zRK1suvDzxctr3XNrmjAAAAMMAm4h36zVA0ZtrOu5uh0ZiZWT0fnw4jxdy5+dNHYz99P8sfJkfGlpd/vfbKAQAAgG6tnu+vf/6fvsd3OowWM+fPzc9dvN+faC0fabRfF5hcXV60XxdoZstnS5Yfi/30/Z1nJx9aWT5z6rvzb271zgMAAMCAuPjOu995Y37+9Pc88MADD1oPev2XCQAA2GrX/37tz98/NvHb+5//X53/Ln3+/2DsN+Pcfn+JK6T7BNLnAB74vP7ra/NMlq13Ye16zWy9oRhjWd172rYT2uYbTM+bKsvXXLud0ZJ841m+iSxfPk/BcLZ+yrcvW57PT5jWm8yW5/MwDmc5iiz/MwEAAADKHXn7rQtHLr7z7tfOvfXGmdNnTp8/dnT2G7Mvzs4enz2ycl//kfa7+wEAAIDdaPWm315XAgAAAAAAAAAAAAAAAAAAAIOrjq8T6/U+AgAAwKD795UQwoIQQgghhOh17A29r0GInsal4d7XIEQfx9JS/k3zAAAAANvr3u1Lp9rbBywUW5qvtbXm/WYx5k3t75/72XPLkVa79dLa6yV7t7QaBl3d//7l3135P35va/PvSQ+6/vvXWLuBE9XyfvnH/3y+Pf+Tw13mz/f/tWr5D2X5D4Xu8i99lOV/vVr+57P8e7vM/8D+X6iW/4WYfzrV82y3+de+/mOxTfvxUJf5D2f7/2boNn+2/80uE2a+EvMDwCBq9LqAbZKOEtJx9Hjsp/2Nh5shv/tho8f/jWw7w5uufO1203HQ47GfjpcmsrzJRusfz7b3cMU6c7vlrpKy+rfqddxuZfWP1FxHVWX1j9ZcR1Vl9Y/VXEdVZfXvqbmOqsrq7/Y8tNfK6t8t15XL6h+vuY6qyuqfqLmOqsrq3+j/471SVv++muuoqqz+yZrrqKqs/oqX1WpXVv9UzXVUVVb/IzXXUVVZ/Y/WXEdVZfU/VnMdvfJUbMvOh9P552QcS/1m1h9b53fZr9cWAAAAYLf5V9v8fyvvGe6AOQmEEEIMXvxkB9QghNgpEd+Z6nkdQgjRX7G01OMLEPTU9n6aGYCdyt//web1H2xe/8Hm9ed/SffwF1k/GeowPtxhfKTD+Gg2nv97Hesw/mi23aUojT/WYfz/Oozv6zD++Lrjq59One7w/Cc6jD/ZYfypDuMAAAAMhv+PrfNDAAAA6F+Xf/HJj3516PXbU3dv7D8RRh+Yd/5o7I/F99avxn4+730yEt/z/0Hs/zy2v4vt37L13X8CAAAA2y99T4z3/wEAAKB/pe8pdf4PAAAA/Wsqts7/AQAAoH89Elvn/wAAANDHij3rL45tui7wTGy7ndcPANj5vhDbp2O7P7YHYvvF2KbjgGdj+6Wa6gMAts5Pv/3DF98vVuf7P5aN34vLU/uAhftXCorG2pn80zfc743tc13Wk38fQLf5k31d5tmu/JObzA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9I/Gys/jx6eLED749NrJycsnzywvO9Ba4+DKzyL2miGEkdbz0uhq/5dxxXu3L51abhdjuxTbIsyGIhSt8fDqrVam8RDCQjgYboZmOHC4eefq0Ctz1z/87NDlCy+f3cZfAQAAAPS9/wYAAP//6KMnVA==") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x80000, 0x2) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) 54.985994443s ago: executing program 2 (id=1964): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e20, @local}}, [0x3a08, 0x6, 0x1, 0xa, 0x1000, 0x0, 0x80000000, 0x7, 0xfffffffffffffff7, 0x400, 0x4, 0x5, 0x2, 0x85, 0x6]}, &(0x7f00000003c0)=0x100) 53.604241177s ago: executing program 2 (id=1971): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000500)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000006c0)=""/101, 0x65, 0x0, 0x0, 0x4, 0x3, 0x10000001}}, 0x120) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2) 52.799091706s ago: executing program 36 (id=1971): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000500)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000006c0)=""/101, 0x65, 0x0, 0x0, 0x4, 0x3, 0x10000001}}, 0x120) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2) 46.268024156s ago: executing program 37 (id=1928): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/nfsv4gracetime\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 19.455337323s ago: executing program 3 (id=2119): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x18fb82db60492700, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x338deb2fe304b7cd, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x741}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000300)=@ethtool_dump={0x3e, 0x0, 0x2}}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 18.530669746s ago: executing program 3 (id=2122): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x2, 0x4], [0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}]}}]}, 0x8c}, 0x1, 0x7a00, 0x0, 0x4000110}, 0x0) 18.075327967s ago: executing program 3 (id=2124): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bind$bt_sco(r0, &(0x7f0000005680)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) 17.688095297s ago: executing program 3 (id=2125): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e00003b000b05d25a802e8c6394f90324fc601000050008000900053582c104003e37000c0180fc0b1dfdf80b", 0x33fe0}], 0x1, 0x0, 0x0, 0xa000000}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 17.034655933s ago: executing program 3 (id=2129): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ndb(&(0x7f0000002880), 0x0, 0x340) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000002980), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000002a40)={0x1c, r1, 0x13, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x800) 16.549829655s ago: executing program 3 (id=2132): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='20', 0x2) 13.86397785s ago: executing program 7 (id=2142): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000801c, &(0x7f0000000000)=ANY=[], 0x8, 0x1545, &(0x7f0000003400)="$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") r0 = syz_mount_image$vfat(&(0x7f0000006600), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x3b4a468, &(0x7f0000007400)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="0d9435a8af712ba22db08aad61bf52901d77aded910bc7949acdf1a626f568d38938f8ec34f72c1e0b3e6540dc1e44beac32958b12631708d0a5635580b2f9fef13a977211e5d519ab9531321cfb53a9b413ea91f290924482d4007a70a19759dd63f9fc81f2c63fe27bce5e7dddf01fa5c3f09ef226ee04045b0cf0661e3d5a67446c4d93db12c2ac7a15f0265fd7eade1a72cbd696413a03174375c955f8c82a9774c2c8ac5046d59c86dbd5165e6e447586", @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYBLOB="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", @ANYRES8=r0, @ANYRESHEX, @ANYBLOB="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", @ANYRESDEC, @ANYRES32, @ANYRES8=r0], 0xb, 0x0, &(0x7f0000000000)) rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 12.947055803s ago: executing program 7 (id=2144): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) 12.424673585s ago: executing program 7 (id=2146): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r1, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0]}) 12.074931534s ago: executing program 7 (id=2148): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f00000001c0)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x5, 0xd6}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000680)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x4002, 0x5, 0x11, 0x0, @broadcast, @empty}, {0x4e24, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "879979b972556041269839c3ce9ef53f0ae20157d23c8179fc8304ca5b5a602a", "39f81ff2138de894cbd5c565534c0d36c576d58f5b27843f1a0bf41298d893ed16444a1789775c529605be2e35bae61c", "fa72645b9520beccd07da38e59491d59d939f9117aec653a328aa202", {"5fe1011888921f8d7ad53c62b4c2c1e0", "be48332d7a0f8d82632c8387276bfd2a"}}}}}}}, 0x0) 11.674834414s ago: executing program 7 (id=2151): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002400)=""/4073, 0xfe9}, {&(0x7f0000000300)=""/171, 0xab}], 0x2}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 11.293375333s ago: executing program 7 (id=2155): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/100, 0x64) 7.759653909s ago: executing program 8 (id=2172): r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) lseek(r0, 0x0, 0x4) 6.566237429s ago: executing program 8 (id=2179): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}, @NHA_BLACKHOLE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 6.241253927s ago: executing program 8 (id=2182): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 5.636989552s ago: executing program 9 (id=2187): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x8040480) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fcntl$setpipe(r0, 0x407, 0x60) 5.339854069s ago: executing program 9 (id=2188): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) getpeername$l2tp6(r0, 0x0, 0x0) 4.534580379s ago: executing program 0 (id=2191): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00`\x00'}}}]}, 0x48}}, 0x0) 4.275517795s ago: executing program 9 (id=2192): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0xf, 0x2, "e805"}, 0x0, 0x0, 0x0, 0x0}) 4.109255629s ago: executing program 0 (id=2193): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1, 0x0, 0x80000000}, {0x6, 0x80, 0xfd, 0xfffffffd}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, @loopback, @loopback}}}}}}, 0x0) 3.965022683s ago: executing program 0 (id=2194): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000030000000800000002"], 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000040), &(0x7f0000000180)=@udp=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r0, &(0x7f0000000540)="01", 0x0}, 0x20) 3.810663326s ago: executing program 8 (id=2195): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000002780)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x5, 0xffffffff, 0x10) 3.727726678s ago: executing program 0 (id=2196): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000280)=':', 0x1}], 0x1}}], 0x1, 0x40088d5) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000001c0)={0x0, 0x9}, 0x8) 3.475563315s ago: executing program 8 (id=2197): syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000300)={[{@discard}, {@fatal_errors_bug}, {@discard}]}, 0xf4, 0x559e, &(0x7f000000ac40)="$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") r0 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x5, 0x85, 0x80000001, 0x1, {0x3, 0xff, 0x3, 0x8, 0x200, 0xd615, 0x9, 0x535, 0xfffffffe, 0x1000, 0x4000000, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 3.452946615s ago: executing program 0 (id=2198): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x34, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfd, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x178, 0xfff}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) 3.132407533s ago: executing program 0 (id=2199): syz_emit_ethernet(0x2c0, &(0x7f0000000680)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d92028a3afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000180aa78ce54006598080a8030037004023493b87aafaffffffffffffff23"], 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 1.598126161s ago: executing program 9 (id=2200): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0', 0xb) 1.377886146s ago: executing program 38 (id=2132): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='20', 0x2) 1.367655746s ago: executing program 8 (id=2202): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x1, @local, 0x1}]}, &(0x7f0000000140)=0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) 821.81416ms ago: executing program 9 (id=2203): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000008c0)={r1, @in6={{0xa, 0x4e24, 0xe, @empty, 0x6}}, 0x5, 0x8000}, 0x90) 0s ago: executing program 9 (id=2204): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast1, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x4, {{0x2, 0x4e23, @multicast2}}}, 0x88) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @loopback}, 0x10) kernel console output (not intermixed with test programs): team0: Port device team_slave_0 added [ 281.630954][ T8408] team0: Port device team_slave_1 added [ 281.641185][ T8429] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.649035][ T8429] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.657745][ T8429] device bridge_slave_0 entered promiscuous mode [ 281.701361][ T8429] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.714301][ T8429] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.732660][ T8429] device bridge_slave_1 entered promiscuous mode [ 281.801280][ T33] device hsr_slave_0 left promiscuous mode [ 281.830647][ T33] device hsr_slave_1 left promiscuous mode [ 281.874931][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.882528][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.918632][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.934736][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.942685][ T33] device bridge_slave_1 left promiscuous mode [ 281.969564][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.990110][ T8490] usbcore.quirks: string doesn't fit in 127 chars. [ 282.003222][ T33] device bridge_slave_0 left promiscuous mode [ 282.030980][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.074870][ T4292] Bluetooth: hci2: command 0x041b tx timeout [ 282.108418][ T33] device veth1_macvtap left promiscuous mode [ 282.114527][ T33] device veth0_macvtap left promiscuous mode [ 282.121102][ T33] device veth1_vlan left promiscuous mode [ 282.127069][ T33] device veth0_vlan left promiscuous mode [ 283.044868][ T4292] Bluetooth: hci5: command 0x041b tx timeout [ 283.276899][ T8512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1492'. [ 283.370066][ T33] team0 (unregistering): Port device team_slave_1 removed [ 283.431307][ T33] team0 (unregistering): Port device team_slave_0 removed [ 283.517954][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.630608][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.807521][ T8514] loop2: detected capacity change from 0 to 32768 [ 283.919703][ T8514] non-latin1 character 0x3ff found in JFS file name [ 283.934751][ T8514] mount with iocharset=utf8 to access [ 284.117969][ T8516] program syz.2.1494 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.164829][ T4292] Bluetooth: hci2: command 0x040f tx timeout [ 284.415353][ T33] bond0 (unregistering): Released all slaves [ 284.615206][ T8429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.638809][ T8408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.655429][ T8408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.714818][ T8408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.760500][ T8429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.775413][ T8408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.808070][ T8408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.873153][ T8408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.884207][ T8527] loop5: detected capacity change from 0 to 16 [ 284.938815][ T8527] erofs: (device loop5): mounted with root inode @ nid 36. [ 284.983651][ T8429] team0: Port device team_slave_0 added [ 285.027542][ T8429] team0: Port device team_slave_1 added [ 285.114848][ T4292] Bluetooth: hci5: command 0x040f tx timeout [ 285.182673][ T8408] device hsr_slave_0 entered promiscuous mode [ 285.209028][ T8408] device hsr_slave_1 entered promiscuous mode [ 285.240087][ T8408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.259414][ T8408] Cannot create hsr debugfs directory [ 285.265761][ T8429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.299621][ T8429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.341632][ T8429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.371409][ T8429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.387941][ T8429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.461676][ T8429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.720466][ T8429] device hsr_slave_0 entered promiscuous mode [ 285.741573][ T8429] device hsr_slave_1 entered promiscuous mode [ 285.764954][ T8429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.780618][ T8429] Cannot create hsr debugfs directory [ 286.086813][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1507'. [ 286.096110][ T8550] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1507'. [ 286.236236][ T49] Bluetooth: hci2: command 0x0419 tx timeout [ 286.380139][ T33] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.460713][ T8408] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 286.579438][ T8408] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 286.614536][ T8408] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 