last executing test programs: 24m33.266055906s ago: executing program 32 (id=61): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="1c00238005001d00000000000500060009000000060010"], 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x4004) 24m18.840358635s ago: executing program 33 (id=104): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x84, 0x30, 0xb, 0x5, 0x0, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x84000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_MARK_MASK={0x8, 0x6, 0xfff}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x40) accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0xc00) setreuid(0xee01, 0xffffffffffffffff) 22m36.63823434s ago: executing program 34 (id=494): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f00000001c0)={0x20, 0xe, 0x6, "cf666f843e50"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 19m6.348894556s ago: executing program 35 (id=1422): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000600000000000000fcffffff180100002020752500000000002020207b1af8ff00000000bfa1000000000000070100000bffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_exit\x00', r0}, 0x18) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r1, 0x4) 18m29.936443837s ago: executing program 36 (id=1542): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 9m48.072958158s ago: executing program 9 (id=4676): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0xa, 0x1, 0x84) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1=0xe0000002, @dev={0xac, 0x14, 0x14, 0x35}, @private=0xa010101}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 9m47.684929853s ago: executing program 9 (id=4681): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2}) 9m47.207802396s ago: executing program 9 (id=4684): io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x0, 0x81000003, 0x0, 0xe2d8f2eb1d010935, 0x1, 0x7}, 0x9c) 9m46.696963657s ago: executing program 9 (id=4689): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nodioread_nolock}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x563, &(0x7f00000007c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3813009, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 9m45.792590335s ago: executing program 9 (id=4697): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) 9m45.087303257s ago: executing program 9 (id=4703): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090500000000fddbdf25021f00cb", @ANYRES32=r0, @ANYBLOB="080008100002000008000200ffffffff0800090006000000080009000000180008000200ac1414aa080009"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xed, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 9m43.83277751s ago: executing program 37 (id=4703): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090500000000fddbdf25021f00cb", @ANYRES32=r0, @ANYBLOB="080008100002000008000200ffffffff0800090006000000080009000000180008000200ac1414aa080009"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xed, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 7m43.347914815s ago: executing program 4 (id=5424): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x38, r1, 0x5, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x48051}, 0x10) 7m42.812487778s ago: executing program 4 (id=5429): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x2000, 0xb, 0xfefffffb, 0xfffffffc, 0x0, [{0xc, 0xfc, 0x8, '\x00', 0xb4}, {0x83, 0x9, 0x7, '\x00', 0x4b}, {0xf9, 0xe, 0x7, '\x00', 0xda}, {0x0, 0x5, 0x1, '\x00', 0x8}, {0x8, 0xd, 0x8}, {0x2, 0x5, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x90, 0x4, '\x00', 0xe9}, {0xe, 0x0, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x16, '\x00', 0x5}, {0x1, 0x9, 0x15, '\x00', 0x8}, {0x0, 0x3, 0x9b, '\x00', 0x7}, {0x1, 0xca, 0x80, '\x00', 0x4}, {0x3, 0xf1, 0x6, '\x00', 0xb2}, {0x8, 0x4, 0x0, '\x00', 0xfd}, {0x6, 0x0, 0x4, '\x00', 0x9}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xee, 0x2, 0x4, '\x00', 0xff}, {0xf, 0x41, 0x6, '\x00', 0x1}, {0x9, 0x3, 0x54, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x6}, {0xd, 0x40, 0x7, '\x00', 0x4}, {0x5, 0xfd, 0x7, '\x00', 0x2}, {0x5, 0x6, 0xfa, '\x00', 0x40}]}}) 7m42.025030608s ago: executing program 4 (id=5433): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x814) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xa86, 0x2) 7m41.457296418s ago: executing program 4 (id=5436): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x4010, &(0x7f0000000200)=ANY=[], 0xfe, 0x4db, &(0x7f0000000640)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@verity_on}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0, 0x0) 7m39.80050909s ago: executing program 4 (id=5443): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x0) 7m37.972718605s ago: executing program 4 (id=5450): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0) 7m35.481211739s ago: executing program 38 (id=5450): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0) 7m14.072935774s ago: executing program 8 (id=5560): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001480)=ANY=[@ANYBLOB="20000000210001"], 0x20}], 0x1}, 0x0) 7m13.644697218s ago: executing program 8 (id=5562): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x70bd27, 0x80000, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7ea}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffff800, 0x40, 0x3, 0x3, 0x80000000}, 0x3}}]}, {0x3}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7m13.107791057s ago: executing program 8 (id=5566): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r1, 0x401, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x34}}, 0x0) 7m12.499766796s ago: executing program 8 (id=5569): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='dyn']) 7m11.952949436s ago: executing program 8 (id=5573): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x26fe9}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, &(0x7f00000001c0)) 7m11.100017035s ago: executing program 8 (id=5579): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) close(r0) 7m8.98194335s ago: executing program 39 (id=5579): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) close(r0) 6m17.160234088s ago: executing program 3 (id=5938): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='numa_maps\x00') r1 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x4800) read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020) 6m16.399430672s ago: executing program 3 (id=5943): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010100}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x840) 6m15.520240136s ago: executing program 3 (id=5949): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x2, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) 6m15.195800015s ago: executing program 3 (id=5953): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f0000000680)={[{@noblock_validity}, {@dioread_lock}, {@nobh}, {@nojournal_checksum}, {@noquota}, {@usrjquota, 0x2e}, {@grpquota}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@jqfmt_vfsv0}, {@noload}], [], 0x2c}, 0x1, 0x464, &(0x7f0000000a40)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0xc0) 6m14.778560875s ago: executing program 3 (id=5955): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000240)=0x52, 0x4) 6m13.879637272s ago: executing program 3 (id=5961): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') 6m12.26776287s ago: executing program 40 (id=5961): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') 5m48.941692175s ago: executing program 6 (id=6079): r0 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x2, 0x156}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x3, 0x0, 0x1, 0x8, 0x1}) io_uring_enter(r0, 0x242f, 0x11f7, 0x28, 0x0, 0x0) io_uring_enter(r0, 0x26c8, 0xe000000, 0x1, 0x0, 0x10) 5m48.158010626s ago: executing program 6 (id=6082): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000d40)=ANY=[@ANYBLOB="a19c84c7205602b8"]}]}) r0 = socket(0x40000000015, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x38, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2001, 0x0) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x7, 0x3, 0x3, 0x0, 0x100, 0x5}, &(0x7f00000000c0)={0x1d, 0xfffffffffffffffe, 0x40, 0x7eff, 0x0, 0x1, 0x0, 0x8}, 0x0, 0x0, 0x0) 5m47.012052496s ago: executing program 6 (id=6088): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5m46.440089416s ago: executing program 6 (id=6092): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000000140)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@resuid}, {@acl}, {@norecovery}, {@dioread_nolock}, {@nodioread_nolock}, {@stripe={'stripe', 0x3d, 0x1000}}]}, 0x1, 0x450, &(0x7f0000000440)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa000, 0x0) getdents64(r0, &(0x7f00000009c0)=""/4096, 0x1000) 5m45.288621169s ago: executing program 6 (id=6100): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x40000, 0x6) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x100, 0x40) close(0x3) open_by_handle_at(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="100000000200000019"], 0x0) pread64(r0, &(0x7f0000000040)=""/152, 0x98, 0x7) 5m41.787137541s ago: executing program 6 (id=6125): syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0044159743df776a5de9392543da7d297b3deae8b326638cb46d4c74bd30cf4c94c7e251067023e243f8d967e2270383e26ae50c5cfca55819a5c9ab673de387257ee7293e3a0f89bf5749524a682fbb1b2a6b488b85a08f0b61b7c2b3d5ae1cd05d6382472c098b819f9f39b40a4587487d54ecb34693f61d0e8106d0df34b7a64c60ff172abce8d3d2fafec09f10c8870a0b45ad8fe3ebc1b187543dafe19dd449c83b56cc140c1a9e886933de8c8d8ac691eb7d89cc44f4be15619430700d0d7dc47251f3dba70514d9f893d226d5592bde69a072cef8864b865bd0523db51ea1d24e88ceed209e1ee78082c8aef9fa2761d53751d6e9d1f8b4d1c994225565afdc241b000a2bc974ee9d33d08ab2e05c03ee4e9e83746a3139936161b664a5013cb4f190ee4adb500ea6220e5b22476c0a72a6e464150fc398fcfeaf67fb68330725beced0cba00199d2b58e60c54569935ea31ffc00b7963f3d0632aec3cf0e1e05b6736835fa45e7d68c39f7df20d557035b9494454cd63237941410c640a44707fbfaae6936a32814e3898032383bef6cd2c210cb02baa27813178683393dd560954ac0f54c8c6b2dc82c01c623bfac1318345225e83d02b14a4781970ab8fe1db6edab8acd6420db3026280a093761aea8aba7ab7dec22907eb12960c0cdad2d690a3929c1d75a6a1da4ce37cb3e9e5f070f93b5b8bb61953d5062416746e9dc2eb17d748faa6e74ed5c5f20376ad97543819fd1f15b82c928c4aab901fdd76e664b8def059f6ec747477cf920ad7cb88ec64a2495a79873181b99893bb80f91"], 0xf, 0xa02, &(0x7f0000001ec0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) read$FUSE(r0, &(0x7f0000002900)={0x2020}, 0xfffffff8) 5m39.434147432s ago: executing program 41 (id=6125): syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xf, 0xa02, &(0x7f0000001ec0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) read$FUSE(r0, &(0x7f0000002900)={0x2020}, 0xfffffff8) 41.794296284s ago: executing program 5 (id=8074): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000540)='./file1\x00', 0xa00010, &(0x7f0000000ac0)=ANY=[@ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812", @ANYRES16, @ANYRESOCT, @ANYRES64=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRESHEX], 0xd, 0x643, &(0x7f0000001380)="$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") syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000018, &(0x7f00000013c0)=ANY=[], 0xf, 0x6b4, &(0x7f00000000c0)="$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") syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') 40.940341981s ago: executing program 5 (id=8077): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x6c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 40.244895671s ago: executing program 5 (id=8081): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7f, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_create(0x9) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f01f}) 39.768058556s ago: executing program 5 (id=8084): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x400000004a882, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 39.198720438s ago: executing program 5 (id=8088): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {}, {@nojournal_checksum}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}]}, 0xfd, 0x574, &(0x7f0000000cc0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0xfffffffffffffff4, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 38.446954605s ago: executing program 5 (id=8096): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={r2}, &(0x7f0000000040)=0x8) 22.159433775s ago: executing program 42 (id=8096): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={r2}, &(0x7f0000000040)=0x8) 4.298416716s ago: executing program 2 (id=8273): unshare(0x4020400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 3.691907232s ago: executing program 2 (id=8275): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000080)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f00000010c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0xf0) getsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x1fff8, 0x100000002}) 3.678064543s ago: executing program 7 (id=8276): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3.381034818s ago: executing program 1 (id=8277): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="1307", 0x2}], 0x1}, 0x4051) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) sendmsg$inet(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000012c0)="f9", 0x1}], 0x1}, 0x48844) 3.14707855s ago: executing program 0 (id=8279): r0 = socket$inet6(0xa, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x40, &(0x7f00000004c0)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=r2, @ANYBLOB="2c63726561746f723dbd3d66f12c63726561746f723d64eb8ba92c6e6f6465636f6d706f73652c756d61736b3d3030303030303030303030303030303030303030303032000000003d", @ANYRESHEX=r1, @ANYRESOCT], 0x3, 0x6a4, &(0x7f0000001b40)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 3.1046078s ago: executing program 7 (id=8280): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}]}, 0x48}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.872973767s ago: executing program 2 (id=8281): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r1) 2.246582856s ago: executing program 7 (id=8282): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x10}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1a000000000000611098000000000004"], 0x0, 0xa}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) 2.226384731s ago: executing program 2 (id=8283): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756965742c646f74732c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d72656c617865642c646f733178666c6f7070792c6e66732c646f74732c6e6f646f74732c0052bbde30ad1b84bbd4c68ac5df60afc617ca0829fb9a153080d7fe1db0f2c220c8"], 0x1, 0x255, &(0x7f0000000580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000003040)={0x8, {"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", 0x1000}}, 0xd31) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000006c0)='.\x00', 0x1a4243c, &(0x7f0000000580)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRES8, @ANYRESOCT, @ANYBLOB="b1f1563f8cf9b3df43707e277e3870d9bbeca08c7c9e5ebdd62801631c9f6ff697c8ea4da0047f1529a0c7", @ANYRESOCT, @ANYRESDEC, @ANYRES8, @ANYRES64, @ANYRES8], 0x0, 0x0, &(0x7f0000000080)) 2.205061407s ago: executing program 1 (id=8284): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x9, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @remote, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x8}}}}}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x40000040, 0x0, 0x0) 2.107432939s ago: executing program 0 (id=8285): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000000, 0xd50, 0x0, &(0x7f00000002c0)="fef351f6b11f421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.889346346s ago: executing program 7 (id=8286): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4) getsockopt(r0, 0x29, 0x1d, 0x0, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x160) 1.827765981s ago: executing program 1 (id=8287): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x0, 0xd, 0x7, 0xffffffff, 0x20, "01000000000e65300000001e00000200", 0x5}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/68, 0x44}], 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x6) 1.540564173s ago: executing program 0 (id=8288): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000780)='.\x00', 0x20007f6) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8001, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4) 1.47223472s ago: executing program 2 (id=8289): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000003c0)={r2, 0x3}, &(0x7f0000000580)=0x8) 1.282408483s ago: executing program 1 (id=8290): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x1d, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\t\n'], 0xa) 1.041514248s ago: executing program 7 (id=8291): statx(0xffffffffffffff9c, 0x0, 0x2000, 0x800, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000200)={[{@nodots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@fat=@quiet}, {@dots}, {@dots}, {@fat=@showexec}, {@dots}, {@dots}, {@dots}, {@fat=@nfs}, {@nodots}, {@fat=@gid={'gid', 0x3d, r0}}, {@fat=@errors_continue}, {@nodots}, {@fat=@check_normal}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}]}, 0xfd, 0x1bf, &(0x7f0000000680)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 951.894495ms ago: executing program 0 (id=8292): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xc5) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 779.846313ms ago: executing program 1 (id=8293): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000003e00)=""/4093, 0xffd}], 0x1}, 0x101}], 0x1, 0x40000020, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c0043001700000000000000fd11358084a64c4852ce59bc40427a1582ec7e9547999b7be18d57542e2971a2513a2b81d76f6ad9a7ceda50a48bcd2786f06ffd040009808cb297f99a3664c1952c24e42f729fc43262610d3652cef336adc19ee56c82ca3e707eb78d0148b668305d97f7ec33db8e3e9dc65e7c274e7bc24ed3a1184621df12504c07b14a737fcc8ef9009b890c6caeba9729fbfeca6b12211869a2716ea36f7399a7bd7c0f2377c94cfe62f2bcbff380ee256a7c3ec69110da7f9a6d89254f4ec5b539cbc7303ccdc6a8619996b6263165fa024adff951d4d8d2d6587b80d1c30440b0817f52c341360dc5df31f0b5639a5b96e26938d5bc55ea7bef35a4cf126c9183ac38fb34b319abe5f06082c1e8ce526cdb3066d523d12deb8697d8299c1f5edf46514913c4648f2fd1816a58beffaab5040d72e67ac75075da4c92fb2c60d17ee03c6cc004ceb9ef5abe60fe300faa63e19f5eefa54eaed41a4fa62c6a56be9ee7f691162545a8fd930f45517df0436b69efc7d5ac19e930a92ef86472205f87a61dd95dc35a6f258c8c7958a8175e8cd8dbf01f82cca2359aef93e3eb117014c231d67bc6da5248aeac9543ff47663c01581b945dd8507adb1689ac8244b010e66087ffd4c0b930f8ffc7408402d8ce7db0cfd9830cdd85aab9711919563d56d245801c371f040af5b8169de3c6fea317612f4c2317cc526e8ea8c8c1e953c791b20a1aaf4c62f6c906efa621b14e7d3e285aa55b7ef96e4feb652df2cf36e76132f396cedb9db9cf15eeaea7b13e1027ea5d1f5490e6688884e1f1df2a9853024e581c9ae87c12991f4f89aabc4020df65ac4683de032022e2d805273b2d6a62e841a74be316f2152002b87680d37f6b7faf2b24be1ebc0d7a95fc330a592d044fd05ed37465086402a1335ce622bc8526afbc6aad8bb1bc0b63bf46ff0496a8861f0ee2c990adaf568144fb15eb4492e049f762fe735ddf5d283433a9d2fb9faff70364046ed11752282c816611250cc1e14272470c12fbd96a06bd3b873da306810ed786bcdb8983bcc7acf941b819c4f59b132e6c81639b46b8ba630ae11e4751458aeaa9dc2cee291652e638a28d47ecd5e2df8830bc7267883dd7d77fe2392aa484b6dec167a1bf3e00c927b26832f5f8d67f5d1c0c935624bc6c917001dd4df77aea734fa05d4037db5b19cef7d161c5ad1e95b40dcdd369358fada0a2a04d7a99f0b93386f706aa3213c1c4428b8461062b29683b29e56748a65154e9c33eafd6dac22c2ef4f55c4ca8e4a6c0007b31305254a27425066fec4b41e11c8357bf67ce8e2a0facb1b26e1b19543cd5f075cc81b0873ec57bc7edf9a9fb8ae35d3a3ace676225b40a421e645301f304221763ecab8baa7515839ca7f29e9e646af9a1ff1fe8031b5b36a8f2d6d70ae3f514f1c2972df04bb4924373d39301c8708bdf1376d3be64f3614c183c5b5cf95edaf20d2e59ec124eb11526a7f2d28546b31566e161ff39233762c0e4b505f246454f3e27f8dbbedf1610464944ea873600ed8e95fa00d291fa3b1d9cb257ca29710f473ce1de492602202f23ab8102ec101110145fbafc73f41a830decc8fc46a9f8925e091fec25f87a69fa23f63621533da3e4f97d2ad78c1886b6783e46e2923fbc424bb010e5d586e5fce6f5191c161aac64eec1c3afb12b2c6b2047c9c9db9d6beeb10de8b1d8ed9b857c3c7e7c3b59e374c6a7407ef247c178147b3a0f82f8588b74ddbab03d4c78915750c463f68bc8f40f8e4ba87169bf6377c54d21d5a62cb0dcf466daa235ad887f5d2af2d8dd827047847190afa82fb866744bbfd38952705530e699270b1f13dc0b53fdc2de61de45ab153fd017274bb3b4b4c8b9fa2279dc3a6940e072e9fe87bc86011dcc0c1ab07b97868b0f51ff6208df234a2f5a10f896478a4c5d46ffbafaa810b45bb82368d0085f78e959d1b0f26dd7cff09a40d0d12285b1ccf203ef25f3a1cb5fd753c6aadf2a26c1a21b6355ec2ef8d29ac0f08cd44e94f9a9f6b8558c3e5d7db20ce3a8f147c0309fb3f4b856dec934af6072bc942de440d8cd0ec1944362cb579f75a91393e3ebaf5fc807c0df8367834bb0f08ca7c698991662d8b9e9e55dba84b968d316fce6311e5257ccf69348e06a693595bb94bdaba080fb1c0c88a33557c088a51948bd4f01c5544e9fbf5a8e09ae0dff397ea8522a4349d185f9a2f0b595093b29b88b5e2007e12e6b60ae8aed88bbc198dc7709c5e9181ead6ab91a0b7df795a0e9d349c1096bb29bf2e0643a0afc2f2ac9ffe3e5002a796b025da52dce5d89a8d76499a25bb4588202c18a12107b1fb9759f904ca3363921ed36d1fb3f0af559e771b0a708e26b39f00a87cf2e8489f53a6c0ae606ea8ced1b876895c1c21ece89b1955c4d827ffd4da4b994eb2dcff368ef534b34f6a566efd9480f1b6e308947684dc4960a083d3cf52960be62cf0c0d4ce6d256ff28141c274b7dc8dac819c04d4f1155a8bb4c29a2a00535ca4ea89ce1e218146b73e2103fadcf2c2de446e6c128cbe749c5f7aaf392e764a9397e06e443cb3e44d08af9a2ce55b0ef8cf1803f2167a67d59547d522d65934fba7875301db570cc4424f629a39a7bd36333029bdb818a3739f454966af6ffe4d237d6965cc81f335d8a787450abbe7c8ddfd2f8b749594cea4df455cdfb5eb5f7b0b4f67875adafb11b61639fd0be25bbf0d19cea430058fff31b0fb0ae36a84ad6ccd17038638fe38905fc24384bc60a15058c6b6defe60ed71c7697612b084d6a2cd0b15056f593335906c82265f38c47dcc1c1043da1ce74578a1919e03df4e155396b3dea89acd39d1449f00a9e8cf5ceb0684928432d21e6b7e83c099d285c126a430767e1e718c9dcaf83ae26120ed83c95d7d16a493d16c0a01f8bc05ac987bf8e378d7c8d28c201930890773c1d6ab6440cd3ff2454f17ced7e463d9753891a56833f5f673eb138d7e7ce6666b65ea74f6f0d3cc2d86dd7940ccf108ef7f0ad3c5c7da744c1988aee2a7fa5fd1bf52698221c6ed21de5077effb9bdb50b882523fa932bd1e3efe50b630599dfaf3b13167f57db1a12caeb51278b7fbd9768da62d45b1f056aac361b2da6cc4933a9159379a4152ad66a69362e347af0d414e8716c9869511034c2a366bfb5b125cfc5720c05af7895f4e318d89e85ad02e76c0d643b77c3bbab28865823d696dc5306e1731f56c29ddd25e378749493c762d9966e34b53049a84f4da9ff286bb20ea8c6918ae6df35bd82719ab07d197afe2c87cace76d139175fcfbb8ebc49a131d484244295baca1dec61526a5f844a6950899a0bfc13417b3df9b6580e5657a0d92bab2cfaab91e1513e0cb11c0f029841bf63da801ed3171aa7c039b45675b9197924a5429feeb52a7152d4b82304ff39f2d666edf8ccbfb35d2eee45af364ba98cc978ec7f4f361c4a9fb2bf1155e059c9874c9b00113b6d85ccfbeeb3bf33435ced0c94135a00162d1a1279041fca05ddb2ac02a0a34bbb15f5aac25ac3cdcc32cbb882b6456602bd011cb665661b483b20bcb6cadaf993b3d6fe59757e9fd2b00ebc3b6adfca5bd7bc016eac63adc33f450303dfc89a025d2e3e7fa99854cd468654428c4dbf40b078b24c939882bff81d871d19383b86a5d78e3dc5f53bbf31c56c9ceb28c43179b0f9829d9fdb9c126eaeee6858de67dc6cf0f75552fad19ab1dd381dfaf963790353816b68c1e4e0938d1312746e90d5ed32c32be83f2e1890ce24bd3594b8393280937ddd35475106a0336a61ef483202ca11d58dbb4345c5d68b41e949ad32a36b86983950a12dcb29e02b31880d041805197670fc30c8d6c30f736de8cf7955dd8ae6a46d6fa0d9955056abe5ef41acc00f94f9466327fa207f1f85aac9baceb25fcde2e8f1c6c5f68a66a62a7165c29afb66a17932c892fcd6c894c54abb3f56bbf1dd5901a60b2dc2a51615e6897e894aa15678403ce35a2dd94a31d03092a92e54be81c53adfefa653c00f63a76f2d6471625df5ccfdccffb30e1c545e435c3b3fad6249246d3c2f5796514a899d87905ef0a5bd1032c4718b467dc2df510183beb72b9140cf670e82c649460d782cbf33791088756a796c48d0f7df2b856a4b3e2914c7f8e707a05ed5956473c8eeca35aeb2b96c939b5bfd874e519b9d624e5b3fde44de50c1e9ccbd2642638ab2c1de38127c4c59c5d5710d82c619b634151b0fb1bb94a357e2e38b888f8fb30934009fbee693451b343f0cd656411565e4149433383a8ee7194bdf3907f8a9136296188c74bb3fb276da9cc275101882ac5046fa42b9142efce704014b17b72d0a7b2421b5efb3a0411da62d42019bf78d6a6c5c56f3e8e5fbd0240547c6db5404f1218ab391f361a5ecb9c2cd64c32693ca8dab991688b496daada1d02b5d9cd1b9df7f1258e1a9a70e22f229078b0b33f30cb3e4021335a4392548dbf11dd0ab1c138571179412f35b4106f9bfc0c5bf57b63909a5fd8892a584569cb7b9c330417ae9468d6583f2c923060e156d4a8c69114ac5281b8104b3dcee2abe8b94b7a0551079f6bc89dfe3c521a046b70b1d2a9f1df20fda6dd84adf9e57b34b795ffd5b3dca4c62c815177744c2c21046861135e70fed347985962f5409580c263a72cfd878fe10192902948c6bab642fab9be6b9b93fe41fdea762a9c78d1631f81c4d76c3187d23a26ad0d37ba1f44114afe994c18f8404f7ed02956eeec1ab8c87b0cf8450146705817beec015783b22e6d9125179887dc74b162b2890ffbf8c3443bf732c125f7d2ba0f75d0f81198eaf12e1251e85a34ebd23087ba790d6ad8a6c4cf0c85d410fef6bf6796e9a4c25699dd8bf51063b65b46aa5ad69ed243722b5ac050672fd3ba0c2d8b5e013f403dda3c30db4ca94da891a6d90ac9cfda97c0fce5bf7ed8c0d4b309ece7bbf0f536fcce750495dca0ba52c0c2e1972763f973a28925d8846b6a941bfc9dd1e96b889112336b1530327eaaddcb78ab1db7c35c4ef54a2888f770de481f0a6ba5b827a5013b6c9c0f9e6e629d7f0f65d260ee4ad62061305ba91ec2a29c27dc22b4d07cd090a66705f062ef25f632eaa2842b36dcf2807abb94403c458d78453a5bf20bae90912372db3e4ba83e66928dad13a734ecd912cff58640e8c3b4012ab0fd32f8679875b0f46812deb0f143d8c94b2d0c8d0d9bfc7c1f5eb6609179e1e4119e6c240d8ad581233f4b2bc55c39f3e46f4516ab2b2ac271f773809718f80efc4cd4fc28ebb09d7e8429203127de4aee25cb61bef5d71a3fd7b43741bb8d0f0b530f4d06e2c92c632930c8fec4c6a2b66f43efee55b50254dac26cbefde31cef6d044ce90e61bec3affde7682a14fd8327358b09b3445cc4af0bcf125d43d458d8089176f238d4253fc0e3f7b3b72fbd88bca0973539fdcab07ca1da7027a50ae01a071e080dd04718a82dc0ef72228a84598556d2f85777e72b4227475313a779b7cbc5c80314f7358cdb1e4ab8e178ef933e7192c60304770262e4b99d476b8f42c8eb2b10ba6ba0dd51a52710ac75d49f29ff6abfd791755a88c0456513b7e47915855ddb6b5c38b5955cac22aa6f2e96a135540b2da8d22b4c83590e585185946caf2307af83e4a9fc809301cb53284407cd5ed383477e0a0a1852b0b94c1c382d5a192ac2fc705f7eb05f2655a5c0220bc2eb03b8132290d7a2a3871d4c93fb48f0521c10590f35a90b813155483a2d64a408d21bcae12b5bf8977a42c7cf6810d7b300fcfe7b780688d227dba545cdb8104fc31d873f2ca8afe8a8ee1c8bfdc13663d5f4509b836e3901e41128bd694fef92737864630545ffba4afac3acc7b49a870566f245a2a3ed34ff266ff66ef1f45ecf83f33f548746c3f2d0868a2b0fda71312475a1e601c8b71a7b9231afa40936c42f7d1e3d053dc7dbf12956654590f55b12c6c77b9d7372d9805a84d6f99040e21b9791c62dda870814a60dbf27c4a82f3979410091ef1106220f96627d8f7f189de07ca85e0dab440efe5b8fdc8d7e434ba6162f0b5df11c0bd6489945c946953a21a2d0f0e8924337f401f42f96a87c26f76e4e6623eca76b8c81aa96741b248e07cc8fccb203903da21d364640549640aff4016c83c6e2586893212706aedd30c4b2b2c9c205d1332ea492d4aad97c2646c8082b6d769b5f5d606bec26fb762adf1308325c1c2ec38e2cfa424e41513718625a7d7004a7de11f937d177eee3da060e04b4f1311957fe7897e5f43d32f4c3b4234c3afdf3b069432ac235046efbe4e243c071f06c155bbc48cdac07171b38253c0de4afea667572ebbc28894cd2f9e21992d4d696710a0250acc1a355d951146cd46883787104494c20ca9abb33b07bb3e54b8c5861a1425f4d989029844ecdde4d851e57c9d39d757f473d55e4b0f0aeff40b304d3e04f6e2e9394b1e172d7482dad0b3ca2568aa3297391d614f912a08003300f50000000400238000000008004f00", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) 657.043947ms ago: executing program 7 (id=8294): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) pwrite64(r0, &(0x7f0000000880)='u', 0x1, 0x83) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x96) 417.577662ms ago: executing program 0 (id=8295): bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x10000, @dev={0xfe, 0x80, '\x00', 0x21}, 0x81}, 0x1c) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x3}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x1}, 0x8) 287.814046ms ago: executing program 1 (id=8296): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000042f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 12.47831ms ago: executing program 2 (id=8297): add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)="e9", 0x1}], 0x1, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 0s ago: executing program 0 (id=8298): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x881) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0, 0x9}, 0x8) kernel console output (not intermixed with test programs): leftover after parsing attributes in process `syz.1.6485'. [ 1444.399483][T21851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6485'. [ 1445.970887][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1445.970973][ T30] audit: type=1326 audit(2000000167.595:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21875 comm="syz.0.6496" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x200000 [ 1447.403415][T21896] netlink: 'syz.5.6505': attribute type 11 has an invalid length. [ 1447.411949][T21896] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6505'. [ 1448.606788][T21908] input: syz0 as /devices/virtual/input/input57 [ 1448.989231][T21910] loop2: detected capacity change from 0 to 2048 [ 1449.050740][T21910] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1449.189451][T21910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1449.322460][ T30] audit: type=1800 audit(2000000170.729:336): pid=21919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.6513" name="nullb0" dev="tmpfs" ino=534 res=0 errno=0 [ 1449.569765][T21923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6516'. [ 1449.580376][T21923] netlink: 'syz.5.6516': attribute type 5 has an invalid length. [ 1449.588377][T21923] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6516'. [ 1449.639558][ T3717] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1449.661503][T20990] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1449.690840][ T3717] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1449.730148][ T3717] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1449.776060][ T3717] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1450.162667][T21930] loop5: detected capacity change from 0 to 64 [ 1450.180603][T21930] hfs: Bad value for 'umask' [ 1450.707008][T21941] loop1: detected capacity change from 0 to 128 [ 1450.725502][T21938] loop2: detected capacity change from 0 to 1024 [ 1450.805708][T21942] netlink: 