286.690178][ T33] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.719003][ T8408] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 286.849169][ T33] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.998046][ T8574] syz.5.1515 uses obsolete (PF_INET,SOCK_PACKET) [ 287.119886][ T33] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.194912][ T49] Bluetooth: hci5: command 0x0419 tx timeout [ 287.273075][ T8429] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 287.292970][ T8429] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 287.353067][ T8429] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 287.394783][ T8429] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 287.469204][ T8583] loop2: detected capacity change from 0 to 512 [ 287.539199][ T8583] EXT4-fs: Ignoring removed bh option [ 287.550217][ T8586] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1520'. [ 287.599804][ T8583] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.1519: corrupted in-inode xattr [ 287.649591][ T8408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.684919][ T8583] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1519: couldn't read orphan inode 15 (err -117) [ 287.716660][ T8583] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 287.833936][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 287.857473][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 287.875888][ T8591] vcan0: tx drop: invalid da for name 0x00000000000000a4 [ 287.877536][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 287.956911][ T8408] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.021782][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 288.074060][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 288.109909][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.117195][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.280678][ T8429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.490090][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 288.505446][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 288.557645][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 288.586371][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.593571][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.655138][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 288.685281][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 288.709163][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 288.739434][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 288.831271][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 288.850999][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 288.894533][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 288.931114][ T8429] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.948248][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 288.964349][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 289.075405][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 289.109128][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 289.138136][ T2951] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.145386][ T2951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.182217][ T8408] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 289.211022][ T8408] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 289.305396][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 289.313717][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 289.345517][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 289.366266][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 289.399692][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 289.430748][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 289.458700][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 289.485813][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.493079][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.535137][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 289.669806][ T8637] loop2: detected capacity change from 0 to 512 [ 289.713751][ T8637] EXT4-fs: Ignoring removed oldalloc option [ 289.727499][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 289.796780][ T8637] EXT4-fs: Mount option(s) incompatible with ext2 [ 289.879174][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 289.885948][ T49] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 289.898020][ T49] CPU: 0 PID: 49 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 289.905451][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 289.915548][ T49] Workqueue: hci0 hci_rx_work [ 289.920284][ T49] Call Trace: [ 289.921835][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 289.923580][ T49] [ 289.934471][ T49] dump_stack_lvl+0x188/0x24e [ 289.939215][ T49] ? show_regs_print_info+0x12/0x12 [ 289.944470][ T49] ? load_image+0x410/0x410 [ 289.949032][ T49] sysfs_create_dir_ns+0x26a/0x290 [ 289.954207][ T49] ? __lock_acquire+0x7c40/0x7c40 [ 289.959288][ T49] ? sysfs_warn_dup+0xa0/0xa0 [ 289.964014][ T49] ? do_raw_spin_unlock+0x11d/0x230 [ 289.969253][ T49] kobject_add_internal+0x617/0xca0 [ 289.974501][ T49] kobject_add+0x160/0x230 [ 289.979085][ T49] ? kobject_init+0x1c0/0x1c0 [ 289.983814][ T49] ? __raw_spin_lock_init+0x41/0x100 [ 289.989154][ T49] ? klist_children_get+0x50/0x50 [ 289.994233][ T49] ? get_device_parent+0x121/0x3e0 [ 289.999395][ T49] device_add+0x470/0x1050 [ 290.003866][ T49] hci_conn_add_sysfs+0xd1/0x1e0 [ 290.008972][ T49] le_conn_complete_evt+0xfac/0x15c0 [ 290.014303][ T49] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 290.020582][ T49] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 290.026248][ T49] ? mutex_unlock+0x10/0x10 [ 290.030783][ T49] ? skb_pull_data+0xec/0x1f0 [ 290.035499][ T49] hci_le_conn_complete_evt+0x183/0x440 [ 290.041094][ T49] ? hci_remote_host_features_evt+0x230/0x230 [ 290.047204][ T49] hci_event_packet+0x7b3/0x1290 [ 290.052224][ T49] ? __lock_acquire+0x7c40/0x7c40 [ 290.057289][ T49] ? bis_list+0x280/0x280 [ 290.061655][ T49] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 290.067604][ T49] ? kcov_remote_start+0x4b0/0x7e0 [ 290.072850][ T49] ? do_machine_check+0x380/0x750 [ 290.077920][ T49] ? hci_send_to_monitor+0x9c/0x4a0 [ 290.083150][ T49] hci_rx_work+0x3eb/0xd40 [ 290.087597][ T49] ? _raw_spin_unlock+0x40/0x40 [ 290.092569][ T49] ? process_one_work+0x7b4/0x1160 [ 290.097707][ T49] process_one_work+0x8ab/0x1160 [ 290.102676][ T49] ? worker_detach_from_pool+0x240/0x240 [ 290.108333][ T49] ? _raw_spin_lock_irq+0xb7/0xf0 [ 290.113376][ T49] ? _raw_spin_lock_irqsave+0x100/0x100 [ 290.118950][ T49] ? wq_worker_running+0x97/0x190 [ 290.124013][ T49] worker_thread+0xaf5/0x12a0 [ 290.128738][ T49] kthread+0x29d/0x330 [ 290.132826][ T49] ? worker_clr_flags+0x1a0/0x1a0 [ 290.137870][ T49] ? kthread_blkcg+0xd0/0xd0 [ 290.142505][ T49] ret_from_fork+0x1f/0x30 [ 290.146980][ T49] [ 290.151462][ T49] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 290.165567][ T49] Bluetooth: hci0: failed to register connection device [ 290.180922][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 290.194379][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 290.311993][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 290.322091][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 290.364114][ T8429] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 290.404823][ T8429] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 290.508473][ T8648] loop2: detected capacity change from 0 to 16 [ 290.569056][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 290.585595][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 290.600923][ T8648] erofs: (device loop2): mounted with root inode @ nid 36. [ 290.609469][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 290.645589][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 290.800598][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 290.862599][ T8656] loop3: detected capacity change from 0 to 64 [ 290.913442][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 290.925332][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 290.973719][ T8408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.988973][ T8660] loop2: detected capacity change from 0 to 64 [ 292.041052][ T33] device hsr_slave_0 left promiscuous mode [ 292.061223][ T33] device hsr_slave_1 left promiscuous mode [ 292.095652][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.115265][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.142813][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.171406][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.202256][ T33] device bridge_slave_1 left promiscuous mode [ 292.213602][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.256638][ T33] device bridge_slave_0 left promiscuous mode [ 292.265632][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.393236][ T33] device veth1_macvtap left promiscuous mode [ 292.411312][ T33] device veth0_macvtap left promiscuous mode [ 292.426833][ T33] device veth1_vlan left promiscuous mode [ 292.432875][ T33] device veth0_vlan left promiscuous mode [ 293.084734][ T22] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 293.287274][ T22] usb 4-1: config index 0 descriptor too short (expected 1572, got 36) [ 293.300333][ T22] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.324114][ T22] usb 4-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 293.349416][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.363649][ T22] usb 4-1: Product: syz [ 293.373293][ T22] usb 4-1: Manufacturer: syz [ 293.381026][ T22] usb 4-1: SerialNumber: syz [ 293.401822][ T22] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input16 [ 293.600834][ T3624] bcm5974 4-1:1.0: could not read from device [ 293.630686][ T22] bcm5974 4-1:1.0: could not read from device [ 293.662684][ T3624] bcm5974 4-1:1.0: could not read from device [ 293.689910][ T22] input: failed to attach handler mousedev to device input16, error: -5 [ 293.715541][ T22] usb 4-1: USB disconnect, device number 15 [ 293.722981][ T3624] bcm5974 4-1:1.0: could not read from device [ 293.788518][ T33] team0 (unregistering): Port device team_slave_1 removed [ 293.875525][ T33] team0 (unregistering): Port device team_slave_0 removed [ 293.934809][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.019801][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.369690][ T8710] loop3: detected capacity change from 0 to 512 [ 294.486312][ T8710] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 294.502926][ T8710] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.534446][ T8710] EXT4-fs (loop3): shut down requested (2) [ 294.614463][ T4287] EXT4-fs (loop3): unmounting filesystem. [ 294.678070][ T33] bond0 (unregistering): Released all slaves [ 294.886571][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 294.894126][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 294.966218][ T8429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.226154][ T8725] using random self ethernet address [ 295.254093][ T8725] using random host ethernet address [ 295.406548][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 295.436766][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 295.513729][ T8408] device veth0_vlan entered promiscuous mode [ 295.545599][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 295.562903][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 295.602680][ T8408] device veth1_vlan entered promiscuous mode [ 295.612440][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 295.624112][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 295.645927][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 295.729843][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 295.765702][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 295.825356][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 295.837017][ T8408] device veth0_macvtap entered promiscuous mode [ 295.868286][ T8408] device veth1_macvtap entered promiscuous mode [ 295.912331][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 295.924584][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 295.979759][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.020252][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.040080][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.112972][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.151493][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.165048][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.175375][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.188283][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.203237][ T8408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.215519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 296.256038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 296.300644][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.363430][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.429382][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.454787][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.495004][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.527082][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.557850][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.615506][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.638570][ T8408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.668490][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 296.697487][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 296.734988][ T8408] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.772858][ T8408] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.812038][ T8408] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.846715][ T8408] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.913418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 296.945874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 297.022204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 297.055665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 297.103905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 297.125786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 297.152816][ T8761] loop2: detected capacity change from 0 to 8192 [ 297.160913][ T8429] device veth0_vlan entered promiscuous mode [ 297.168643][ T8761] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 297.189833][ T8761] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 297.205017][ T8761] REISERFS (device loop2): using ordered data mode [ 297.214807][ T8761] reiserfs: using flush barriers [ 297.265594][ T8761] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 297.299610][ T8769] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1573'. [ 297.323086][ T8429] device veth1_vlan entered promiscuous mode [ 297.375343][ T8761] REISERFS (device loop2): checking transaction log (loop2) [ 297.434529][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.463950][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.525355][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 297.550558][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 297.577060][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 297.619468][ T8429] device veth0_macvtap