'syz.5.6522': attribute type 4 has an invalid length. [ 1450.923611][T21938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1451.442106][T20990] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1451.487814][ T5878] hid-generic 0008:0006:0007.001A: unknown main item tag 0x0 [ 1451.496745][ T5878] hid-generic 0008:0006:0007.001A: unknown main item tag 0x0 [ 1451.505050][ T5878] hid-generic 0008:0006:0007.001A: unknown main item tag 0x0 [ 1451.514056][ T5878] hid-generic 0008:0006:0007.001A: unknown main item tag 0x0 [ 1451.521753][ T5878] hid-generic 0008:0006:0007.001A: unknown main item tag 0x0 [ 1451.529519][ T5878] hid-generic 0008:0006:0007.001A: unknown main item tag 0x0 [ 1451.537390][ T5878] hid-generic 0008:0006:0007.001A: unknown main item tag 0x0 [ 1451.545042][ T5878] hid-generic 0008:0006:0007.001A: unknown main item tag 0x0 [ 1451.552955][ T5878] hid-generic 0008:0006:0007.001A: unknown main item tag 0x0 [ 1451.560775][ T5878] hid-generic 0008:0006:0007.001A: unknown main item tag 0x0 [ 1451.640295][T21953] tap0: tun_chr_ioctl cmd 1074025675 [ 1451.646279][T21953] tap0: persist enabled [ 1451.652550][T21953] tap0: tun_chr_ioctl cmd 1074025675 [ 1451.658172][T21953] tap0: persist disabled [ 1451.745315][ T5878] hid-generic 0008:0006:0007.001A: hidraw0: HID v0.0b Device [syz1] on syz1 [ 1452.155906][T21960] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6530'. [ 1452.789659][T21970] input: syz1 as /devices/virtual/input/input58 [ 1455.878774][T22020] loop5: detected capacity change from 0 to 1764 [ 1456.093411][T22026] input: syz1 as /devices/virtual/input/input59 [ 1456.641091][T22036] loop2: detected capacity change from 0 to 512 [ 1456.794226][T22036] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.6564: casefold flag without casefold feature [ 1456.859619][T22036] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.6564: couldn't read orphan inode 15 (err -117) [ 1456.882196][T22036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1457.225253][T20990] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1457.440066][T22048] loop5: detected capacity change from 0 to 512 [ 1457.510545][T22048] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.6570: casefold flag without casefold feature [ 1457.570348][T22048] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.6570: couldn't read orphan inode 15 (err -117) [ 1457.647142][T22048] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1457.807234][T22048] syz.5.6570 (pid 22048) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1457.989502][T22060] loop2: detected capacity change from 0 to 256 [ 1458.069826][T22060] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1458.081529][T22060] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1458.103427][T19683] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1458.193919][T22060] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1459.016814][T22073] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6577'. [ 1459.440683][T22079] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6580'. [ 1459.450126][T22079] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6580'. [ 1461.142245][T22106] batadv_slave_1: entered promiscuous mode [ 1461.154872][T22106] veth0: entered promiscuous mode [ 1461.166209][T22105] veth0: left promiscuous mode [ 1461.172298][T22105] batadv_slave_1: left promiscuous mode [ 1462.354199][ T5878] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1462.422950][T22129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6601'. [ 1462.528113][ T5878] usb 6-1: Using ep0 maxpacket: 8 [ 1462.615051][ T5878] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1462.624633][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.633592][ T5878] usb 6-1: Product: syz [ 1462.638884][ T5878] usb 6-1: Manufacturer: syz [ 1462.644049][ T5878] usb 6-1: SerialNumber: syz [ 1462.731956][ T5878] usb 6-1: config 0 descriptor?? [ 1463.724951][ T5878] usb read operation failed. (-71) [ 1463.776793][ T5878] usb write operation failed. (-71) [ 1463.803384][ T5878] usb write operation failed. (-71) [ 1463.834037][ T5878] usb write operation failed. (-71) [ 1463.840960][ T5878] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 1463.859826][ T5878] usb 6-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 1463.871309][ T5878] usb 6-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 1466.744336][T22191] loop1: detected capacity change from 0 to 256 [ 1467.028303][T22195] netlink: 536 bytes leftover after parsing attributes in process `syz.0.6630'. [ 1467.038269][T22195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6630'. [ 1467.708602][T22209] loop1: detected capacity change from 0 to 512 [ 1467.739936][T22202] loop5: detected capacity change from 0 to 2048 [ 1467.768821][T22202] EXT4-fs: Ignoring removed orlov option [ 1467.796916][T22209] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.6636: casefold flag without casefold feature [ 1467.829802][T22209] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.6636: couldn't read orphan inode 15 (err -117) [ 1467.848539][T22209] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1467.989154][T22202] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1468.003165][T22202] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1468.257268][T22220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6637'. [ 1468.284929][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1468.352997][T22220] tipc: Started in network mode [ 1468.358306][T22220] tipc: Node identity ac14140f, cluster identity 4711 [ 1468.366287][T22220] tipc: New replicast peer: 255.255.255.255 [ 1468.375554][T22220] tipc: Enabled bearer , priority 10 [ 1468.427951][T19683] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1468.462362][T22221] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6638'. [ 1468.753289][T22225] bpq0: entered allmulticast mode [ 1468.904463][T22229] loop2: detected capacity change from 0 to 8 [ 1469.442586][T20963] tipc: Node number set to 2886997007 [ 1471.082543][T22258] Process accounting resumed [ 1472.894050][T22279] overlayfs: failed to clone lowerpath [ 1473.302273][T22286] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1473.309143][T22286] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1473.317364][T22286] vhci_hcd vhci_hcd.0: Device attached [ 1473.321188][T22284] loop1: detected capacity change from 0 to 512 [ 1473.357476][T22287] vhci_hcd: connection closed [ 1473.367886][T14583] vhci_hcd: stop threads [ 1473.377832][T14583] vhci_hcd: release socket [ 1473.382417][T14583] vhci_hcd: disconnect device [ 1473.422118][T22284] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1473.516984][T22284] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.6667: invalid block [ 1473.588844][T22284] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.6667: invalid indirect mapped block 4294967295 (level 1) [ 1473.611790][T22284] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.6667: invalid indirect mapped block 4294967295 (level 1) [ 1473.665740][T22284] EXT4-fs (loop1): 2 truncates cleaned up [ 1473.673727][T22284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1474.015904][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1474.661080][T22306] veth0: entered promiscuous mode [ 1474.701172][T22305] veth0: left promiscuous mode [ 1477.769627][T22346] loop2: detected capacity change from 0 to 4096 [ 1478.090983][ T30] audit: type=1800 audit(2000000197.640:337): pid=22346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6695" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 1479.146795][ T30] audit: type=1326 audit(2000000198.622:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22379 comm="syz.2.6709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1479.207674][ T30] audit: type=1326 audit(2000000198.660:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22379 comm="syz.2.6709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=444 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1479.230871][ T30] audit: type=1326 audit(2000000198.660:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22379 comm="syz.2.6709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1479.253524][ T30] audit: type=1326 audit(2000000198.660:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22379 comm="syz.2.6709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1479.277691][ T30] audit: type=1326 audit(2000000198.660:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22379 comm="syz.2.6709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1479.300407][ T30] audit: type=1326 audit(2000000198.660:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22379 comm="syz.2.6709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=445 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1479.323022][ T30] audit: type=1326 audit(2000000198.660:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22379 comm="syz.2.6709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1479.703457][T22385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6711'. [ 1480.539290][ T30] audit: type=1326 audit(2000000199.923:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22401 comm="syz.1.6719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1480.626802][ T30] audit: type=1326 audit(2000000200.016:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22401 comm="syz.1.6719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1480.659378][T22399] all (unregistering): Released all slaves [ 1481.270936][T22416] tunl0: Caught tx_queue_len zero misconfig [ 1481.397563][T22417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6726'. [ 1483.717333][T22462] input: syz0 as /devices/virtual/input/input60 [ 1485.241756][T22477] loop2: detected capacity change from 0 to 4096 [ 1485.390888][T22477] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1485.619379][T20990] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1485.851276][ T11] IPVS: starting estimator thread 0... [ 1485.876432][T22500] tipc: Started in network mode [ 1485.881943][T22500] tipc: Node identity ac1414aa, cluster identity 4711 [ 1485.892420][T22500] tipc: Enabled bearer , priority 10 [ 1485.959386][T22501] IPVS: using max 240 ests per chain, 12000 per kthread [ 1486.365650][ T11] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1486.570176][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 1486.618515][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1486.630161][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1486.640982][ T11] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1486.654573][ T11] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1486.663970][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.700233][ T11] usb 3-1: config 0 descriptor?? [ 1487.081791][T16456] tipc: Node number set to 2886997162 [ 1487.184120][T22514] loop1: detected capacity change from 0 to 4096 [ 1487.191359][ T11] hid_parser_main: 43 callbacks suppressed [ 1487.191467][ T11] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 1487.205285][ T11] microsoft 0003:045E:07DA.001B: ignoring exceeding usage max [ 1487.212178][T22514] overlayfs: failed lookup in lower (newroot/1342, name='file0', err=-40): overlapping layers [ 1487.243208][ T11] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 1487.250807][ T11] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 1487.259082][ T11] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 1487.272360][ T11] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 1487.281217][ T11] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 1487.288900][ T11] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 1487.296923][ T11] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 1487.304458][ T11] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 1487.312111][ T11] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 1487.328611][T22514] overlayfs: failed lookup in lower (newroot/1342, name='file0', err=-40): overlapping layers [ 1487.568616][ T11] microsoft 0003:045E:07DA.001B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1487.580848][ T11] microsoft 0003:045E:07DA.001B: no inputs found [ 1487.587577][ T11] microsoft 0003:045E:07DA.001B: could not initialize ff, continuing anyway [ 1487.764377][T22522] loop1: detected capacity change from 0 to 16 [ 1487.825595][ T11] usb 3-1: USB disconnect, device number 9 [ 1487.850552][T22522] erofs (device loop1): mounted with root inode @ nid 36. [ 1487.946400][T22522] erofs (device loop1): bogus dirent @ nid 36 [ 1488.400549][T22532] syzkaller1: entered promiscuous mode [ 1488.406373][T22532] syzkaller1: entered allmulticast mode [ 1488.774545][T22536] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6776'. [ 1489.244715][T22545] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.386495][T22545] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.547320][T22545] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.633901][T22545] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.812915][T14583] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.847316][T22556] loop2: detected capacity change from 0 to 512 [ 1489.867643][ T3683] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.884877][ T3683] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.940537][ T3683] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1492.809774][T22603] loop5: detected capacity change from 0 to 4096 [ 1492.945546][T22611] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1493.011055][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1493.011139][ T30] audit: type=1800 audit(2000000211.596:357): pid=22603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6807" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1493.271466][T16456] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1493.463439][T16456] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1493.476358][T16456] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1493.486894][T16456] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1493.496886][T16456] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.597905][T16456] usb 3-1: config 0 descriptor?? [ 1494.097762][T16456] hid_parser_main: 4 callbacks suppressed [ 1494.097874][T16456] hid-led 0003:0FC5:B080.001C: unknown main item tag 0x0 [ 1494.734226][T22639] batman_adv: batadv0: Adding interface: macvlan2 [ 1494.741412][T22639] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1494.767171][ C0] vkms_vblank_simulate: vblank timer overrun [ 1494.774857][T22639] batman_adv: batadv0: Interface activated: macvlan2 [ 1494.787773][T20963] usb 3-1: USB disconnect, device number 10 [ 1495.638700][T22654] loop5: detected capacity change from 0 to 512 [ 1495.664610][T22654] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1495.674534][T22654] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.6830: bad orphan inode 13 [ 1495.699333][T22654] ext4_test_bit(bit=12, block=18) = 1 [ 1495.705038][T22654] is_bad_inode(inode)=0 [ 1495.709758][T22654] NEXT_ORPHAN(inode)=2130706432 [ 1495.714840][T22654] max_ino=32 [ 1495.718189][T22654] i_nlink=1 [ 1495.724175][T22654] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1495.829864][T22654] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 1495.896188][T22654] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6830: bg 0: block 248: padding at end of block bitmap is not set [ 1495.956468][T22654] Quota error (device loop5): write_blk: dquota write failed [ 1495.964858][T22654] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1495.975652][T22654] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.6830: Failed to acquire dquot type 1 [ 1496.013459][T22654] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1496.238279][T19683] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1497.475290][T22690] netlink: 'syz.2.6845': attribute type 13 has an invalid length. [ 1497.498752][T22690] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1497.512818][T22690] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1497.521020][T22690] gretap1: entered promiscuous mode [ 1497.526599][T22690] gretap1: entered allmulticast mode [ 1498.114806][T16456] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 1498.183182][T22702] loop5: detected capacity change from 0 to 64 [ 1498.281418][ T30] audit: type=1800 audit(2000000216.526:358): pid=22702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6851" name="file1" dev="loop5" ino=22 res=0 errno=0 [ 1498.330731][T16456] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1498.397593][T16456] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1498.408913][T16456] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.417726][T16456] usb 3-1: Product: syz [ 1498.422181][T16456] usb 3-1: Manufacturer: syz [ 1498.427225][T16456] usb 3-1: SerialNumber: syz [ 1498.454849][T16456] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1498.523763][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1498.530765][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1498.589953][T22706] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6853'. [ 1499.568164][T16456] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1499.610184][T16456] usb 3-1: USB disconnect, device number 11 [ 1499.781045][T22723] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6860'. [ 1500.979685][T22744] loop1: detected capacity change from 0 to 256 [ 1501.691340][T22751] loop2: detected capacity change from 0 to 4096 [ 1501.724706][T22751] ntfs3: Bad value for 'uid' [ 1501.729846][T22751] ntfs3: Bad value for 'uid' [ 1501.977808][T22754] loop1: detected capacity change from 0 to 4096 [ 1502.111271][T22763] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1502.166633][ T30] audit: type=1800 audit(2000000220.155:359): pid=22754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6874" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1503.703581][T22794] dummy0: Caught tx_queue_len zero misconfig [ 1505.539459][T22826] loop1: detected capacity change from 0 to 512 [ 1505.598778][T22826] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1505.632829][T22826] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.6904: bad orphan inode 13 [ 1505.666991][T22826] ext4_test_bit(bit=12, block=18) = 1 [ 1505.674063][T22826] is_bad_inode(inode)=0 [ 1505.679215][T22826] NEXT_ORPHAN(inode)=2130706432 [ 1505.685004][T22826] max_ino=32 [ 1505.688357][T22826] i_nlink=1 [ 1505.694325][T22826] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1505.852092][T22826] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 1505.910117][T22826] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6904: bg 0: block 248: padding at end of block bitmap is not set [ 1505.926473][T22833] loop5: detected capacity change from 0 to 1024 [ 1505.951552][T22826] Quota error (device loop1): write_blk: dquota write failed [ 1505.959852][T22826] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1505.970357][T22826] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.6904: Failed to acquire dquot type 1 [ 1506.047862][T22826] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1506.078928][T16456] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1506.243713][T14567] hfsplus: b-tree write err: -5, ino 4 [ 1506.283421][T16456] usb 3-1: Using ep0 maxpacket: 32 [ 1506.288076][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1506.312838][T16456] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1506.325082][T16456] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.388126][T16456] usb 3-1: config 0 descriptor?? [ 1506.415277][T16456] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1506.798002][T22842] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1506.808994][T22842] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.934360][T22842] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1506.945658][T22842] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.140973][T22842] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1507.154493][T22842] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.316105][T22842] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1507.327044][T22842] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.576937][T14583] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1507.585720][T14583] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.647528][T16456] gspca_sq930x: ucbus_write failed -71 [ 1507.653811][T16456] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 1507.674737][T14583] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1507.683475][T14583] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.690284][T16456] usb 3-1: USB disconnect, device number 12 [ 1507.758163][T14583] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1507.766669][T14583] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.796669][T14583] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1507.805741][T14583] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.196704][T22862] overlayfs: failed to clone upperpath [ 1508.762583][T22869] loop2: detected capacity change from 0 to 128 [ 1508.872539][T22869] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1508.898762][T22869] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1509.101928][T20990] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1509.704215][T22883] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6926'. [ 1509.717387][T22883] netlink: 'syz.7.6926': attribute type 7 has an invalid length. [ 1509.726980][T22883] netlink: 'syz.7.6926': attribute type 8 has an invalid length. [ 1509.735101][T22883] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6926'. [ 1509.761401][T22883] gretap0: entered promiscuous mode [ 1509.772468][T22883] batadv_slave_1: entered promiscuous mode [ 1509.781908][T22883] erspan0: entered promiscuous mode [ 1509.793582][T22883] debugfs: 'hsr1' already exists in 'hsr' [ 1509.799749][T22883] Cannot create hsr debugfs directory [ 1510.207884][T22889] netlink: 'syz.5.6929': attribute type 2 has an invalid length. [ 1511.336655][T22905] loop2: detected capacity change from 0 to 4096 [ 1511.527052][T22915] loop1: detected capacity change from 0 to 64 [ 1511.624431][T22905] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1511.866156][T20990] ntfs3(loop2): ino=9, ntfs_sync_fs failed, -22. [ 1511.954926][T22920] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6944'. [ 1512.025952][T22920] tipc: New replicast peer: 255.255.255.255 [ 1512.034057][T22920] tipc: Enabled bearer , priority 10 [ 1513.928103][T22959] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6959'. [ 1514.028979][T22959] tipc: New replicast peer: 255.255.255.255 [ 1514.037172][T22959] tipc: Enabled bearer , priority 10 [ 1514.515318][T22969] loop2: detected capacity change from 0 to 128 [ 1514.591587][T22969] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1514.653455][T22969] ext4 filesystem being mounted at /157/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1514.685992][ C0] vkms_vblank_simulate: vblank timer overrun [ 1514.839121][T22969] EXT4-fs error (device loop2): dx_make_map:1296: inode #2: block 63: comm syz.2.6964: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 1514.956805][T22969] EXT4-fs (loop2): Remounting filesystem read-only [ 1515.128428][T20990] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1519.288673][T23050] overlayfs: failed to resolve './file1': -2 [ 1520.241789][T23064] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1520.434972][T23064] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1520.665938][T23064] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1520.932562][T23064] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.477714][T14567] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.574361][T14567] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.664450][T14583] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.755625][T14567] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.581210][T23112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7023'. [ 1526.517757][T23133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7031'. [ 1526.892583][T23136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7032'. [ 1526.953599][T23136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7032'. [ 1529.089863][T23104] Set syz1 is full, maxelem 65536 reached [ 1530.631257][T23182] loop2: detected capacity change from 0 to 256 [ 1530.659713][T23182] exfat: Deprecated parameter 'namecase' [ 1530.746210][T23182] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x542a3d5d, utbl_chksum : 0xe619d30d) [ 1531.368757][ T5878] usb 6-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1531.389975][ T5878] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 1531.467532][ T5878] usb 6-1: USB disconnect, device number 5 [ 1531.925592][T23202] loop5: detected capacity change from 0 to 1024 [ 1531.974747][T23202] EXT4-fs: inline encryption not supported [ 1531.981352][T23202] EXT4-fs: Ignoring removed bh option [ 1532.157511][T23202] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1532.238785][ T30] audit: type=1800 audit(2000000248.255:360): pid=23207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7066" name="file1" dev="tmpfs" ino=7758 res=0 errno=0 [ 1532.292294][ T30] audit: type=1804 audit(2000000248.320:361): pid=23202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.7063" name="/newroot/297/file1/file1" dev="loop5" ino=15 res=1 errno=0 [ 1532.369252][T23216] batadv_slave_1: entered promiscuous mode [ 1532.397583][T23215] netlink: 'syz.7.7068': attribute type 21 has an invalid length. [ 1532.406716][T23214] batadv_slave_1: left promiscuous mode [ 1532.513602][T19683] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1532.829224][T23224] overlayfs: failed to clone upperpath [ 1533.324039][T14583] Bluetooth: hci5: Frame reassembly failed (-84) [ 1535.532019][T19340] Bluetooth: hci5: command 0xfc11 tx timeout [ 1535.538523][ T5813] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1535.572710][T23234] sp0: Synchronizing with TNC [ 1536.483604][T23286] netlink: 'syz.0.7101': attribute type 1 has an invalid length. [ 1536.491579][T23286] netlink: 'syz.0.7101': attribute type 2 has an invalid length. [ 1537.614184][T23307] netlink: 'syz.5.7113': attribute type 10 has an invalid length. [ 1538.006276][T23315] loop2: detected capacity change from 0 to 64 [ 1538.125276][ T30] audit: type=1800 audit(2000000253.792:362): pid=23315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7115" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 1538.147465][ T30] audit: type=1800 audit(2000000253.792:363): pid=23315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7115" name="file2" dev="loop2" ino=22 res=0 errno=0 [ 1539.091539][ T5878] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1539.284309][ T5878] usb 6-1: Using ep0 maxpacket: 16 [ 1539.341539][ T5878] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1539.351955][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.360634][ T5878] usb 6-1: Product: syz [ 1539.365021][ T5878] usb 6-1: Manufacturer: syz [ 1539.370180][ T5878] usb 6-1: SerialNumber: syz [ 1539.408336][ T5878] usb 6-1: config 0 descriptor?? [ 1539.931701][ T5878] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1539.960139][ T5878] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1539.994797][ T5878] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1540.004227][ T5878] usb 6-1: media controller created [ 1540.088616][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1540.148325][T23334] dtv5100: wlen = 0, aborting. [ 1540.387773][ T5878] zl10353_read_register: readreg error (reg=127, ret==0) [ 1540.395232][ T5878] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1540.403564][ T5878] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1540.446125][ T5878] usb 6-1: USB disconnect, device number 6 [ 1540.667525][ T5878] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1540.851722][T23365] tunl0: Caught tx_queue_len zero misconfig [ 1542.476080][T23399] loop1: detected capacity change from 0 to 1024 [ 1542.497180][T23399] EXT4-fs: inline encryption not supported [ 1542.505629][T23399] EXT4-fs: Ignoring removed bh option [ 1542.568405][T23399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1542.616099][ T30] audit: type=1804 audit(2000000257.992:364): pid=23399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7153" name="/newroot/1410/file1/file1" dev="loop1" ino=15 res=1 errno=0 [ 1542.817429][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1542.860103][T23406] loop2: detected capacity change from 0 to 128 [ 1543.263206][T14583] kworker/u8:23: attempt to access beyond end of device [ 1543.263206][T14583] loop2: rw=1, sector=145, nr_sectors = 8 limit=128 [ 1543.277656][T14583] kworker/u8:23: attempt to access beyond end of device [ 1543.277656][T14583] loop2: rw=1, sector=161, nr_sectors = 8 limit=128 [ 1543.291780][T14583] kworker/u8:23: attempt to access beyond end of device [ 1543.291780][T14583] loop2: rw=1, sector=177, nr_sectors = 8 limit=128 [ 1543.305934][T14583] kworker/u8:23: attempt to access beyond end of device [ 1543.305934][T14583] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 1543.322979][T14583] kworker/u8:23: attempt to access beyond end of device [ 1543.322979][T14583] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 1543.338244][T14583] kworker/u8:23: attempt to access beyond end of device [ 1543.338244][T14583] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 1543.353426][T14583] kworker/u8:23: attempt to access beyond end of device [ 1543.353426][T14583] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 1543.372835][T14583] kworker/u8:23: attempt to access beyond end of device [ 1543.372835][T14583] loop2: rw=1, sector=257, nr_sectors = 8 limit=128 [ 