entered promiscuous mode [ 297.646051][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 297.658095][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 297.759897][ T8429] device veth1_macvtap entered promiscuous mode [ 297.803419][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 297.826020][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 297.836236][ T8761] REISERFS (device loop2): Using tea hash to sort names [ 297.845201][ T8761] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 297.859505][ T8761] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 297.884851][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.892857][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.925740][ T8776] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1575'. [ 297.932661][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.960631][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.975092][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.990989][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.006077][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.028576][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.075918][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.101853][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.137615][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.156393][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.176030][ T8429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.183869][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 298.198873][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 298.210857][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 298.286685][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.315984][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.326753][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.337655][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.354509][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.378172][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.392376][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.406337][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.406362][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.406378][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.421470][ T8429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.424441][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 298.425314][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 298.444794][ T8429] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.444851][ T8429] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.444880][ T8429] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.444917][ T8429] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.746737][ T8641] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.746758][ T8641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.747000][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 298.908386][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.908409][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.909715][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 299.052222][ T8793] loop2: detected capacity change from 0 to 1024 [ 299.081392][ T8794] loop7: detected capacity change from 0 to 256 [ 299.281374][ T8794] FAT-fs (loop7): Directory bread(block 64) failed [ 299.281417][ T8794] FAT-fs (loop7): Directory bread(block 65) failed [ 299.281495][ T8794] FAT-fs (loop7): Directory bread(block 66) failed [ 299.281525][ T8794] FAT-fs (loop7): Directory bread(block 67) failed [ 299.281599][ T8794] FAT-fs (loop7): Directory bread(block 68) failed [ 299.281629][ T8794] FAT-fs (loop7): Directory bread(block 69) failed [ 299.281713][ T8794] FAT-fs (loop7): Directory bread(block 70) failed [ 299.281742][ T8794] FAT-fs (loop7): Directory bread(block 71) failed [ 299.281857][ T8794] FAT-fs (loop7): Directory bread(block 72) failed [ 299.281894][ T8794] FAT-fs (loop7): Directory bread(block 73) failed [ 300.120639][ T8823] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.1591'. [ 300.577169][ T8841] program syz.5.1598 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 301.237439][ T8838] loop2: detected capacity change from 0 to 32768 [ 301.401872][ T8838] XFS (loop2): Mounting V5 Filesystem [ 301.482898][ T8838] XFS (loop2): Ending clean mount [ 301.668060][ T4271] XFS (loop2): Unmounting Filesystem [ 301.834803][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 303.015001][ T8924] tun0: tun_chr_ioctl cmd 2147767520 [ 303.119574][ T8929] loop5: detected capacity change from 0 to 64 [ 303.336861][ T8935] loop8: detected capacity change from 0 to 256 [ 303.445856][ T8935] FAT-fs (loop8): Directory bread(block 64) failed [ 303.452478][ T8935] FAT-fs (loop8): Directory bread(block 65) failed [ 303.494828][ T8935] FAT-fs (loop8): Directory bread(block 66) failed [ 303.501497][ T8935] FAT-fs (loop8): Directory bread(block 67) failed [ 303.532057][ T8935] FAT-fs (loop8): Directory bread(block 68) failed [ 303.560740][ T8935] FAT-fs (loop8): Directory bread(block 69) failed [ 303.576940][ T8935] FAT-fs (loop8): Directory bread(block 70) failed [ 303.583604][ T8935] FAT-fs (loop8): Directory bread(block 71) failed [ 303.603638][ T8935] FAT-fs (loop8): Directory bread(block 72) failed [ 303.610797][ T8935] FAT-fs (loop8): Directory bread(block 73) failed [ 303.835044][ T4661] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 304.036572][ T4661] usb 6-1: config index 0 descriptor too short (expected 1572, got 36) [ 304.054758][ T4661] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.106365][ T4661] usb 6-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 304.134919][ T4661] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.142991][ T4661] usb 6-1: Product: syz [ 304.181579][ T4661] usb 6-1: Manufacturer: syz [ 304.194916][ T4661] usb 6-1: SerialNumber: syz [ 304.244843][ T4661] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input17 [ 304.265590][ T8953] netem: change failed [ 304.430329][ T3624] bcm5974 6-1:1.0: could not read from device [ 304.483064][ T4661] bcm5974 6-1:1.0: could not read from device [ 304.509708][ T3624] bcm5974 6-1:1.0: could not read from device [ 304.522880][ T8958] syz_tun: tun_net_xmit 86 [ 304.585150][ T4661] input: failed to attach handler mousedev to device input17, error: -5 [ 304.606876][ T3624] bcm5974 6-1:1.0: could not read from device [ 304.632491][ T4661] usb 6-1: USB disconnect, device number 2 [ 304.680356][ T4385] bcm5974 6-1:1.0: could not read from device [ 304.689787][ T3624] bcm5974 6-1:1.0: could not read from device [ 304.710105][ T8943] loop3: detected capacity change from 0 to 32768 [ 304.857029][ T8943] XFS (loop3): Mounting V5 Filesystem [ 304.952267][ T8949] loop8: detected capacity change from 0 to 32768 [ 304.971890][ T4385] udevd[4385]: Error opening device "/dev/input/event4": No such file or directory [ 304.993987][ T8943] XFS (loop3): Ending clean mount [ 305.074356][ T8943] XFS (loop3): Quotacheck needed: Please wait. [ 305.094919][ T4385] udevd[4385]: Unable to EVIOCGABS device "/dev/input/event4" [ 305.103052][ T4385] udevd[4385]: Unable to EVIOCGABS device "/dev/input/event4" [ 305.137281][ T4385] udevd[4385]: Unable to EVIOCGABS device "/dev/input/event4" [ 305.179263][ T4385] udevd[4385]: Unable to EVIOCGABS device "/dev/input/event4" [ 305.305070][ T8943] XFS (loop3): Quotacheck: Done. [ 305.487721][ T26] audit: type=1326 audit(1785440233.848:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.8.1641" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efc19e019 code=0x7ffc0000 [ 305.547916][ T4287] XFS (loop3): Unmounting Filesystem [ 305.594949][ C0] syz_tun: tun_net_xmit 86 [ 305.648184][ T26] audit: type=1326 audit(1785440233.848:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.8.1641" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efc19e019 code=0x7ffc0000 [ 305.782550][ T26] audit: type=1326 audit(1785440233.928:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.8.1641" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efc19e019 code=0x7ffc0000 [ 305.884177][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1644'. [ 305.929639][ T26] audit: type=1326 audit(1785440233.928:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.8.1641" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efc19e019 code=0x7ffc0000 [ 306.017062][ T26] audit: type=1326 audit(1785440233.928:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.8.1641" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f3efc19e019 code=0x7ffc0000 [ 306.082468][ T8989] loop8: detected capacity change from 0 to 256 [ 306.171208][ T8989] FAT-fs (loop8): Directory bread(block 64) failed [ 306.180325][ T26] audit: type=1326 audit(1785440233.928:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.8.1641" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efc19e019 code=0x7ffc0000 [ 306.204899][ T8989] FAT-fs (loop8): Directory bread(block 65) failed [ 306.211599][ T8989] FAT-fs (loop8): Directory bread(block 66) failed [ 306.235028][ T8989] FAT-fs (loop8): Directory bread(block 67) failed [ 306.241704][ T8989] FAT-fs (loop8): Directory bread(block 68) failed [ 306.279032][ T26] audit: type=1326 audit(1785440233.928:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.8.1641" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efc19e019 code=0x7ffc0000 [ 306.366040][ T8989] FAT-fs (loop8): Directory bread(block 69) failed [ 306.384693][ T26] audit: type=1326 audit(1785440233.928:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.8.1641" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efc19e019 code=0x7ffc0000 [ 306.425560][ T8989] FAT-fs (loop8): Directory bread(block 70) failed [ 306.432183][ T8989] FAT-fs (loop8): Directory bread(block 71) failed [ 306.500986][ T8989] FAT-fs (loop8): Directory bread(block 72) failed [ 306.502135][ T26] audit: type=1326 audit(1785440233.928:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.8.1641" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efc19e019 code=0x7ffc0000 [ 306.529166][ T8989] FAT-fs (loop8): Directory bread(block 73) failed [ 306.634839][ C0] syz_tun: tun_net_xmit 86 [ 306.686956][ T26] audit: type=1326 audit(1785440233.928:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.8.1641" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f3efc19e019 code=0x7ffc0000 [ 306.834990][ T8999] overlayfs: failed to set xattr on upper [ 307.026561][ T8983] loop2: detected capacity change from 0 to 32768 [ 307.113378][ T9009] program syz.5.1651 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 307.167489][ T8983] XFS (loop2): Mounting V5 Filesystem [ 307.211831][ T9014] loop8: detected capacity change from 0 to 512 [ 307.323052][ T8983] XFS (loop2): Ending clean mount [ 307.387623][ T9014] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 307.473444][ T9014] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.650360][ T9031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1656'. [ 307.679535][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1655'. [ 307.728821][ T9033] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.733999][ T4271] XFS (loop2): Unmounting Filesystem [ 307.736836][ T9033] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.800236][ T8429] EXT4-fs (loop8): unmounting filesystem. [ 308.058848][ T9043] device netdevsim0 entered promiscuous mode [ 308.091938][ T9043] device netdevsim0 left promiscuous mode [ 309.344213][ T9050] loop7: detected capacity change from 0 to 40427 [ 309.399985][ T9050] F2FS-fs (loop7): invalid crc value [ 309.424486][ T9050] F2FS-fs (loop7): Found nat_bits in checkpoint [ 309.534876][ T4661] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 309.595935][ T9086] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1674'. [ 309.652501][ T9050] F2FS-fs (loop7): Start checkpoint disabled! [ 309.734978][ T4661] usb 6-1: unable to get BOS descriptor or descriptor too short [ 309.755309][ T9050] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 309.759925][ T4661] usb 6-1: config 1 has too many interfaces: 35, using maximum allowed: 32 [ 309.805308][ T4661] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.850961][ T4661] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 35 [ 309.885913][ T4661] usb 6-1: string descriptor 0 read error: -22 [ 309.914852][ T4661] usb 6-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 309.957880][ T4661] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.155288][ T22] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 310.200322][ T9101] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1680'. [ 310.245480][ T4661] snd-usb-audio: probe of 6-1:1.0 failed with error -2 [ 310.257547][ T9101] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1680'. [ 310.281395][ T8641] kworker/u4:9: attempt to access beyond end of device [ 310.281395][ T8641] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 310.324317][ T4385] udevd[4385]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 310.348888][ T22] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 310.374728][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.403164][ T22] usb 3-1: Product: syz [ 310.408255][ T22] usb 3-1: Manufacturer: syz [ 310.412906][ T22] usb 3-1: SerialNumber: syz [ 310.476660][ T22] usb 3-1: config 0 descriptor?? [ 310.483249][ T4661] usb 6-1: USB disconnect, device number 3 [ 310.713824][ T4853] usb 3-1: USB disconnect, device number 17 [ 311.209806][ T4661] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 311.227331][ T9126] loop5: detected capacity change from 0 to 512 [ 311.298874][ T9126] EXT4-fs (loop5): orphan cleanup on readonly fs [ 311.361314][ T9126] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #4: comm syz.5.1685: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 311.406395][ T4661] usb 8-1: config index 0 descriptor too short (expected 1572, got 36) [ 311.445565][ T9126] EXT4-fs error (device loop5): ext4_quota_enable:7052: comm syz.5.1685: Bad quota inode: 4, type: 1 [ 311.459124][ T4661] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.471914][ T9126] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 311.520112][ T4661] usb 8-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 311.548140][ T4661] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.560575][ T9126] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 311.582848][ T4661] usb 8-1: Product: syz [ 311.587455][ T4661] usb 8-1: Manufacturer: syz [ 311.592111][ T4661] usb 8-1: SerialNumber: syz [ 311.599090][ T9126] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 311.638195][ T4661] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input18 [ 311.839024][ T3624] bcm5974 8-1:1.0: could not read from device [ 311.857669][ T4661] bcm5974 8-1:1.0: could not read from device [ 311.875106][ T3624] bcm5974 8-1:1.0: could not read from device [ 311.886389][ T9143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1691'. [ 311.904797][ T22] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 311.941248][ T4661] input: failed to attach handler mousedev to device input18, error: -5 [ 311.944332][ T8012] EXT4-fs (loop5): unmounting filesystem. [ 311.970949][ T4661] usb 8-1: USB disconnect, device