1543.506989][ T11] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1543.670692][T23423] macvlan2: entered promiscuous mode [ 1543.692364][T23423] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 1543.706640][ T11] usb 6-1: config 0 has no interfaces? [ 1543.726437][ T11] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1543.736291][ T11] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1543.745199][ T11] usb 6-1: Manufacturer: syz [ 1543.786916][ T11] usb 6-1: config 0 descriptor?? [ 1544.075121][T23431] syzkaller1: entered promiscuous mode [ 1544.085419][T23431] syzkaller1: entered allmulticast mode [ 1544.178535][T23415] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7158'. [ 1544.216720][ T5878] usb 6-1: USB disconnect, device number 7 [ 1545.200543][T23440] loop5: detected capacity change from 0 to 2048 [ 1545.211689][T23440] EXT4-fs: Ignoring removed oldalloc option [ 1545.272933][T23440] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1545.416214][T23440] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 1545.471183][T23440] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 1545.484475][T23440] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1545.484475][T23440] [ 1545.494361][T23440] EXT4-fs (loop5): Total free blocks count 0 [ 1545.500817][T23440] EXT4-fs (loop5): Free/Dirty block details [ 1545.510168][T23440] EXT4-fs (loop5): free_blocks=66060288 [ 1545.517373][T23440] EXT4-fs (loop5): dirty_blocks=32 [ 1545.522948][T23440] EXT4-fs (loop5): Block reservation details [ 1545.529256][T23440] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 1545.566577][T23448] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 1545.781358][T23451] loop2: detected capacity change from 0 to 128 [ 1545.907058][T23451] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1545.945053][T23451] ext4 filesystem being mounted at /194/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1546.261994][T20990] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1546.581584][T23467] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.7179'. [ 1546.640473][T23463] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.7179'. [ 1546.817077][T23469] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7182'. [ 1547.340949][T23481] loop5: detected capacity change from 0 to 128 [ 1547.403490][T23481] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1547.428273][T23481] ext4 filesystem being mounted at /320/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1547.610762][T19683] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1547.689222][ T30] audit: type=1326 audit(2000000262.744:365): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=23488 comm="syz.2.7191" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x0 [ 1548.351641][T23502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7197'. [ 1548.364582][T23502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7197'. [ 1548.374400][T23502] netlink: 50 bytes leftover after parsing attributes in process `syz.1.7197'. [ 1550.991279][ T11] kernel write not supported for file [eventfd] (pid: 11 comm: kworker/0:1) [ 1551.406315][T23560] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.520170][T23560] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.671441][T23560] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.774305][T23560] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.001053][T14579] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.037794][T14579] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.085120][ T3717] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.139706][ T3717] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.022704][T23593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7236'. [ 1553.344231][T23588] loop5: detected capacity change from 0 to 2048 [ 1553.547811][T23588] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1553.567869][T23588] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1553.793651][T19683] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1554.131152][T23620] vxcan1: tx address claim with different name [ 1555.070327][T23630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7248'. [ 1557.738146][T23677] loop2: detected capacity change from 0 to 4096 [ 1559.194053][T23705] loop2: detected capacity change from 0 to 128 [ 1559.257818][T23705] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1559.290317][T23705] ext4 filesystem being mounted at /214/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1559.506333][T23705] fscrypt (loop2, inode 12): Unsupported encryption modes (contents 0, filenames 0) [ 1559.614678][T23714] ref_ctr_offset mismatch. inode: 0x1d3c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20004004 [ 1559.829559][T20990] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1560.291754][T23729] loop5: detected capacity change from 0 to 512 [ 1560.318906][T23729] EXT4-fs (loop5): filesystem is read-only [ 1560.362258][T23729] EXT4-fs (loop5): filesystem is read-only [ 1560.368899][T23729] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1560.400853][T23729] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.7291: bad orphan inode 16 [ 1560.449806][T23729] ext4_test_bit(bit=15, block=3) = 0 [ 1560.458232][T23729] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1560.842182][T19683] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1561.414988][T23751] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.7302'. [ 1561.514399][T23755] input: syz1 as /devices/virtual/input/input61 [ 1562.378538][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804eb1b600: rx timeout, send abort [ 1563.001365][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804eb1b600: abort rx timeout. Force session deactivation [ 1564.355960][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1564.362610][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1564.952838][ T5813] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1568.684810][T23776] Set syz1 is full, maxelem 65536 reached [ 1570.843747][T23867] syz.5.7326 (23867): drop_caches: 2 [ 1571.393412][T23885] loop1: detected capacity change from 0 to 4096 [ 1571.496337][T23892] 9pnet_fd: Insufficient options for proto=fd [ 1571.571800][T23895] loop5: detected capacity change from 0 to 512 [ 1571.624955][T23895] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1572.116438][T19683] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1572.616053][T23915] loop2: detected capacity change from 0 to 256 [ 1572.687009][T23915] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 1573.685581][T23931] netlink: 'syz.7.7352': attribute type 12 has an invalid length. [ 1573.697680][T23931] netlink: 'syz.7.7352': attribute type 29 has an invalid length. [ 1573.705754][T23931] netlink: 148 bytes leftover after parsing attributes in process `syz.7.7352'. [ 1573.716181][T23931] netlink: 'syz.7.7352': attribute type 2 has an invalid length. [ 1573.724279][T23931] netlink: 23 bytes leftover after parsing attributes in process `syz.7.7352'. [ 1574.578479][T23936] loop1: detected capacity change from 0 to 4096 [ 1574.616877][T23936] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 1575.648231][T23950] loop2: detected capacity change from 0 to 2048 [ 1575.707587][T23950] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1575.753321][T23961] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1576.329236][T23969] loop1: detected capacity change from 0 to 256 [ 1577.003673][ T5878] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 1577.222116][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1577.234366][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1577.244579][ T5878] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1577.254713][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.279390][ T5878] usb 3-1: config 0 descriptor?? [ 1577.328493][T23985] loop1: detected capacity change from 0 to 256 [ 1577.415744][T23992] program syz.5.7381 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1577.544708][T23985] FAT-fs (loop1): Directory bread(block 64) failed [ 1577.552164][T23985] FAT-fs (loop1): Directory bread(block 65) failed [ 1577.559683][T23985] FAT-fs (loop1): Directory bread(block 66) failed [ 1577.566464][T23985] FAT-fs (loop1): Directory bread(block 67) failed [ 1577.573735][T23985] FAT-fs (loop1): Directory bread(block 68) failed [ 1577.581635][T23985] FAT-fs (loop1): Directory bread(block 69) failed [ 1577.588839][T23985] FAT-fs (loop1): Directory bread(block 70) failed [ 1577.595570][T23985] FAT-fs (loop1): Directory bread(block 71) failed [ 1577.602642][T23985] FAT-fs (loop1): Directory bread(block 72) failed [ 1577.609599][T23985] FAT-fs (loop1): Directory bread(block 73) failed [ 1577.828481][ T5878] savu 0003:1E7D:2D5A.001D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 1577.944000][T23998] loop5: detected capacity change from 0 to 256 [ 1577.986080][T23998] exfat: Deprecated parameter 'namecase' [ 1577.992546][T23998] exfat: Deprecated parameter 'namecase' [ 1578.086382][T23998] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1578.109310][ T11] usb 3-1: USB disconnect, device number 13 [ 1578.554332][T24010] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7389'. [ 1578.845613][T24014] Set syz1 is full, maxelem 65536 reached [ 1580.412657][ T5878] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 1580.591825][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1580.616506][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1580.629305][ T5878] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1580.638834][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.671633][ T5878] usb 6-1: config 0 descriptor?? [ 1581.376818][ T5878] savu 0003:1E7D:2D5A.001E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 1581.653869][ T11] usb 6-1: USB disconnect, device number 8 [ 1582.640834][T24076] smc: net device bond0 applied user defined pnetid SYZ2 [ 1582.667586][T24076] smc: net device bond0 erased user defined pnetid SYZ2 [ 1583.799034][T24088] loop5: detected capacity change from 0 to 128 [ 1583.828591][T24088] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1583.843928][T24088] ext4 filesystem being mounted at /362/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1583.987412][T24084] loop1: detected capacity change from 0 to 64 [ 1583.999206][T24084] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 1584.132775][T24093] overlayfs: failed to resolve './file0': -2 [ 1584.464830][T19683] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1585.734874][T24116] loop1: detected capacity change from 0 to 128 [ 1586.308870][T24126] sctp: [Deprecated]: syz.2.7440 (pid 24126) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1586.308870][T24126] Use struct sctp_sack_info instead [ 1586.467246][T24121] loop5: detected capacity change from 0 to 4096 [ 1586.491170][T24121] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 1589.682712][T24176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7459'. [ 1590.143654][ T30] audit: type=1326 audit(2000000302.461:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24180 comm="syz.0.7462" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x0 [ 1590.473379][T24189] netlink: 'syz.7.7465': attribute type 11 has an invalid length. [ 1590.753234][T24196] loop2: detected capacity change from 0 to 16 [ 1590.753508][T24194] loop1: detected capacity change from 0 to 128 [ 1590.810897][T24194] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1590.836192][T24194] ext4 filesystem being mounted at /1468/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1593.317252][ T5817] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1594.052408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1594.148946][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1594.433344][T24229] netlink: 'syz.7.7479': attribute type 12 has an invalid length. [ 1594.446293][T24229] netlink: 'syz.7.7479': attribute type 4 has an invalid length. [ 1594.455650][T24229] netlink: 'syz.7.7479': attribute type 2 has an invalid length. [ 1594.463999][T24229] netlink: 'syz.7.7479': attribute type 5 has an invalid length. [ 1594.472219][T24229] netlink: 128 bytes leftover after parsing attributes in process `syz.7.7479'. [ 1594.542324][T24228] IPv6: NLM_F_CREATE should be specified when creating new route [ 1595.485737][T19340] Bluetooth: hci1: command 0x0406 tx timeout [ 1595.718097][T24238] loop5: detected capacity change from 0 to 4096 [ 1597.030478][T23835] Bluetooth: hci5: Frame reassembly failed (-84) [ 1597.070998][T24258] Bluetooth: hci5: Frame reassembly failed (-84) [ 1597.079771][T23835] Bluetooth: hci5: Frame reassembly failed (-84) [ 1598.060851][ T30] audit: type=1326 audit(2000000309.860:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24277 comm="syz.5.7501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 1598.083728][ T30] audit: type=1326 audit(2000000309.860:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24277 comm="syz.5.7501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 1598.154243][T24280] netlink: 830 bytes leftover after parsing attributes in process `syz.1.7502'. [ 1598.167333][ T30] audit: type=1326 audit(2000000309.916:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24277 comm="syz.5.7501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 1598.190977][ T30] audit: type=1326 audit(2000000309.916:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24277 comm="syz.5.7501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 1598.213538][ T30] audit: type=1326 audit(2000000309.916:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24277 comm="syz.5.7501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 1598.236271][ T30] audit: type=1326 audit(2000000309.926:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24277 comm="syz.5.7501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 1598.258842][ T30] audit: type=1326 audit(2000000309.935:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24277 comm="syz.5.7501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 1598.282109][ T30] audit: type=1326 audit(2000000309.935:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24277 comm="syz.5.7501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 1598.304924][ T30] audit: type=1326 audit(2000000309.935:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24277 comm="syz.5.7501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 1598.327444][ T30] audit: type=1326 audit(2000000309.944:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24277 comm="syz.5.7501" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 1598.824502][T24290] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7506'. [ 1598.834047][T24290] netlink: 'syz.7.7506': attribute type 7 has an invalid length. [ 1598.842186][T24290] netlink: 'syz.7.7506': attribute type 8 has an invalid length. [ 1598.850096][T24290] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7506'. [ 1598.856653][T24288] loop1: detected capacity change from 0 to 256 [ 1598.934718][T24288] exfat: Deprecated parameter 'namecase' [ 1598.941722][T24288] exfat: Deprecated parameter 'utf8' [ 1599.083036][T24288] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1599.248353][T19340] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1599.252288][T24203] Bluetooth: hci5: command 0x1003 tx timeout [ 1599.440382][ T11] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1599.632552][ T11] usb 3-1: Using ep0 maxpacket: 32 [ 1599.667993][ T11] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1599.677721][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.709687][ T11] usb 3-1: config 0 descriptor?? [ 1599.735608][ T11] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1600.320383][T24313] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7518'. [ 1600.330370][T24313] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7518'. [ 1600.834836][ T11] gspca_nw80x: reg_w err -71 [ 1600.839957][ T11] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 1600.878938][ T11] usb 3-1: USB disconnect, device number 14 [ 1601.652030][T24329] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7525'. [ 1603.511443][T24353] loop1: detected capacity change from 0 to 1024 [ 1603.585467][T24359] loop2: detected capacity change from 0 to 128 [ 1603.622650][T24353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1603.637047][T24353] ext4 filesystem being mounted at /1479/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1603.709393][T24353] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.7531: lblock 3 mapped to illegal pblock 3 (length 3) [ 1603.766019][T24359] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1603.819032][T24353] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 1603.833768][T24353] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1603.833768][T24353] [ 1603.847461][T24366] EXT4-fs error (device loop1): ext4_ext_remove_space:2955: inode #15: comm syz.1.7531: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1603.887952][T24359] ext4 filesystem being mounted at /269/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1603.944684][T24366] EXT4-fs error (device loop1) in ext4_setattr:6071: Corrupt filesystem [ 1603.985850][T24353] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm syz.1.7531: lblock 0 mapped to illegal pblock 0 (length 1) [ 1604.043278][T24353] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1604.056273][T24353] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1604.056273][T24353] [ 1604.104283][T24362] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1604.196624][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1604.196740][ T30] audit: type=1804 audit(2000000315.594:380): pid=24359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.7538" name="/newroot/269/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=13 res=1 errno=0 [ 1604.435981][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1604.680550][T20990] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1604.997754][T24377] loop0: detected capacity change from 0 to 128 [ 1605.129713][T24377] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1605.245277][T24377] ext4 filesystem being mounted at /1587/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1605.623870][ T5821] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1606.458905][T24403] netlink: 360 bytes leftover after parsing attributes in process `syz.7.7556'. [ 1607.326542][T24416] loop2: detected capacity change from 0 to 256 [ 1607.355408][T24416] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1607.417860][T24418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1607.425706][T24418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1607.463189][T24418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1607.475491][T24418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1607.487952][T24418] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1607.495441][T24418] batman_adv: batadv0: Removing interface: ipvlan2 [ 1607.701054][T24416] FAT-fs (loop2): Directory bread(block 64) failed [ 1607.708908][T24416] FAT-fs (loop2): Directory bread(block 65) failed [ 1607.716046][T24416] FAT-fs (loop2): Directory bread(block 66) failed [ 1607.722783][T24416] FAT-fs (loop2): Directory bread(block 67) failed [ 1607.729955][T24416] FAT-fs (loop2): Directory bread(block 68) failed [ 1607.736933][T24416] FAT-fs (loop2): Directory bread(block 69) failed [ 1607.743836][T24416] FAT-fs (loop2): Directory bread(block 70) failed [ 1607.750772][T24416] FAT-fs (loop2): Directory bread(block 71) failed [ 1607.758446][T24416] FAT-fs (loop2): Directory bread(block 72) failed [ 1607.765184][T24416] FAT-fs (loop2): Directory bread(block 73) failed [ 1608.414570][ T5878] IPVS: starting estimator thread 0... [ 1608.517255][T24437] IPVS: using max 192 ests per chain, 9600 per kthread [ 1609.621505][T24453] loop5: detected capacity change from 0 to 512 [ 1609.716100][T24453] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1610.011124][T24467] loop0: detected capacity change from 0 to 64 [ 1610.380612][T19683] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1612.280921][T24507] loop5: detected capacity change from 0 to 256 [ 1612.326420][T24507] exfat: Deprecated parameter 'utf8' [ 1612.426309][T24507] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d) [ 1613.460565][T24526] loop2: detected capacity change from 0 to 512 [ 1613.841292][T24526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1613.855025][T24526] ext4 filesystem being mounted at /282/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1614.277470][T20990] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1614.278706][T24537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7613'. [ 1614.351917][T24537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7613'. [ 1614.409696][T24537] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7613'. [ 1614.419433][T24537] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7613'. [ 1614.858189][T24542] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7615'. [ 1616.506914][T24562] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1616.514665][T24562] IPv6: NLM_F_CREATE should be set when creating new route [ 1617.129652][T24572] loop1: detected capacity change from 0 to 164 [ 1617.723632][T24585] netlink: 'syz.1.7634': attribute type 8 has an invalid length. [ 1618.129762][T24596] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1618.840981][T24611] loop5: detected capacity change from 0 to 512 [ 1618.924176][T24611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1618.940214][T24611] ext4 filesystem being mounted at /413/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1619.123559][T24611] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.7646: corrupted inode contents [ 1619.159999][T24611] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.7646: mark_inode_dirty error [ 1619.205176][T24611] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.7646: corrupted inode contents [ 1619.227855][T24611] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.7646: mark_inode_dirty error [ 1619.275349][T24611] EXT4-fs error (device loop5): ext4_lookup:1784: inode #18: comm syz.5.7646: 'bus' linked to parent dir [ 1619.480906][T19683] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1619.568097][T24626] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7652'. [ 1619.756223][T24632] loop0: detected capacity change from 0 to 64 [ 1620.143145][T24638] loop5: detected capacity change from 0 to 64 [ 1620.286854][T24203] Bluetooth: hci1: command 0x0406 tx timeout [ 1620.351492][T24642] loop0: detected capacity change from 0 to 512 [ 1620.413782][T24642] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.7659: corrupted in-inode xattr: invalid ea_ino [ 1620.523752][T24642] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.7659: couldn't read orphan inode 15 (err -117) [ 1620.579693][T24642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1620.987009][T24649] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7662'. [ 1621.136333][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1622.111132][T24663] loop0: detected capacity change from 0 to 736 [ 1622.356307][T24668] input: syz1 as /devices/virtual/input/input62 [ 1623.002387][T24680] netlink: 88 bytes leftover after parsing attributes in process `syz.1.7676'. [ 1623.012754][T24680] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7676'. [ 1623.308540][ T30] audit: type=1326 audit(2000000333.479:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24681 comm="syz.7.7677" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706e539 code=0x0 [ 1623.345402][T24687] syzkaller1: entered promiscuous mode [ 1623.351234][T24687] syzkaller1: entered allmulticast mode [ 1623.979089][T24702] input: syz0 as /devices/virtual/input/input63 [ 1625.110166][T24725] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7695'. [ 1626.151311][T24746] io-wq is not configured for unbound workers [ 1626.541266][T24754] loop1: detected capacity change from 0 to 512 [ 1626.593359][T24754] EXT4-fs error (device loop1): ext4_orphan_get:1392: comm syz.1.7709: inode #13: comm syz.1.7709: iget: illegal inode # [ 1626.616560][T24754] EXT4-fs (loop1): Remounting filesystem read-only [ 1626.628980][T24754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1626.723034][ T11] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1626.761387][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1626.905354][ T11] usb 3-1: Using ep0 maxpacket: 32 [ 1626.935536][ T11] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1626.944802][ T11] usb 3-1: config 0 has no interface number 0 [ 1626.951404][ T11] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1627.003441][ T11] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1627.013622][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.022461][ T11] usb 3-1: Product: syz [ 1627.026850][ T11] usb 3-1: Manufacturer: syz [ 1627.031700][ T11] usb 3-1: SerialNumber: syz [ 1627.059540][ T11] usb 3-1: config 0 descriptor?? [ 1627.078110][ T11] smsc75xx v1.0.0 [ 1627.122969][T24766] loop0: detected capacity change from 0 to 512 [ 1627.135807][T24766] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1627.232769][ T30] audit: type=1800 audit(2000000337.146:382): pid=24766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7713" name="file1" dev="loop0" ino=1048887 res=0 errno=0 [ 1627.255080][ T30] audit: type=1804 audit(2000000337.155:383): pid=24766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.7713" name="/newroot/1619/file0/file1" dev="loop0" ino=1048887 res=1 errno=0 [ 1627.278299][ T30] audit: type=1800 audit(2000000337.155:384): pid=24766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7713" name="file1" dev="loop0" ino=1048887 res=0 errno=0 [ 1627.770779][ T11] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1627.783937][ T11] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1628.028055][ T11] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1628.039382][ T11] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1628.053560][ T11] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1628.065808][ T11] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1628.077628][ T11] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1628.199019][ T11] usb 3-1: USB disconnect, device number 15 [ 1628.383699][T24783] loop1: detected capacity change from 0 to 512 [ 1628.416608][T24783] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1628.440182][T24783] EXT4-fs (loop1): invalid journal inode [ 1628.446375][T24783] EXT4-fs (loop1): can't get journal size [ 1628.501281][T24783] EXT4-fs (loop1): 1 truncate cleaned up [ 1628.510046][T24783] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1628.701234][T24783] EXT4-fs (loop1): shut down requested (1) [ 1628.773079][T24789] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1628.781978][ T5795] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1628.975654][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1629.485219][T24795] loop5: detected capacity change from 0 to 4096 [ 1629.541793][T24795] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1629.615956][T24795] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1629.899580][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1629.906400][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1630.006348][T19683] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1630.427611][T24822] loop0: detected capacity change from 0 to 256 [ 1630.609034][T24826] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1630.609509][ T5795] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1630.664345][T24819] loop1: detected capacity change from 0 to 4096 [ 1630.685607][T24822] FAT-fs (loop0): Directory bread(block 64) failed [ 1630.692697][T24822] FAT-fs (loop0): Directory bread(block 65) failed [ 1630.700038][T24822] FAT-fs (loop0): Directory bread(block 66) failed [ 1630.706768][T24822] FAT-fs (loop0): Directory bread(block 67) failed [ 1630.713837][T24822] FAT-fs (loop0): Directory bread(block 68) failed [ 1630.720782][T24822] FAT-fs (loop0): Directory bread(block 69) failed [ 1630.727654][T24822] FAT-fs (loop0): Directory bread(block 70) failed [ 1630.734552][T24822] FAT-fs (loop0): Directory bread(block 71) failed [ 1630.741478][T24822] FAT-fs (loop0): Directory bread(block 72) failed [ 1630.748397][T24822] FAT-fs (loop0): Directory bread(block 73) failed [ 1630.858473][T24829] loop5: detected capacity change from 0 to 512 [ 1630.968941][T24819] netlink: zone id is out of range [ 1630.974380][T24819] netlink: zone id is out of range [ 1630.988089][T24819] netlink: zone id is out of range [ 1630.993391][T24819] netlink: zone id is out of range [ 1630.998912][T24819] netlink: zone id is out of range [ 1631.004971][T24819] netlink: zone id is out of range [ 1631.010510][T24819] netlink: zone id is out of range [ 1631.015784][T24819] netlink: zone id is out of range [ 1631.021349][T24819] netlink: zone id is out of range [ 1631.026613][T24819] netlink: zone id is out of range [ 1631.046131][T24829] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1631.092534][T24829] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1631.117613][T24829] Quota error (device loop5): find_block_dqentry: Quota for id 0 referenced but not present [ 1631.128881][T24829] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 1631.138946][T24829] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.7741: Failed to acquire dquot type 1 [ 1631.195763][T24829] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7741: bg 0: block 40: padding at end of block bitmap is not set [ 1631.252912][T24829] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1631.334565][T24829] EXT4-fs (loop5): 1 truncate