number 2 [ 311.974966][ T3624] bcm5974 8-1:1.0: could not read from device [ 311.994202][ T9146] loop8: detected capacity change from 0 to 64 [ 312.096576][ T22] usb 4-1: config 0 interface 0 has no altsetting 0 [ 312.103365][ T22] usb 4-1: New USB device found, idVendor=1b96, idProduct=000d, bcdDevice= 0.00 [ 312.184404][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.206830][ T22] usb 4-1: config 0 descriptor?? [ 312.531254][ T9157] loop8: detected capacity change from 0 to 64 [ 312.629399][ T22] ntrig 0003:1B96:000D.0009: unknown main item tag 0x2 [ 312.646666][ T9157] hfs: walked past end of dir [ 312.663650][ T22] ntrig 0003:1B96:000D.0009: unknown main item tag 0x6 [ 312.681210][ T22] ntrig 0003:1B96:000D.0009: ignoring exceeding usage max [ 312.720208][ T22] ntrig 0003:1B96:000D.0009: hidraw0: USB HID v0.81 Device [HID 1b96:000d] on usb-dummy_hcd.3-1/input0 [ 312.826313][ T9165] loop2: detected capacity change from 0 to 8 [ 312.844790][ T22] ntrig 0003:1B96:000D.0009: Firmware version: 0.8.21.25.7 (e2d0 3fab) [ 313.104325][ T22] usb 4-1: USB disconnect, device number 16 [ 313.339121][ T9171] fido_id[9171]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 313.630585][ T9155] loop5: detected capacity change from 0 to 32768 [ 313.639158][ T9185] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1706'. [ 313.724262][ T9194] loop7: detected capacity change from 0 to 64 [ 313.762418][ T9155] XFS (loop5): Mounting V5 Filesystem [ 313.916423][ T9155] XFS (loop5): Ending clean mount [ 314.178576][ T8012] XFS (loop5): Unmounting Filesystem [ 314.198182][ T9205] loop8: detected capacity change from 0 to 512 [ 314.344197][ T9205] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.1713: invalid indirect mapped block 256 (level 2) [ 314.423394][ T9205] EXT4-fs (loop8): Remounting filesystem read-only [ 314.462501][ T9205] EXT4-fs (loop8): 2 truncates cleaned up [ 314.469354][ T9205] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 314.700685][ T9220] sctp: [Deprecated]: syz.7.1717 (pid 9220) Use of struct sctp_assoc_value in delayed_ack socket option. [ 314.700685][ T9220] Use struct sctp_sack_info instead [ 314.807601][ T9225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1719'. [ 314.860140][ T8429] EXT4-fs (loop8): unmounting filesystem. [ 315.078042][ T9230] loop7: detected capacity change from 0 to 256 [ 315.110531][ T9234] loop3: detected capacity change from 0 to 256 [ 315.156961][ T9234] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 315.206555][ T9236] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1714'. [ 315.257113][ T9236] netem: invalid attributes len -19 [ 315.286867][ T9231] loop8: detected capacity change from 0 to 4096 [ 315.294589][ T9236] netem: change failed [ 315.455753][ T9240] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 315.568031][ T9242] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1724'. [ 315.678298][ T9247] device macvlan0 entered promiscuous mode [ 315.721017][ T9247] netlink: 'syz.7.1726': attribute type 1 has an invalid length. [ 315.775009][ T9247] netlink: 'syz.7.1726': attribute type 2 has an invalid length. [ 316.845098][ T9260] loop3: detected capacity change from 0 to 131072 [ 316.855608][ T9260] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 316.862367][ T9260] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 316.872321][ T9260] F2FS-fs (loop3): invalid crc value [ 316.889506][ T9272] loop7: detected capacity change from 0 to 512 [ 316.915072][ T9260] F2FS-fs (loop3): Found nat_bits in checkpoint [ 316.935685][ T9272] ext4: Unknown parameter 'measure' [ 316.993422][ T4385] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 317.012123][ T9271] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1734'. [ 317.023402][ T9260] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 317.031050][ T9260] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 317.156231][ T9260] F2FS-fs (loop3): sanity_check_inode: inode (ino=4, mode=1773) should not have inline_dentry, run fsck to fix [ 317.200275][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.206673][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.267903][ T9281] loop5: detected capacity change from 0 to 2048 [ 317.339736][ T9281] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 317.372062][ T9281] UDF-fs: Scanning with blocksize 512 failed [ 317.433744][ T9281] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 317.806670][ T9286] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1738'. [ 317.956492][ T9292] syz_tun: tun_net_xmit 86 [ 318.147931][ T9302] loop7: detected capacity change from 0 to 128 [ 318.290342][ T9305] program syz.5.1745 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.401469][ T4660] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 318.622524][ T4660] usb 9-1: config 0 has an invalid interface number: 50 but max is 0 [ 318.643305][ T4660] usb 9-1: config 0 has no interface number 0 [ 318.670118][ T4660] usb 9-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 318.723870][ T4660] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 318.763697][ T4660] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.797664][ T4660] usb 9-1: Product: syz [ 318.806643][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1751'. [ 318.821358][ T4660] usb 9-1: Manufacturer: syz [ 318.831966][ T4660] usb 9-1: SerialNumber: syz [ 318.842000][ T4660] usb 9-1: config 0 descriptor?? [ 318.865172][ T22] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 318.888334][ T4660] yurex 9-1:0.50: USB YUREX device now attached to Yurex #0 [ 318.927572][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1751'. [ 318.972924][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1751'. [ 319.012066][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1751'. [ 319.035336][ C1] syz_tun: tun_net_xmit 86 [ 319.054793][ T9322] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 319.062154][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1751'. [ 319.076976][ T22] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 319.097646][ T22] usb 3-1: config 4 has no interface number 0 [ 319.118538][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1751'. [ 319.131947][ T22] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 319.140342][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1751'. [ 319.185286][ T22] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.195975][ T9322] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 319.216155][ T22] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 319.235683][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.288743][ T4661] usb 9-1: USB disconnect, device number 2 [ 319.302037][ T22] hub 3-1:4.128: USB hub found [ 319.309234][ T4661] yurex 9-1:0.50: USB YUREX #0 now disconnected [ 319.493991][ T22] hub 3-1:4.128: 2 ports detected [ 319.499550][ T22] hub 3-1:4.128: Using single TT (err -22) [ 319.512419][ T9330] loop9: detected capacity change from 0 to 7 [ 319.534096][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.543356][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 319.578066][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.587356][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 319.598228][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.607529][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 319.627849][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.637161][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 319.660861][ T9323] loop5: detected capacity change from 0 to 32768 [ 319.667759][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.677041][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 319.725298][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.734501][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 319.755122][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.764315][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 319.772533][ T9330] ldm_validate_partition_table(): Disk read failed. [ 319.802498][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.811744][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 319.822581][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.831822][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 319.851384][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 319.872382][ T9330] Dev loop9: unable to read RDB block 0 [ 319.879891][ T9330] loop9: unable to read partition table [ 319.892895][ T9330] loop9: partition table beyond EOD, truncated [ 319.915151][ T22] usb 3-1: USB disconnect, device number 18 [ 319.924893][ T9330] loop_reread_partitions: partition scan of loop9 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 319.990122][ T9340] loop7: detected capacity change from 0 to 2048 [ 319.995849][ T9323] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 320.075037][ C1] syz_tun: tun_net_xmit 86 [ 320.555326][ T8012] ocfs2: Unmounting device (7,5) on (node local) [ 320.764347][ T9355] RDS: rds_bind could not find a transport for a:0:20::, load rds_tcp or rds_rdma? [ 320.825067][ T4847] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 321.037161][ T4847] usb 8-1: Using ep0 maxpacket: 32 [ 321.050043][ T4847] usb 8-1: config 0 has an invalid interface number: 97 but max is 0 [ 321.081028][ T4847] usb 8-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 321.125698][ T4847] usb 8-1: config 0 has no interface number 0 [ 321.151645][ T4847] usb 8-1: too many endpoints for config 0 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 321.207067][ T4847] usb 8-1: config 0 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 321.238470][ T4847] usb 8-1: config 0 interface 97 has no altsetting 0 [ 321.250178][ T4847] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 321.259480][ T4847] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 321.285146][ T4847] usb 8-1: Product: syz [ 321.308203][ T4847] usb 8-1: Manufacturer: syz [ 321.333186][ T4847] usb 8-1: SerialNumber: syz [ 321.355391][ T4847] usb 8-1: config 0 descriptor?? [ 321.568720][ T4847] hub 8-1:0.97: bad descriptor, ignoring hub [ 321.587104][ T4847] hub: probe of 8-1:0.97 failed with error -5 [ 321.670055][ T9374] loop9: detected capacity change from 0 to 7 [ 321.701861][ T4359] ldm_validate_partition_table(): Disk read failed. [ 321.721959][ T4359] Dev loop9: unable to read RDB block 0 [ 321.757335][ T4359] loop9: unable to read partition table [ 321.765230][ T4359] loop9: partition table beyond EOD, truncated [ 321.788905][ T9374] ldm_validate_partition_table(): Disk read failed. [ 321.828541][ T9374] Dev loop9: unable to read RDB block 0 [ 321.846772][ T9374] loop9: unable to read partition table [ 321.854952][ T4847] usb 8-1: reset high-speed USB device number 3 using dummy_hcd [ 321.885013][ T9374] loop9: partition table beyond EOD, truncated [ 321.914416][ T9374] loop_reread_partitions: partition scan of loop9 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 321.947479][ T3639] ldm_validate_partition_table(): Disk read failed. [ 321.957884][ T3639] Dev loop9: unable to read RDB block 0 [ 321.975991][ T3639] loop9: unable to read partition table [ 321.982285][ T3639] loop9: partition table beyond EOD, truncated [ 322.049558][ T9382] loop2: detected capacity change from 0 to 736 [ 322.104807][ T4853] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 322.191090][ T9384] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1771'. [ 322.221745][ T9384] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1771'. [ 322.320489][ T4853] usb 4-1: config 0 interface 0 altsetting 22 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 322.335354][ T4847] usb 8-1: failed to restore interface 97 altsetting 97 (error=-71) [ 322.364774][ T4853] usb 4-1: config 0 interface 0 altsetting 22 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 322.385381][ T4847] usb 8-1: USB disconnect, device number 3 [ 322.396894][ T9389] loop9: detected capacity change from 0 to 7 [ 322.405335][ T4385] Dev loop9: unable to read RDB block 7 [ 322.418937][ T4385] loop9: unable to read partition table [ 322.425328][ T4853] usb 4-1: config 0 interface 0 has no altsetting 0 [ 322.431996][ T4853] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 322.441450][ T4385] loop9: partition table beyond EOD, truncated [ 322.464180][ T9389] Dev loop9: unable to read RDB block 7 [ 322.486556][ T4853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.494931][ T9389] loop9: unable to read partition table [ 322.500788][ T9389] loop9: partition table beyond EOD, truncated [ 322.532769][ T4853] usb 4-1: config 0 descriptor?? [ 322.548438][ T9378] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 322.574852][ T9389] loop_reread_partitions: partition scan of loop9 (þ被xüÿÿÿÿÿÿÿ ) failed (rc=-5) [ 322.857783][ T9397] loop8: detected capacity change from 0 to 1024 [ 322.891508][ T9397] hfsplus: session requires an argument [ 322.937089][ T9397] hfsplus: unable to parse mount options [ 322.993467][ T4853] aquacomputer_d5next 0003:0C70:F00D.000A: unknown main item tag 0x0 [ 323.040601][ T4853] aquacomputer_d5next 0003:0C70:F00D.000A: unknown main item tag 0x0 [ 323.084804][ T4853] aquacomputer_d5next 0003:0C70:F00D.000A: item fetching failed at offset 2/43 [ 323.135413][ T4853] aquacomputer_d5next: probe of 0003:0C70:F00D.000A failed with error -22 [ 323.194445][ T4335] usb 4-1: USB disconnect, device number 17 [ 324.233546][ T9435] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1789'. [ 324.265416][ T9436] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1790'. [ 324.279557][ T9435] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1789'. [ 324.357898][ T9439] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1789'. [ 324.408161][ T9439] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1789'. [ 324.436598][ T9439] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1789'. [ 324.474892][ T9439] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1789'. [ 324.841643][ T9424] loop5: detected capacity change from 0 to 40427 [ 324.907618][ T9424] F2FS-fs (loop5): invalid crc value [ 324.943532][ T9424] F2FS-fs (loop5): Found nat_bits in checkpoint [ 325.086894][ T9463] loop7: detected capacity change from 0 to 512 [ 325.128578][ T9424] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 325.204947][ T4847] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 325.405127][ T4847] usb 9-1: Using ep0 maxpacket: 16 [ 325.413072][ T4847] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 325.445207][ T4847] usb 9-1: config 0 has no interface number 0 [ 325.474890][ T4847] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.502636][ T8012] syz-executor: attempt to access beyond end of device [ 325.502636][ T8012] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 325.534658][ T4847] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.557460][ T9470] loop7: detected capacity change from 0 to 512 [ 325.582317][ T4847] usb 9-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 325.604162][ T4847] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.627152][ T4847] usb 9-1: config 0 descriptor?? [ 325.688445][ T9470] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 325.710201][ T9470] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.736015][ T9452] loop2: detected capacity change from 0 to 32768 [ 325.876183][ T9452] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 326.041677][ T4847] hid (null): global environment stack underflow [ 326.133704][ T4271] ocfs2: Unmounting device (7,2) on (node local) [ 326.141662][ T8408] EXT4-fs (loop7): unmounting filesystem. [ 326.242478][ T4847] uclogic 0003:28BD:0071.000B: pen parameters not found [ 326.251342][ T4847] uclogic 0003:28BD:0071.000B: interface is invalid, ignoring [ 326.302977][ T4847] usb 9-1: USB disconnect, device number 3 [ 326.797811][ T9494] loop5: detected capacity change from 0 to 256 [ 327.070201][ T9501] loop7: detected capacity change from 0 to 512 [ 327.164881][ T9501] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 327.195291][ T9501] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 327.480743][ T8408] EXT4-fs (loop7): unmounting filesystem. [ 328.223941][ T9528] loop2: detected capacity change from 0 to 256 [ 328.362911][ T9533] loop3: detected capacity change from 0 to 512 [ 328.987901][ T9546] loop5: detected capacity change from 0 to 1024 [ 329.220015][ T9551] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input19 [ 329.691876][ T9541] loop2: detected capacity change from 0 to 32768 [ 329.760173][ T9541] XFS (loop2): Mounting V5 Filesystem [ 329.906281][ T9541] XFS (loop2): Ending clean mount [ 329.984248][ T9541] XFS (loop2): Quotacheck needed: Please wait. [ 330.002602][ T9577] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 330.110159][ T9577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 330.138187][ T9541] XFS (loop2): Quotacheck: Done. [ 330.139008][ T9577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 330.251659][ T9579] loop7: detected capacity change from 0 to 1024 [ 330.332385][ T9579] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #3: block 2: comm syz.7.1833: lblock 2 mapped to illegal pblock 2 (length 1) [ 330.480367][ T9579] __quota_error: 9 callbacks suppressed [ 330.480384][ T9579] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 330.504246][ T9579] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #3: block 48: comm syz.7.1833: lblock 0 mapped to illegal pblock 48 (length 1) [ 330.565316][ T9579] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 330.607063][ T9579] EXT4-fs error (device loop7): ext4_acquire_dquot:6841: comm syz.7.1833: Failed to acquire dquot type 0 [ 330.622048][ T4271] XFS (loop2): Unmounting Filesystem [ 330.649752][ T9579] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 330.712164][ T9579] EXT4-fs error (device loop7): ext4_evict_inode:281: inode #11: comm syz.7.1833: mark_inode_dirty error [ 330.774519][ T9579] EXT4-fs warning (device loop7): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 330.840807][ T9579] EXT4-fs (loop7): 1 orphan inode deleted [ 330.847611][ T9579] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 330.887479][ T11] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 330.946980][ T11] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 330.984822][ T11] EXT4-fs error (device loop7): ext4_release_dquot:6877: comm kworker/u4:1: Failed to release dquot type 0 [ 331.202245][ T8408] EXT4-fs (loop7): unmounting filesystem. [ 331.221462][ T8408] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 331.265110][ T8408] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 331.294925][ T8408] EXT4-fs error (device loop7): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 331.353660][ T9589] loop8: detected capacity change from 0 to 40427 [ 331.438157][ T9589] F2FS-fs (loop8): invalid crc value [ 331.485308][ T9589] F2FS-fs (loop8): Found nat_bits in checkpoint [ 331.670866][ T9615] loop2: detected capacity change from 0 to 128 [ 331.688363][ T9589] F2FS-fs (loop8): Start checkpoint disabled! [ 331.805906][ T9589] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 331.827838][ T9615] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 331.895099][ T9615] ext4 filesystem being mounted at /404/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 332.219469][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 332.796490][ T9635] loop3: detected capacity change from 0 to 128 [ 332.860570][ T9635] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 332.988737][ T9635] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 333.075330][ T26] audit: type=1800 audit(1785440261.438:82): pid=9635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1852" name="bus" dev="loop3" ino=1048785 res=0 errno=0 [ 333.286320][ T33] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 333.441184][ T4854] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 333.650614][ T4854] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 333.686163][ T4854] usb 9-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 333.699613][ T9630] loop2: detected capacity change from 0 to 40427 [ 333.724910][ T4854] usb 9-1: config 220 interface 0 has no altsetting 0 [ 333.742716][ T9630] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 333.747372][ T4854] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 333.764007][ T9630] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 333.800387][ T4854] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.818417][ T9630] F2FS-fs (loop2): invalid crc value [ 333.829595][ T4854] usb 9-1: Product: syz [ 333.841803][ T4854] usb 9-1: Manufacturer: syz [ 333.855677][ T4854] usb 9-1: SerialNumber: syz [ 333.881646][ T9630] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 334.083425][ T4854] usb 9-1: Found UVC 7.01 device syz (8086:0b07) [ 334.111073][ T4854] usb 9-1: No valid video chain found. [ 334.153679][ T4854] usb 9-1: USB disconnect, device number 4 [ 334.250384][ T9630] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 334.278746][ T9630] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 334.382434][ T9650] loop3: detected capacity change from 0 to 32768 [ 334.415901][ T9630] fscrypt (loop2, inode 3): Error -61 getting encryption context [ 334.462046][ T9650] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 334.537541][ T9650] JBD2: Ignoring recovery information on journal [ 334.618398][ T9650] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 334.977250][ T9650] overlayfs: upper fs does not support tmpfile. [ 335.109973][ T9650] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 335.175061][ T9650] overlayfs: failed to set xattr on upper [ 335.216160][ T9650] overlayfs: ...falling back to index=off,metacopy=off. [ 335.223171][ T9650] overlayfs: upper fs missing required features. [ 335.289810][ T9687] input: syz1 as /devices/virtual/input/input20 [ 335.453062][ T4287] ocfs2: Unmounting device (7,3) on (node local) [ 335.582089][ T9691] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1862'. [ 335.834595][ T9698] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1871'. [ 335.866427][ T9698] sch_fq: defrate 678942120 ignored. [ 336.210411][ T9709] device batadv_slave_1 entered promiscuous mode [ 336.609218][ T9719] loop3: detected capacity change from 0 to 1024 [ 336.863070][ T9727] loop7: detected capacity change from 0 to 7 [ 336.892712][ C0] blk_print_req_error: 57 callbacks suppressed [ 336.892729][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 336.908870][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 336.918146][ C1] buffer_io_error: 56 callbacks suppressed [ 336.918157][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 336.973226][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 336.982488][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 337.045502][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 337.054746][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 337.172018][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 337.181414][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 337.193872][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 337.203109][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 337.325360][ T9738] netlink: 'syz.5.1885': attribute type 12 has an invalid length. [ 337.373130][ T9738] netlink: 'syz.5.1885': attribute type 29 has an invalid length. [ 337.405302][ T9738] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1885'. [ 337.574153][ T9747] loop3: detected capacity change from 0 to 256 [ 337.653261][ T9747] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d) [ 337.699946][ T9720] loop7: detected capacity change from 0 to 32768 [ 337.759289][ T9720] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 337.814720][ T27] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 337.825798][ T9720] JBD2: Ignoring recovery information on journal [ 337.986657][ T9720] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 338.036882][ T27] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 338.074001][ T27] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 338.118097][ T27] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 338.160941][ T9720] overlayfs: upper fs does not support tmpfile. [ 338.199566][ T27] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 338.216041][ T9720] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 338.239361][ T27] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 338.247926][ T9720] overlayfs: failed to set xattr on upper [ 338.247996][ T9720] overlayfs: ...falling back to index=off,metacopy=off. [ 338.248007][ T9720] overlayfs: upper fs missing required features. [ 338.329503][ T27] usb 9-1: Product: syz [ 338.366397][ T27] usb 9-1: Manufacturer: syz [ 338.371091][ T27] usb 9-1: SerialNumber: syz [ 338.527028][ T8408] ocfs2: Unmounting device (7,7) on (node local) [ 338.655891][ T27] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 338.885215][ T4854] usb 9-1: USB disconnect, device number 5 [ 338.902754][ T4854] usblp0: removed [ 339.055515][ T9775] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 339.062827][ T9775] IPv6: NLM_F_CREATE should be set when creating new route [ 339.070175][ T9775] IPv6: NLM_F_CREATE should be set when creating new route [ 339.077475][ T9775] IPv6: NLM_F_CREATE should be set when creating new route [ 339.100233][ T9751] loop5: detected capacity change from 0 to 32768 [ 339.247981][ T9751] XFS (loop5): Mounting V5 Filesystem [ 339.409676][ T9751] XFS (loop5): Ending clean mount [ 339.442993][ T9751] XFS (loop5): Quotacheck needed: Please wait. [ 339.609821][ T9751] XFS (loop5): Quotacheck: Done. [ 339.804112][ T9799] loop3: detected capacity change from 0 to 512 [ 339.836846][ T8012] XFS (loop5): Unmounting Filesystem [ 339.895812][ T9799] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 339.985179][ T9799] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 340.024835][ T9804] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 340.198115][ T4287] EXT4-fs (loop3): unmounting filesystem. [ 340.425062][ T9814] loop7: detected capacity change from 0 to 2048 [ 340.481052][ T9814] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 340.520473][ T9814] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 340.699502][ T9814] fs-verity: sha512 using implementation "sha512-avx2" [ 340.953940][ T8408] EXT4-fs (loop7): unmounting filesystem. [ 341.396957][ T9843] loop3: detected capacity change from 0 to 4096 [ 341.412396][ T9846] loop2: detected capacity change from 0 to 64 [ 341.487937][ T9848] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 341.545721][ T9846] BFS-fs: bfs_readdir(): Bad f_pos=00000001 for loop2:00000002 [ 341.659122][ T9850] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean [ 342.081752][ T9863] loop3: detected capacity change from 0 to 256 [ 342.974881][ T4292] Bluetooth: hci6: command 0xfc11 tx timeout [ 342.983790][ T49] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 343.318024][ T9872] loop3: detected capacity change from 0 to 32768 [ 343.417487][ T9872] find_entry called with index >= next_index [ 343.424078][ T9872] find_entry called with index >= next_index [ 343.460100][ T9872] find_entry called with index >= next_index [ 343.479833][ T9872] find_entry called with index >= next_index [ 343.512693][ T9872] find_entry called with index >= next_index [ 343.527044][ T9872] add_index: next_index = 0. Resetting! [ 343.538601][ T9872] find_entry called with index >= next_index [ 343.544966][ T9872] find_entry called with index >= next_index [ 343.551475][ T9872] find_entry called with index >= next_index [ 343.565660][ T9872] non-latin1 character 0x3ff found in JFS file name [ 343.601267][ T9872] mount with iocharset=utf8 to access [ 343.753073][ T14] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 344.004722][ T14] usb 9-1: Using ep0 maxpacket: 32 [ 344.013965][ T14] usb 9-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 344.076284][ T14] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.084354][ T14] usb 9-1: Product: syz [ 344.101269][ T14] usb 9-1: Manufacturer: syz [ 344.111389][ T14] usb 9-1: SerialNumber: syz [ 344.138134][ T14] usb 9-1: config 0 descriptor?? [ 344.720728][ T9907] loop3: detected capacity change from 0 to 8192 [ 344.782872][ T9907] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 344.797387][ T14] peak_usb 9-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 344.814760][ T14] peak_usb 9-1:0.0 can0: sending command failure: -22 [ 344.824845][ T9907] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 344.825963][ T14] peak_usb 9-1:0.0 can0: sending command failure: -22 [ 344.856104][ T9907] REISERFS (device loop3): using ordered data mode [ 344.862726][ T9907] reiserfs: using flush barriers [ 344.957416][ T9907] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 345.038555][ T14] peak_usb: probe of 9-1:0.0 failed with error -22 [ 345.055080][ T9907] REISERFS (device loop3): checking transaction log (loop3) [ 345.097969][ T14] usb 9-1: USB disconnect, device number 6 [ 345.345312][ T9907] REISERFS (device loop3): Using tea hash to sort names [ 345.375666][ T9907] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 345.429392][ T9907] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 345.590718][ T9937] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1938'. [ 346.369214][ T27] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 346.594262][ T27] usb 9-1: Using ep0 maxpacket: 16 [ 346.606914][ T27] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 346.621726][ T27] usb 9-1: config 0 has no interface number 0 [ 346.655628][ T27] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 346.674689][ T27] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 1025, setting to 1024 [ 346.724725][ T27] usb 9-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 346.733860][ T27] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.792060][ T27] usb 9-1: config 0 descriptor?? [ 346.803339][ T9949] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 346.888059][ T9957] loop2: detected capacity change from 0 to 32768 [ 347.040227][ T9959] loop3: detected capacity change from 0 to 32768 [ 347.096802][ T9959] JBD2: Ignoring recovery information on journal [ 347.111344][ T9957] XFS (loop2): Mounting V5 Filesystem [ 347.201356][ T9957] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 347.223869][ T9959] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 347.248706][ T9957] XFS (loop2): Starting recovery (logdev: internal) [ 347.316455][ T9957] XFS (loop2): Ending recovery (logdev: internal) [ 347.352019][ T9959] OCFS2: ERROR (device loop3): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 347.352226][ T9959] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 347.475705][ T4271] XFS (loop2): Unmounting Filesystem [ 347.491766][ T27] uclogic 0003:28BD:0071.000C: failed retrieving string descriptor #100: -71 [ 347.511424][ T27] uclogic 0003:28BD:0071.000C: failed retrieving pen parameters: -71 [ 347.538199][ T9959] OCFS2: File system is now read-only. [ 347.543731][ T9959] (syz.3.1947,9959,0):ocfs2_calc_xattr_init:642 ERROR: status = -117 [ 347.558577][ T9959] (syz.3.1947,9959,0):ocfs2_mknod:334 ERROR: status = -117 [ 347.569974][ T27] uclogic 0003:28BD:0071.000C: pen probing failed: -71 [ 347.575967][ T9959] (syz.3.1947,9959,0):ocfs2_mknod:502 ERROR: status = -117 [ 347.591824][ T27] uclogic 0003:28BD:0071.000C: failed probing parameters: -71 [ 347.606729][ T9959] (syz.3.1947,9959,0):ocfs2_create:676 ERROR: status = -117 [ 347.626270][ T27] uclogic: probe of 0003:28BD:0071.000C failed with error -71 [ 347.657972][ T27] usb 9-1: USB disconnect, device number 7 [ 347.801308][ T4287] ocfs2: Unmounting device (7,3) on (node local) [ 347.987481][ T9867] Set syz1 is full, maxelem 65536 reached [ 348.444831][ T22] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 348.636889][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 348.643854][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 348.711137][ T22] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 348.746085][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.788973][ T22] usb 4-1: config 0 descriptor?? [ 349.004057][ T22] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 349.223717][ T4854] usb 4-1: USB disconnect, device number 18 [ 349.482747][T10014] loop2: detected capacity change from 0 to 4096 [ 349.561596][T10019] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 349.995558][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 350.189459][ C0] vkms_vblank_simulate: vblank timer overrun [ 350.200638][ T4854] smpboot: CPU 1 is now offline [ 350.388822][T10033] loop3: detected capacity change from 0 to 256 [ 350.482074][T10033] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 350.910023][T10036] netlink: 268 bytes leftover after parsing attributes in process `syz.8.1969'. [ 351.081980][T10026] loop7: detected capacity change from 0 to 32768 [ 351.245961][T10026] JBD2: Ignoring recovery information on journal [ 351.379473][ T57] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.440088][T10026] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 351.665781][T10026] OCFS2: ERROR (device loop7): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (0, expected 74) [ 351.789841][ T57] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.844778][T10026] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 351.944849][T10026] OCFS2: File system is now read-only. [ 351.950382][T10026] (syz.7.1967,10026,0):ocfs2_search_one_group:1706 ERROR: status = -30 [ 352.044991][T10026] (syz.7.1967,10026,0):ocfs2_claim_suballoc_bits:1942 ERROR: status = -30 [ 352.087589][ T57] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.126219][T10026] (syz.7.1967,10026,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 352.207641][T10026] (syz.7.1967,10026,0):ocfs2_claim_new_inode:2248 ERROR: status = -30 [ 352.292834][T10026] (syz.7.1967,10026,0):ocfs2_claim_new_inode:2263 ERROR: status = -30 [ 352.347644][ T57] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.390804][T10026] (syz.7.1967,10026,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 352.444505][T10026] (syz.7.1967,10026,0):ocfs2_mknod:385 ERROR: status = -30 [ 352.493663][T10026] (syz.7.1967,10026,0):ocfs2_mknod:502 ERROR: status = -30 [ 352.545668][T10026] (syz.7.1967,10026,0):ocfs2_mkdir:659 ERROR: status = -30 [ 352.664851][ T4847] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 352.912579][ T4847] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 352.938570][ T8408] ocfs2: Unmounting device (7,7) on (node local) [ 352.972405][T10065] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1978'. [ 352.991821][ T4847] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 96, setting to 64 [ 353.073691][ T4847] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 353.201448][ T4847] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 353.241081][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 353.255085][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 353.265102][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 353.273604][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 353.281736][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 353.289406][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 353.364100][ T4847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 353.404711][ T4847] usb 4-1: SerialNumber: syz [ 353.444993][T10056] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 353.506594][ T4847] hub 4-1:1.0: bad descriptor, ignoring hub [ 353.512619][ T4847] hub: probe of 4-1:1.0 failed with error -5 [ 353.726441][T10056] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 354.199123][ T4847] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 354.485226][ T14] usb 4-1: USB disconnect, device number 19 [ 354.527484][ T14] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 354.692331][T10091] loop8: detected capacity change from 0 to 1024 [ 354.717190][T10068] chnl_net:caif_netlink_parms(): no params data found [ 354.774392][T10091] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 354.873580][T10091] EXT4-fs error (device loop8): ext4_get_journal_inode:5762: inode #32: comm syz.8.1983: iget: special inode unallocated [ 355.055633][T10091] EXT4-fs (loop8): no journal found [ 355.060881][T10091] EXT4-fs (loop8): can't get journal size [ 355.166741][T10091] EXT4-fs (loop8): filesystem is read-only [ 355.172611][T10091] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 355.354905][ T4292] Bluetooth: hci0: command 0x0409 tx timeout [ 355.643712][ T8429] EXT4-fs (loop8): unmounting filesystem. [ 356.055118][T10068] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.085001][T10068] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.092926][T10068] device bridge_slave_0 entered promiscuous mode [ 356.116615][T10116] loop3: detected capacity change from 0 to 4096 [ 356.182083][T10116] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 356.293613][T10068] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.364866][T10068] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.419685][T10068] device bridge_slave_1 entered promiscuous mode [ 357.007250][T10068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.107309][T10068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.435693][ T4292] Bluetooth: hci0: command 0x041b tx timeout [ 357.562054][T10141] loop7: detected capacity change from 0 to 4096 [ 357.703471][T10146] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 357.796783][T10068] team0: Port device team_slave_0 added [ 357.883502][ T57] device hsr_slave_0 left promiscuous mode [ 357.951368][ T57] device hsr_slave_1 left promiscuous mode [ 358.044894][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.120749][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.172752][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.256551][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.322957][ T57] device bridge_slave_1 left promiscuous mode [ 358.384996][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.446195][ T57] device bridge_slave_0 left promiscuous mode [ 358.452432][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.730810][ T57] device veth1_macvtap left promiscuous mode [ 358.809976][ T57] device veth0_macvtap left promiscuous mode [ 358.859147][ T57] device veth1_vlan left promiscuous mode [ 358.904874][ T57] device veth0_vlan left promiscuous mode [ 359.514987][ T4292] Bluetooth: hci0: command 0x040f tx timeout [ 359.645666][ T4284] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 359.673333][ T4284] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 359.683745][ T49] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 359.693369][ T4284] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 359.701710][ T49] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 359.709395][ T4284] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 360.692308][T10185] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 360.699481][T10185] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 360.712811][T10187] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 360.777165][T10185] vhci_hcd vhci_hcd.0: Device attached [ 360.844163][T10188] vhci_hcd: connection closed [ 360.849748][ T8641] vhci_hcd: stop threads [ 360.905664][ T8641] vhci_hcd: release socket [ 360.910183][ T8641] vhci_hcd: disconnect device [ 360.949577][T10192] loop3: detected capacity change from 0 to 1024 [ 361.009709][ T26] audit: type=1800 audit(1785440289.368:83): pid=10192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2014" name="file2" dev="loop3" ino=25 res=0 errno=0 [ 361.595010][ T4292] Bluetooth: hci0: command 0x0419 tx timeout [ 361.709321][ T4335] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 361.754910][ T4292] Bluetooth: hci6: command 0x0409 tx timeout [ 361.925404][ T4335] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 361.941893][ T4335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.950375][ T4335] usb 4-1: Product: syz [ 361.959700][ T4335] usb 4-1: Manufacturer: syz [ 361.966304][ T4335] usb 4-1: SerialNumber: syz [ 361.982099][ T4335] usb 4-1: config 0 descriptor?? [ 362.022000][ T4335] hub 4-1:0.0: bad descriptor, ignoring hub [ 362.038162][ T4335] hub: probe of 4-1:0.0 failed with error -5 [ 362.056730][ T4335] f81232 4-1:0.0: f81534a converter detected [ 362.215097][ T4335] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 362.222281][ T4335] f81534a: probe of ttyUSB0 failed with error -5 [ 362.450762][ T57] team0 (unregistering): Port device team_slave_1 removed [ 362.474865][ T4335] usb 4-1: reset high-speed USB device number 20 using dummy_hcd [ 362.610319][ T57] team0 (unregistering): Port device team_slave_0 removed [ 362.763978][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.811787][T10211] program syz.8.2023 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 362.962309][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.036018][ T4335] usb 4-1: USB disconnect, device number 20 [ 363.053359][ T4335] f81232 4-1:0.0: device disconnected [ 363.112874][T10213] ucsi-stm32g0-i2c 0-0003: i2c read 03, 00 error: 0 [ 363.122550][T10213] ucsi-stm32g0-i2c: probe of 0-0003 failed with error -5 [ 363.151069][T10213] i2c i2c-0: new_device: Instantiated device stm32g0-typec at 0x03 [ 363.835018][ T4292] Bluetooth: hci6: command 0x041b tx timeout [ 364.855059][T10228] loop3: detected capacity change from 0 to 131072 [ 364.895782][T10228] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 364.902532][T10228] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 364.916482][T10228] F2FS-fs (loop3): invalid crc value [ 364.973235][T10228] F2FS-fs (loop3): Found nat_bits in checkpoint [ 365.023225][T10228] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 365.030450][T10228] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 365.124140][T10228] F2FS-fs (loop3): inconsistent node block, nid:8, node_footer[nid:5,ino:5,ofs:0,cpver:1219692001,blkaddr:15361] [ 365.593813][ T57] bond0 (unregistering): Released all slaves [ 365.915273][ T4292] Bluetooth: hci6: command 0x040f tx timeout [ 365.928069][T10068] team0: Port device team_slave_1 added [ 366.336236][T10068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.344154][T10068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.485616][T10239] loop3: detected capacity change from 0 to 32768 [ 366.546521][T10068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.615503][T10239] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 366.615503][T10239] [ 366.661332][T10244] netlink: 'syz.7.2036': attribute type 1 has an invalid length. [ 366.724282][T10239] ERROR: (device loop3): remounting filesystem as read-only [ 366.740974][T10068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.782387][T10068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.835076][T10239] ialloc: diAlloc returned -5! [ 366.871987][T10239] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 366.871987][T10239] [ 367.054821][T10068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.371001][T10068] device hsr_slave_0 entered promiscuous mode [ 367.485660][T10068] device hsr_slave_1 entered promiscuous mode [ 367.559602][T10068] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.613542][T10068] Cannot create hsr debugfs directory [ 367.803201][T10174] chnl_net:caif_netlink_parms(): no params data found [ 367.995085][ T4292] Bluetooth: hci6: command 0x0419 tx timeout [ 368.309928][T10174] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.416075][T10174] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.467126][T10174] device bridge_slave_0 entered promiscuous mode [ 368.513419][T10174] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.560598][T10174] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.603511][T10174] device bridge_slave_1 entered promiscuous mode [ 368.770047][T10174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.848037][T10174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.989349][T10068] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 369.168380][T10174] team0: Port device team_slave_0 added [ 369.255178][T10068] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 369.309221][T10174] team0: Port device team_slave_1 added [ 369.360991][T10068] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 369.431922][T10068] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 369.516581][T10174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.556141][T10174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.712712][T10174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.786139][T10174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.828149][T10174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.898481][T10284] loop8: detected capacity change from 0 to 40427 [ 369.975277][T10284] F2FS-fs (loop8): invalid crc value [ 370.001884][T10174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.043903][T10284] F2FS-fs (loop8): Found nat_bits in checkpoint [ 370.340809][T10174] device hsr_slave_0 entered promiscuous mode [ 370.425790][T10174] device hsr_slave_1 entered promiscuous mode [ 370.445778][T10284] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 370.472898][T10174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.553642][T10174] Cannot create hsr debugfs directory [ 370.712069][T10068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.902924][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 370.945341][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 370.966951][ T8429] syz-executor: attempt to access beyond end of device [ 370.966951][ T8429] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 371.017734][T10068] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.129958][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 371.175287][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 371.286087][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.293203][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.378186][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 371.435711][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 371.505598][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.512701][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.682665][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 371.699917][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 371.772314][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 371.884103][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 371.966278][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 372.050309][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 372.059954][T10343] loop3: detected capacity change from 0 to 1024 [ 372.118370][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 372.145514][T10343] EXT4-fs: Ignoring removed mblk_io_submit option [ 372.181240][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 372.245622][T10343] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 372.262366][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 372.328959][T10068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 372.415448][T10068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 372.647743][ T4287] EXT4-fs (loop3): unmounting filesystem. [ 373.044927][ T4339] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 373.151763][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 373.191036][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 373.227981][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 373.264924][ T4339] usb 9-1: Using ep0 maxpacket: 32 [ 373.282237][ T4339] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 373.367957][ T4339] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.412496][ T4339] usb 9-1: config 0 descriptor?? [ 373.659537][ T4339] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 373.706043][ T4339] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 373.791788][ T4339] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 373.839533][ T4339] usb 9-1: media controller created [ 373.867300][T10354] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 373.901430][ T4339] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 374.007139][ T4339] az6027: usb out operation failed. (-71) [ 374.068946][ T4339] az6027: usb out operation failed. (-71) [ 374.108823][T10375] program syz.3.2073 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 374.120305][ T4339] stb0899_attach: Driver disabled by Kconfig [ 374.147568][ T4339] az6027: no front-end attached [ 374.147568][ T4339] [ 374.176705][ T4339] az6027: usb out operation failed. (-71) [ 374.197928][ T4339] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 374.238001][ T4339] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input21 [ 374.317536][ T4339] dvb-usb: schedule remote query interval to 400 msecs. [ 374.348911][ T4339] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 374.403382][ T4339] usb 9-1: USB disconnect, device number 8 [ 374.520786][ T4339] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 374.876191][T10376] device vlan2 entered promiscuous mode [ 374.909860][T10376] device macvlan1 entered promiscuous mode [ 375.310249][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 375.358616][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 375.413802][T10068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.516491][T10415] netlink: 'syz.8.2086': attribute type 3 has an invalid length. [ 376.524281][T10415] netlink: 812 bytes leftover after parsing attributes in process `syz.8.2086'. [ 376.689140][T10174] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 376.787073][T10174] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 376.874783][ T4292] Bluetooth: hci3: command 0x0406 tx timeout [ 376.912584][T10174] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 377.015888][T10174] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 377.357768][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.364122][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.446659][T10174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.619681][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 377.655642][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 377.720944][T10174] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.800045][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 377.836032][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 377.926905][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.934024][ T4332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.096077][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 378.121769][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 378.181954][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 378.243588][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.250772][ T4332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.322199][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 378.414344][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 378.455750][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 378.532149][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 378.600560][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 378.647970][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 378.692640][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 378.761039][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 378.791304][T10443] loop7: detected capacity change from 0 to 32768 [ 378.809119][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 378.894555][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 378.940095][T10443] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 378.968226][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 379.029281][T10174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 379.126316][T10174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 379.184409][T10068] device veth0_vlan entered promiscuous mode [ 379.222051][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 379.271735][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 379.332756][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 379.423204][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 379.457497][ T8408] ocfs2: Unmounting device (7,7) on (node local) [ 379.496104][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 379.561208][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 379.629483][T10068] device veth1_vlan entered promiscuous mode [ 379.845802][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 379.883075][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 379.964260][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 380.045683][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 380.120820][T10068] device veth0_macvtap entered promiscuous mode [ 380.202928][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 380.252990][T10068] device veth1_macvtap entered promiscuous mode [ 380.365437][T10068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.412628][T10483] scsi_dev_info_list_add_str: bad dev info string 'vendor;model' 'f' '(null)' [ 380.462135][T10068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.537974][T10068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.627397][T10068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.686688][T10068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.754700][T10068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.809259][T10068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.858197][T10068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.895530][T10068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.948106][T10068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.996447][T10068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.065773][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 381.074438][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 381.143814][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 381.184986][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 381.244143][T10174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.316958][T10068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.359022][T10068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.387433][T10480] loop7: detected capacity change from 0 to 40427 [ 381.404098][T10068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.457185][T10480] F2FS-fs (loop7): Wrong segment_count / block_count (64 > 16384) [ 381.484574][T10068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.510349][T10480] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 381.580411][T10068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.620463][T10480] F2FS-fs (loop7): Found nat_bits in checkpoint [ 381.658450][T10068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.723762][T10068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.798925][T10068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.848380][T10480] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 381.868054][T10068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.889106][T10480] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 381.916887][T10068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.984285][T10068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.048414][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 382.093191][ T8044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 382.213506][T10068] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.269801][T10068] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.329549][T10068] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.373664][T10068] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.477483][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 382.506610][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 382.589719][T10174] device veth0_vlan entered promiscuous mode [ 382.688432][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 382.725617][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 382.827910][T10174] device veth1_vlan entered promiscuous mode [ 382.913431][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 382.945769][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 382.986067][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 383.058201][T10513] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2113'. [ 383.161909][T10513] netlink: 22 bytes leftover after parsing attributes in process `syz.3.2113'. [ 383.209257][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 383.264064][T10174] device veth0_macvtap entered promiscuous mode [ 383.425927][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 383.484454][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 383.510022][T10518] loop8: detected capacity change from 0 to 4096 [ 383.549409][T10174] device veth1_macvtap entered promiscuous mode [ 383.577427][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 383.632119][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 383.689091][ T8641] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.752358][T10526] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 383.788461][ T8641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.922943][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.038899][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.110308][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.161208][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.203139][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.249740][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.299239][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.344684][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.354534][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.423211][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.465402][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.507909][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.563358][T10523] loop7: detected capacity change from 0 to 40427 [ 384.580035][T10174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.656756][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 384.699663][T10523] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504) [ 384.739023][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 384.789412][T10523] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 384.810987][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 384.842193][T10523] F2FS-fs (loop7): invalid crc value [ 384.873652][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.891430][ T4332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.922798][T10523] F2FS-fs (loop7): Found nat_bits in checkpoint [ 384.959050][ T4332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.975553][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.006342][T10541] loop8: detected capacity change from 0 to 64 [ 385.046769][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.155164][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.238151][T10523] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 385.267614][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.325015][T10523] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 385.365118][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.448635][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.495378][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.537387][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.581054][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.616712][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.644215][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.682972][T10174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.699637][ T8408] syz-executor: attempt to access beyond end of device [ 385.699637][ T8408] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 385.735229][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 385.772500][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 385.831013][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 385.941971][T10544] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 385.974819][T10546] loop8: detected capacity change from 0 to 2048 [ 385.992730][T10174] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.054555][T10174] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.069357][T10174] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.130557][T10546] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 386.139802][T10174] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.594727][T10229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.602595][T10229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.627627][ T8429] EXT4-fs (loop8): unmounting filesystem. [ 386.817475][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 386.937712][T10229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.033769][T10229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.118222][ T2951] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 387.259465][T10565] netlink: 'syz.3.2125': attribute type 9 has an invalid length. [ 387.363013][T10565] netlink: 668 bytes leftover after parsing attributes in process `syz.3.2125'. [ 387.739334][T10575] loop9: detected capacity change from 0 to 512 [ 387.842580][T10575] EXT4-fs: Ignoring removed oldalloc option [ 387.859684][T10578] loop7: detected capacity change from 0 to 64 [ 387.867257][T10579] block nbd3: not configured, cannot reconfigure [ 387.972967][T10575] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 388.104207][T10575] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 388.185002][T10575] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 388.193790][T10575] EXT4-fs (loop9): orphan cleanup on readonly fs [ 388.310147][T10575] Quota error (device loop9): v2_read_header: Failed header read: expected=8 got=0 [ 388.449611][T10575] EXT4-fs warning (device loop9): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 388.542900][T10575] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 388.582006][T10593] loop7: detected capacity change from 0 to 1024 [ 388.624367][T10575] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.2127: bg 0: block 40: padding at end of block bitmap is not set [ 388.747097][T10575] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 388.825208][T10575] EXT4-fs (loop9): 1 truncate cleaned up [ 388.862077][T10575] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 388.959356][T10562] loop8: detected capacity change from 0 to 40427 [ 389.020272][T10575] EXT4-fs error (device loop9): ext4_encrypted_get_link:46: inode #16: comm syz.9.2127: bad symlink. [ 389.091818][T10562] F2FS-fs (loop8): Found nat_bits in checkpoint [ 389.154097][T10575] EXT4-fs error (device loop9): ext4_encrypted_get_link:46: inode #16: comm syz.9.2127: bad symlink. [ 389.251180][T10602] EXT4-fs error (device loop9): ext4_encrypted_get_link:46: inode #16: comm syz.9.2127: bad symlink. [ 389.458960][T10562] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 389.580795][T10068] EXT4-fs (loop9): unmounting filesystem. [ 389.761729][ T26] audit: type=1800 audit(1785440574.116:84): pid=10562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2123" name="file1" dev="loop8" ino=10 res=0 errno=0 [ 389.907926][T10613] loop9: detected capacity change from 0 to 128 [ 389.917146][ T4332] wlan1: Trigger new scan to find an IBSS to join [ 390.010335][T10613] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 390.084076][ T8429] syz-executor: attempt to access beyond end of device [ 390.084076][ T8429] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 390.125515][T10595] loop0: detected capacity change from 0 to 32768 [ 390.142173][T10613] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 390.243140][T10595] XFS (loop0): Mounting V5 Filesystem [ 390.382862][T10595] XFS (loop0): Ending clean mount [ 390.618844][T10229] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 390.789853][T10174] XFS (loop0): Unmounting Filesystem [ 391.013322][T10632] loop9: detected capacity change from 0 to 4096 [ 391.039419][T10634] loop7: detected capacity change from 0 to 256 [ 391.164080][T10634] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 391.415850][T10632] ntfs3: loop9: failed to convert "0080" to maciceland [ 392.076240][ T4848] hid-generic 0005:15C2:0440.000D: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 392.266850][T10648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.354200][T10648] device batadv_slave_0 entered promiscuous mode [ 392.451840][T10648] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 392.955347][T10229] wlan1: Creating new IBSS network, BSSID fe:a3:f3:87:ab:63 [ 393.369877][T10671] loop0: detected capacity change from 0 to 4096 [ 393.459356][T10671] EXT4-fs: Ignoring removed orlov option [ 393.480637][T10675] loop9: detected capacity change from 0 to 4096 [ 393.517850][T10675] ntfs: (device loop9): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 393.573135][T10671] EXT4-fs (loop0): Test dummy encryption mode enabled [ 393.662168][T10671] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 393.723808][T10675] ntfs: (device loop9): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 393.857259][T10675] ntfs: (device loop9): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 393.931773][T10675] ntfs: (device loop9): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 394.139121][T10174] EXT4-fs (loop0): unmounting filesystem. [ 394.149622][T10675] ntfs: (device loop9): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 394.250674][T10675] ntfs: (device loop9): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 394.447341][T10675] ntfs: (device loop9): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 394.527283][T10675] ntfs: (device loop9): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 394.729821][T10675] ntfs: (device loop9): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 394.811901][T10675] ntfs: (device loop9): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 394.970273][T10675] ntfs: volume version 3.1. [ 396.332985][T10719] loop0: detected capacity change from 0 to 512 [ 396.380421][T10719] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 396.466702][T10719] EXT4-fs (loop0): 1 truncate cleaned up [ 396.509639][T10719] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 396.887854][T10174] EXT4-fs (loop0): unmounting filesystem. [ 398.915614][ T4339] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 399.122565][ T4339] usb 9-1: Using ep0 maxpacket: 32 [ 399.151207][ T4339] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 399.204262][ T4339] usb 9-1: config 0 has no interface number 0 [ 399.246682][ T4339] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 399.291132][ T4339] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.339062][ T4339] usb 9-1: Product: syz [ 399.343280][ T4339] usb 9-1: Manufacturer: syz [ 399.428353][ T4339] usb 9-1: SerialNumber: syz [ 399.475483][ T4339] usb 9-1: config 0 descriptor?? [ 399.514286][ T4339] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 399.710750][ T4339] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 399.805212][ T4339] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 400.222363][ C0] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 400.261963][ T4848] usb 9-1: USB disconnect, device number 9 [ 400.297313][ T4848] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 400.368643][ T4848] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 400.433833][ T4848] quatech2 9-1:0.51: device disconnected [ 400.815870][ T127] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 401.014840][ T127] usb 10-1: Using ep0 maxpacket: 16 [ 401.049926][ T127] usb 10-1: config 0 has an invalid interface number: 34 but max is 0 [ 401.101320][ T127] usb 10-1: config 0 has no interface number 0 [ 401.129982][ T127] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 401.190961][ T127] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 401.201506][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 401.253466][ T127] usb 10-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 401.331224][ T127] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.393058][ T127] usb 10-1: Product: syz [ 401.413371][ T127] usb 10-1: Manufacturer: syz [ 401.443622][ T127] usb 10-1: SerialNumber: syz [ 401.485343][ T127] usb 10-1: config 0 descriptor?? [ 401.491002][T10802] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 401.527950][T10802] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 401.794303][T10802] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 401.824516][T10802] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 402.061116][ T127] asix 10-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 402.108675][T10820] loop8: detected capacity change from 0 to 32768 [ 402.163584][T10820] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.2197 (10820) [ 402.250198][T10820] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 402.336681][T10820] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 402.389413][T10820] BTRFS info (device loop8): turning on sync discard [ 402.420740][T10820] BTRFS info (device loop8): using free space tree [ 402.474237][ T127] asix 10-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 402.533476][ T127] asix: probe of 10-1:0.34 failed with error -71 [ 402.564692][T10820] BTRFS info (device loop8): enabling ssd optimizations [ 402.592182][ T127] usb 10-1: USB disconnect, device number 2 [ 402.702597][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 402.702612][ T26] audit: type=1800 audit(1785440587.056:87): pid=10820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2197" name="file1" dev="loop8" ino=260 res=0 errno=0 [ 403.251974][T10857] dummy_hcd dummy_hcd.0: remove, state 4 [ 403.295603][T10857] usb usb1: USB disconnect, device number 1 [ 403.380379][ T8429] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 403.460370][T10857] dummy_hcd dummy_hcd.0: stopped [ 403.485889][T10857] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 404.255785][ T4292] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 404.275218][ T4292] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 404.299806][ T4292] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 404.307436][ T4292] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 404.317253][ T4292] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 404.324436][ T4292] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 404.835931][T10825] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 404.847688][T10825] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 404.856204][T10825] CPU: 0 PID: 10825 Comm: syz.0.2199 Not tainted syzkaller #0 [ 404.863682][T10825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 404.873745][T10825] RIP: 0010:set_link_state+0x27/0x11d0 [ 404.879217][T10825] Code: ff ff 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 50 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 60 7c 02 fb 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 0b a9 53 fb 4d 8b 26 4c 89 74 24 10 [ 404.898828][T10825] RSP: 0018:ffffc90003de7640 EFLAGS: 00010046 [ 404.904896][T10825] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88802a955a00 [ 404.912874][T10825] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 404.920847][T10825] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 404.928841][T10825] R10: dffffc0000000000 R11: fffff520007bceb4 R12: 0000000000000a02 [ 404.936815][T10825] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 404.944787][T10825] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 404.953720][T10825] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 404.960329][T10825] CR2: 00007f01c8d5da08 CR3: 00000000485f6000 CR4: 00000000003506f0 [ 404.968316][T10825] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 404.976284][T10825] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 404.984284][T10825] Call Trace: [ 404.987564][T10825] [ 404.990497][T10825] ? cancel_work_sync+0x20/0x20 [ 404.995351][T10825] ? mutex_lock_nested+0x10/0x10 [ 405.000296][T10825] dummy_pullup+0xbd/0x120 [ 405.004824][T10825] ? dummy_set_selfpowered+0x150/0x150 [ 405.010293][T10825] usb_gadget_disconnect_locked+0x123/0x4d0 [ 405.016199][T10825] gadget_unbind_driver+0xbe/0x3d0 [ 405.021321][T10825] ? gadget_bind_driver+0x760/0x760 [ 405.026524][T10825] device_release_driver_internal+0x47d/0x7c0 [ 405.032593][T10825] driver_detach+0x1ef/0x2d0 [ 405.037186][T10825] bus_remove_driver+0x11c/0x230 [ 405.042125][T10825] ? sysfs_remove_groups+0x8a/0xa0 [ 405.047249][T10825] usb_gadget_unregister_driver+0x4a/0x70 [ 405.052979][T10825] raw_release+0xd6/0x260 [ 405.057316][T10825] ? raw_open+0x510/0x510 [ 405.061674][T10825] __fput+0x20a/0x8b0 [ 405.065694][T10825] task_work_run+0x1d0/0x260 [ 405.070307][T10825] ? task_work_cancel+0x220/0x220 [ 405.075336][T10825] ? do_raw_spin_unlock+0x11d/0x230 [ 405.080553][T10825] do_exit+0x9d5/0x2570 [ 405.084717][T10825] ? put_task_struct+0x80/0x80 [ 405.089485][T10825] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 405.095489][T10825] ? lock_chain_count+0x20/0x20 [ 405.100349][T10825] ? _raw_spin_lock_irq+0xb7/0xf0 [ 405.105375][T10825] do_group_exit+0x229/0x2e0 [ 405.109986][T10825] ? lockdep_hardirqs_on+0x94/0x140 [ 405.115196][T10825] get_signal+0x1259/0x1340 [ 405.119710][T10825] ? tomoyo_path_number_perm+0x5a4/0x650 [ 405.125363][T10825] arch_do_signal_or_restart+0xc4/0x1310 [ 405.131004][T10825] ? get_sigframe_size+0x10/0x10 [ 405.135972][T10825] ? exit_to_user_mode_loop+0x3b/0x110 [ 405.141441][T10825] exit_to_user_mode_loop+0x70/0x110 [ 405.146737][T10825] exit_to_user_mode_prepare+0xee/0x180 [ 405.152286][T10825] syscall_exit_to_user_mode+0x16/0x40 [ 405.157742][T10825] do_syscall_64+0x58/0xa0 [ 405.162198][T10825] ? clear_bhb_loop+0x60/0xb0 [ 405.166898][T10825] ? clear_bhb_loop+0x60/0xb0 [ 405.171582][T10825] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.177486][T10825] RIP: 0033:0x7f67ecd9dcab [ 405.181912][T10825] Code: Unable to access opcode bytes at 0x7f67ecd9dc81. [ 405.188925][T10825] RSP: 002b:00007f67edd56f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 405.197425][T10825] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007f67ecd9dcab [ 405.205484][T10825] RDX: 00007f67edd57fd0 RSI: 0000000080085502 RDI: 0000000000000003 [ 405.213470][T10825] RBP: 00007f67edd57fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 405.221443][T10825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 405.229412][T10825] R13: 0000000800000000 R14: 0000000000000000 R15: 00007f67ece5386a [ 405.237390][T10825] [ 405.240433][T10825] Modules linked in: [ 405.244354][T10825] ---[ end trace 0000000000000000 ]--- [ 405.249804][T10825] RIP: 0010:set_link_state+0x27/0x11d0 [ 405.255311][T10825] Code: ff ff 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 50 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 60 7c 02 fb 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 0b a9 53 fb 4d 8b 26 4c 89 74 24 10 [ 405.274915][T10825] RSP: 0018:ffffc90003de7640 EFLAGS: 00010046 [ 405.281000][T10825] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88802a955a00 [ 405.288990][T10825] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 405.297049][T10825] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 405.305015][T10825] R10: dffffc0000000000 R11: fffff520007bceb4 R12: 0000000000000a02 [ 405.313000][T10825] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 405.320975][T10825] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 405.329902][T10825] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 405.336488][T10825] CR2: 00007f01c8d5da08 CR3: 00000000485f6000 CR4: 00000000003506f0 [ 405.344460][T10825] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 405.352424][T10825] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 405.360425][T10825] Kernel panic - not syncing: Fatal exception [ 405.366574][T10825] Kernel Offset: disabled [ 405.370900][T10825] Rebooting in 86400 seconds..