cleaned up [ 1631.343170][T24829] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1631.541600][T24841] loop1: detected capacity change from 0 to 128 [ 1631.582385][T24841] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1631.629193][T24841] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1631.869055][T24847] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 1631.992177][T23845] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1632.086288][T19683] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1632.813309][T24866] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1632.813602][ T5795] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1633.550747][T24873] loop2: detected capacity change from 0 to 4096 [ 1633.612244][T24873] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1633.813452][T24873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1634.388495][T20990] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1634.432032][T24894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7766'. [ 1634.676804][ T30] audit: type=1326 audit(2000000344.105:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24898 comm="syz.5.7769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 1634.729064][ T30] audit: type=1326 audit(2000000344.152:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24898 comm="syz.5.7769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 1634.853258][ T30] audit: type=1326 audit(2000000344.199:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24898 comm="syz.5.7769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 1634.876445][ T30] audit: type=1326 audit(2000000344.199:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24898 comm="syz.5.7769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 1634.898962][ T30] audit: type=1326 audit(2000000344.208:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24898 comm="syz.5.7769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 1634.921617][ T30] audit: type=1326 audit(2000000344.208:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24898 comm="syz.5.7769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 1634.945121][ T30] audit: type=1326 audit(2000000344.208:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24898 comm="syz.5.7769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 1634.967837][ T30] audit: type=1326 audit(2000000344.208:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24898 comm="syz.5.7769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=400 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 1635.016613][T24902] loop0: detected capacity change from 0 to 1024 [ 1635.048794][T24902] EXT4-fs: Ignoring removed nobh option [ 1635.159652][T24902] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 1635.207019][T24902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1635.351534][T24915] netlink: 'syz.2.7773': attribute type 2 has an invalid length. [ 1635.628832][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1636.601437][T24938] netlink: 'syz.5.7784': attribute type 39 has an invalid length. [ 1636.675264][T24938] bridge0: port 1(bridge_slave_0) entered disabled state [ 1636.726658][T24938] bridge_slave_0 (unregistering): left allmulticast mode [ 1636.735015][T24938] bridge_slave_0 (unregistering): left promiscuous mode [ 1636.742785][T24938] bridge0: port 1(bridge_slave_0) entered disabled state [ 1636.815083][ T11] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 1637.015554][ T11] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1637.029163][ T11] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1637.077187][ T11] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1637.089591][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.103179][ T11] usb 3-1: Product: syz [ 1637.107592][ T11] usb 3-1: Manufacturer: syz [ 1637.112403][ T11] usb 3-1: SerialNumber: syz [ 1637.419679][ T11] usb 3-1: 0:2 : does not exist [ 1637.475416][ T11] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1637.554571][ T11] usb 3-1: USB disconnect, device number 16 [ 1637.645071][T24959] overlay: filesystem on ./bus is read-only [ 1638.507168][T24973] loop2: detected capacity change from 0 to 512 [ 1638.520012][T24973] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1638.568386][T24973] EXT4-fs (loop2): 1 truncate cleaned up [ 1638.576563][T24973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1638.682622][T24973] EXT4-fs error (device loop2): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.2.7796: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1638.719895][T24973] EXT4-fs (loop2): Remounting filesystem read-only [ 1638.726661][T24973] EXT4-fs warning (device loop2): ext4_rename_delete:3731: inode #2: comm syz.2.7796: Deleting old file: nlink 5, error=-117 [ 1638.841349][T20990] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1639.549218][T24994] loop5: detected capacity change from 0 to 1024 [ 1639.572913][T24994] EXT4-fs: inline encryption not supported [ 1639.579612][T24994] EXT4-fs: Ignoring removed bh option [ 1639.676613][T24994] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1639.752851][T25001] loop0: detected capacity change from 0 to 512 [ 1639.779956][T24990] loop2: detected capacity change from 0 to 8192 [ 1639.857970][T19683] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1639.872517][T25001] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1639.889201][T25001] ext4 filesystem being mounted at /1636/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1640.197021][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1641.751794][T25036] loop2: detected capacity change from 0 to 256 [ 1641.772716][T25036] exfat: Deprecated parameter 'utf8' [ 1641.778659][T25036] exfat: Deprecated parameter 'utf8' [ 1641.784516][T25036] exfat: Deprecated parameter 'utf8' [ 1641.901004][T25036] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1641.982394][T25036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7820'. [ 1641.996036][T25036] bridge0: port 2(bridge_slave_1) entered disabled state [ 1642.006125][T25036] bridge0: port 1(bridge_slave_0) entered disabled state [ 1643.878039][T25072] net_ratelimit: 31 callbacks suppressed [ 1643.878123][T25072] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1644.654736][ T11] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1644.852497][ T11] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1644.862388][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.891476][ T11] usb 6-1: config 0 descriptor?? [ 1644.924916][ T11] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1644.933479][T25093] loop1: detected capacity change from 0 to 128 [ 1644.969940][T25093] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1645.045463][T25093] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1645.188292][ T11] gspca_spca508: reg_read err -32 [ 1645.198617][ T11] gspca_spca508: reg_read err -32 [ 1645.207730][ T11] gspca_spca508: reg_read err -32 [ 1645.434086][ T11] gspca_spca508: reg_read err -71 [ 1645.441122][ T11] gspca_spca508: reg write: error -71 [ 1645.447364][ T11] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 1645.490847][ T11] usb 6-1: USB disconnect, device number 9 [ 1645.897070][T25106] loop0: detected capacity change from 0 to 256 [ 1645.919463][T25106] exfat: Deprecated parameter 'utf8' [ 1645.925953][T25106] exfat: Deprecated parameter 'utf8' [ 1645.931724][T25106] exfat: Deprecated parameter 'utf8' [ 1646.053711][T25106] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1646.132104][T25108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7852'. [ 1646.134130][T25106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7851'. [ 1646.152031][T25106] bridge0: port 4(bond0) entered disabled state [ 1646.159867][T25106] bridge0: port 2(bridge_slave_1) entered disabled state [ 1646.167895][T25106] bridge0: port 1(bridge_slave_0) entered disabled state [ 1646.415082][T25113] input: syz0 as /devices/virtual/input/input64 [ 1646.625853][T25117] pim6reg: entered allmulticast mode [ 1646.686137][T25117] pim6reg: left allmulticast mode [ 1647.362729][T25124] loop2: detected capacity change from 0 to 4096 [ 1647.376748][T25124] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1647.517364][T25124] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1647.541811][T25124] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 1649.258265][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1649.258512][ T30] audit: type=1326 audit(2000000358.741:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25160 comm="syz.5.7875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 1649.391604][ T30] audit: type=1326 audit(2000000358.797:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25160 comm="syz.5.7875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 1649.414993][ T30] audit: type=1326 audit(2000000358.797:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25160 comm="syz.5.7875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 1649.438111][ T30] audit: type=1326 audit(2000000358.797:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25160 comm="syz.5.7875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 1649.460768][ T30] audit: type=1326 audit(2000000358.797:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25160 comm="syz.5.7875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 1649.486067][ T30] audit: type=1326 audit(2000000358.806:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25160 comm="syz.5.7875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 1649.509843][ T30] audit: type=1326 audit(2000000358.806:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25160 comm="syz.5.7875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 1649.532982][ T30] audit: type=1326 audit(2000000358.834:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25160 comm="syz.5.7875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 1649.555659][ T30] audit: type=1326 audit(2000000358.834:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25160 comm="syz.5.7875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 1649.578300][ T30] audit: type=1326 audit(2000000358.834:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25160 comm="syz.5.7875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fd8539 code=0x7ffc0000 [ 1649.818437][T25167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7880'. [ 1649.942397][T20963] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1650.137942][T20963] usb 3-1: Using ep0 maxpacket: 32 [ 1650.181387][T20963] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1650.189852][T20963] usb 3-1: config 0 has no interface number 0 [ 1650.212514][T20963] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1650.222197][T20963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.230485][T20963] usb 3-1: Product: syz [ 1650.235038][T20963] usb 3-1: Manufacturer: syz [ 1650.239830][T20963] usb 3-1: SerialNumber: syz [ 1650.252639][T20963] usb 3-1: config 0 descriptor?? [ 1650.270000][T20963] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1650.436804][T25178] loop0: detected capacity change from 0 to 1024 [ 1650.509320][T20963] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1650.554321][T25178] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1650.567456][T25178] ext4 filesystem being mounted at /1655/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1650.619324][T20963] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1650.622220][T25178] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 4: comm syz.0.7883: lblock 4 mapped to illegal pblock 4 (length 1) [ 1650.645832][T25178] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 1650.659223][T25178] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1650.659223][T25178] [ 1650.848554][T23829] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm kworker/u8:1: lblock 0 mapped to illegal pblock 0 (length 4) [ 1650.913367][T23829] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 1650.930068][T23829] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1650.930068][T23829] [ 1651.044904][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1651.165191][T25189] Set syz1 is full, maxelem 65536 reached [ 1651.361498][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1651.370866][ T11] usb 3-1: USB disconnect, device number 17 [ 1651.444913][ T11] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1651.477216][ T11] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1651.494237][ T11] quatech2 3-1:0.51: device disconnected [ 1651.606383][T25191] loop0: detected capacity change from 0 to 1024 [ 1651.784421][T25195] loop1: detected capacity change from 0 to 512 [ 1651.933870][T14565] hfsplus: b-tree write err: -5, ino 4 [ 1652.207636][T25198] loop5: detected capacity change from 0 to 512 [ 1652.314355][T25198] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1652.392841][T25198] EXT4-fs (loop5): 1 truncate cleaned up [ 1652.401226][T25198] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1653.151953][T19683] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1654.031964][T25233] veth0: entered promiscuous mode [ 1654.044297][T25232] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7905'. [ 1654.055073][T25232] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 1654.064366][T25232] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (133) [ 1654.083307][T25233] veth0: left promiscuous mode [ 1655.289841][T25258] netlink: 'syz.7.7917': attribute type 15 has an invalid length. [ 1655.448047][ T11] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 1655.556072][T25263] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7920'. [ 1655.624986][T25264] loop0: detected capacity change from 0 to 256 [ 1655.647141][T25264] exfat: Deprecated parameter 'namecase' [ 1655.647405][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1655.663510][ T11] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1655.673047][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.730491][T25264] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7e66f627, utbl_chksum : 0xe619d30d) [ 1655.760233][ T11] usb 3-1: config 0 descriptor?? [ 1656.248782][ T11] lua 0003:1E7D:2C2E.001F: unknown main item tag 0x0 [ 1656.256338][ T11] lua 0003:1E7D:2C2E.001F: unknown main item tag 0x0 [ 1656.264028][ T11] lua 0003:1E7D:2C2E.001F: unknown global tag 0xd [ 1656.270697][ T11] lua 0003:1E7D:2C2E.001F: item 0 2 1 13 parsing failed [ 1656.317542][ T11] lua 0003:1E7D:2C2E.001F: parse failed [ 1656.323907][ T11] lua 0003:1E7D:2C2E.001F: probe with driver lua failed with error -22 [ 1656.482490][T20963] usb 3-1: USB disconnect, device number 18 [ 1657.817246][T25304] loop2: detected capacity change from 0 to 512 [ 1657.880013][T25304] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.7938: casefold flag without casefold feature [ 1657.905002][T25304] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.7938: couldn't read orphan inode 15 (err -117) [ 1657.935379][T25304] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1658.083832][T25315] overlayfs: failed to clone lowerpath [ 1658.142832][T25304] EXT4-fs error (device loop2): ext4_check_dx_root:2203: inode #2: comm syz.2.7938: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 1658.492723][T25321] bridge0: port 3(syz_tun) entered blocking state [ 1658.500842][T25321] bridge0: port 3(syz_tun) entered disabled state [ 1658.508273][T25321] syz_tun: entered allmulticast mode [ 1658.517371][T25321] syz_tun: entered promiscuous mode [ 1658.525089][T25321] bridge0: port 3(syz_tun) entered blocking state [ 1658.532111][T25321] bridge0: port 3(syz_tun) entered forwarding state [ 1658.588407][T20990] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1658.633275][T25323] loop5: detected capacity change from 0 to 128 [ 1658.689103][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1658.689191][ T30] audit: type=1800 audit(2000000367.571:426): pid=25323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7944" name="file1" dev="loop5" ino=1048901 res=0 errno=0 [ 1658.712822][T25323] syz.5.7944: attempt to access beyond end of device [ 1658.712822][T25323] loop5: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 1659.342128][T25332] loop2: detected capacity change from 0 to 128 [ 1659.366811][T25332] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1659.391618][T25332] ext4 filesystem being mounted at /343/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1659.663336][T25332] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.7948: No space for directory leaf checksum. Please run e2fsck -D. [ 1659.679783][T25332] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.7948: checksumming directory block 0 [ 1660.037398][T20990] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1660.633282][T20963] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1660.816597][T20963] usb 6-1: Using ep0 maxpacket: 8 [ 1660.840351][T20963] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1660.850017][T20963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.858370][T20963] usb 6-1: Product: syz [ 1660.862762][T20963] usb 6-1: Manufacturer: syz [ 1660.867595][T20963] usb 6-1: SerialNumber: syz [ 1660.888843][T20963] usb 6-1: config 0 descriptor?? [ 1661.150655][T20963] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1661.895937][T25368] netlink: 5 bytes leftover after parsing attributes in process `syz.7.7965'. [ 1661.906528][T25368] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 1661.992353][T25368] 0ªî{X¹¦: entered allmulticast mode [ 1662.000456][T25368] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1662.046533][T20963] usb write operation failed. (-71) [ 1662.060173][T20963] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1662.073164][T20963] dvbdev: DVB: registering new adapter (Terratec H7) [ 1662.080262][T20963] usb 6-1: media controller created [ 1662.142762][T20963] usb read operation failed. (-71) [ 1662.149731][T20963] usb write operation failed. (-71) [ 1662.174267][T20963] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1662.205910][T20963] usb 6-1: USB disconnect, device number 10 [ 1662.432162][T25375] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7967'. [ 1662.490084][T25375] bridge0: port 4(bond0) entered disabled state [ 1662.539841][T25375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1662.556140][T25375] bond_slave_0: left promiscuous mode [ 1662.563279][T25375] bond_slave_0: left allmulticast mode [ 1662.591687][T25375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1662.624738][T25375] bond_slave_1: left promiscuous mode [ 1662.631416][T25375] bond_slave_1: left allmulticast mode [ 1662.690898][T25375] bond0 (unregistering): Released all slaves [ 1663.459806][T20963] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1663.648397][T20963] usb 3-1: Using ep0 maxpacket: 16 [ 1663.664573][T20963] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1663.674040][T20963] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1663.687501][T20963] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1663.789190][T20963] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1663.799012][T20963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.807285][T20963] usb 3-1: Product: syz [ 1663.811795][T20963] usb 3-1: Manufacturer: syz [ 1663.816602][T20963] usb 3-1: SerialNumber: syz [ 1664.600781][T20963] usb 3-1: 0:2 : does not exist [ 1664.779889][T25407] loop1: detected capacity change from 0 to 64 [ 1665.331608][T20963] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 1665.508467][T20963] usb 3-1: USB disconnect, device number 19 [ 1665.993746][ T11] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1666.201887][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1666.214176][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1666.224414][ T11] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1666.238679][ T11] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1666.248783][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.387064][ T11] usb 6-1: config 0 descriptor?? [ 1666.921177][ T11] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1669.166427][ T11] usb 6-1: USB disconnect, device number 11 [ 1670.189571][T25477] loop1: detected capacity change from 0 to 1024 [ 1670.192219][ T11] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1670.390607][T25482] loop0: detected capacity change from 0 to 128 [ 1670.407477][ T11] usb 3-1: Using ep0 maxpacket: 8 [ 1670.423668][ T11] usb 3-1: config 0 has no interfaces? [ 1670.472622][ T11] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 1670.482235][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.490895][ T11] usb 3-1: Product: syz [ 1670.495269][ T11] usb 3-1: Manufacturer: syz [ 1670.500263][ T11] usb 3-1: SerialNumber: syz [ 1670.555065][ T30] audit: type=1800 audit(2000000378.665:427): pid=25482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8016" name="file2" dev="loop0" ino=1048902 res=0 errno=0 [ 1670.567816][T25482] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 1670.585068][T25482] FAT-fs (loop0): Filesystem has been set read-only [ 1670.592194][T25482] syz.0.8016: attempt to access beyond end of device [ 1670.592194][T25482] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1670.606670][T25482] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 1670.615033][T25482] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 1670.664773][ T11] usb 3-1: config 0 descriptor?? [ 1670.768308][T25482] syz.0.8016: attempt to access beyond end of device [ 1670.768308][T25482] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1670.790133][T25482] syz.0.8016: attempt to access beyond end of device [ 1670.790133][T25482] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1670.854489][T25482] syz.0.8016: attempt to access beyond end of device [ 1670.854489][T25482] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1670.925054][T25482] syz.0.8016: attempt to access beyond end of device [ 1670.925054][T25482] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1670.940501][T25482] syz.0.8016: attempt to access beyond end of device [ 1670.940501][T25482] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1670.964247][T25487] syz.0.8016: attempt to access beyond end of device [ 1670.964247][T25487] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 1670.978989][T25487] buffer_io_error: 54 callbacks suppressed [ 1670.979077][T25487] Buffer I/O error on dev loop0, logical block 2065, async page read [ 1670.993904][T25487] syz.0.8016: attempt to access beyond end of device [ 1670.993904][T25487] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 1671.007689][T25487] Buffer I/O error on dev loop0, logical block 2066, async page read [ 1671.016323][T25487] syz.0.8016: attempt to access beyond end of device [ 1671.016323][T25487] loop0: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 1671.031071][T25487] Buffer I/O error on dev loop0, logical block 2067, async page read [ 1671.039641][T25487] syz.0.8016: attempt to access beyond end of device [ 1671.039641][T25487] loop0: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 1671.053272][T25487] Buffer I/O error on dev loop0, logical block 2068, async page read [ 1671.061837][T25487] Buffer I/O error on dev loop0, logical block 2069, async page read [ 1671.073242][T25487] Buffer I/O error on dev loop0, logical block 2070, async page read [ 1671.082691][T25487] Buffer I/O error on dev loop0, logical block 2071, async page read [ 1671.091182][T25487] Buffer I/O error on dev loop0, logical block 2072, async page read [ 1671.100059][T20963] usb 3-1: USB disconnect, device number 20 [ 1671.126896][T25482] Buffer I/O error on dev loop0, logical block 2065, async page read [ 1671.135778][T25482] Buffer I/O error on dev loop0, logical block 2066, async page read [ 1671.211984][T25491] loop1: detected capacity change from 0 to 128 [ 1671.272397][T25491] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1671.367561][T25491] ext4 filesystem being mounted at /1570/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1671.596438][T25491] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.8018: No space for directory leaf checksum. Please run e2fsck -D. [ 1671.612790][T25491] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.8018: checksumming directory block 0 [ 1672.000764][ T5817] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1673.832207][T25544] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8041'. [ 1673.866046][T25544] netlink: 'syz.5.8041': attribute type 2 has an invalid length. [ 1673.874287][T25544] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8041'. [ 1675.072744][T25566] loop5: detected capacity change from 0 to 512 [ 1675.130512][ T30] audit: type=1326 audit(2000000382.949:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25567 comm="syz.7.8053" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x0 [ 1675.150286][T25566] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1675.169090][T25566] ext4 filesystem being mounted at /501/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1675.490083][T19683] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1676.530234][T25590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8063'. [ 1676.541523][T25593] loop1: detected capacity change from 0 to 128 [ 1676.582363][T25596] loop2: detected capacity change from 0 to 64 [ 1676.983533][T25599] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1676.998309][T25599] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1677.584763][T25612] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8073'. [ 1677.682629][T25611] loop5: detected capacity change from 0 to 1024 [ 1678.307758][T25621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8076'. [ 1678.344122][T25621] netlink: 452 bytes leftover after parsing attributes in process `syz.1.8076'. [ 1678.353853][T25621] netlink: 452 bytes leftover after parsing attributes in process `syz.1.8076'. [ 1678.488912][T25623] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8077'. [ 1679.742164][T25644] loop0: detected capacity change from 0 to 512 [ 1679.785018][T25644] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1679.806592][T25646] 9pnet_fd: Insufficient options for proto=fd [ 1679.869104][T25644] EXT4-fs (loop0): 1 truncate cleaned up [ 1679.877600][T25644] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1679.965976][T25649] sctp: [Deprecated]: syz.2.8087 (pid 25649) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1679.965976][T25649] Use struct sctp_sack_info instead [ 1680.062616][T25652] EXT4-fs (loop0): shut down requested (2) [ 1680.229064][T25654] loop5: detected capacity change from 0 to 1024 [ 1680.317137][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1680.330430][T25654] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1680.359442][T25656] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8089'. [ 1680.383801][T25661] loop2: detected capacity change from 0 to 64 [ 1680.963143][T25668] ip6gretap0: entered promiscuous mode [ 1680.969356][T25668] macsec1: entered promiscuous mode [ 1680.975506][T25668] macsec1: entered allmulticast mode [ 1680.981236][T25668] ip6gretap0: entered allmulticast mode [ 1681.017807][T25668] ip6gretap0: left allmulticast mode [ 1681.024327][T25668] ip6gretap0: left promiscuous mode [ 1681.027884][T19683] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 1681.387046][T19683] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 1681.427191][T25672] tap0: tun_chr_ioctl cmd 1074025675 [ 1681.432826][T25672] tap0: persist enabled [ 1681.507308][T25672] tap0: tun_chr_ioctl cmd 1074025675 [ 1681.516782][T25672] tap0: persist enabled [ 1681.727954][T19683] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 1681.973352][T19683] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 1682.141799][T19683] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 1682.549890][T19683] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 1682.899685][T19683] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 1683.042408][T19683] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 1683.282148][T19683] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 1683.479698][T19683] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 1683.642955][T25705] loop0: detected capacity change from 0 to 512 [ 1683.740304][T25705] EXT4-fs (loop0): too many log groups per flexible block group [ 1683.749299][T25705] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 1683.764628][T25705] EXT4-fs (loop0): mount failed [ 1684.398484][ T5878] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1684.623488][ T5878] usb 3-1: Using ep0 maxpacket: 32 [ 1684.662304][ T5878] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1684.670910][ T5878] usb 3-1: config 0 has no interface number 0 [ 1684.677491][ T5878] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1684.742002][ T5878] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 1684.751773][ T5878] usb 3-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 1684.760944][ T5878] usb 3-1: Product: syz [ 1684.765611][ T5878] usb 3-1: Manufacturer: syz [ 1684.770438][ T5878] usb 3-1: SerialNumber: syz [ 1684.788031][ T5878] usb 3-1: config 0 descriptor?? [ 1685.073269][T25722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8116'. [ 1685.718445][T25730] loop1: detected capacity change from 0 to 65 [ 1685.738605][T25730] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 1686.063131][ T5878] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1686.072363][ T5878] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1686.080385][ T5878] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1686.088648][ T5878] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 1686.130805][ T30] audit: type=1804 audit(2000000393.220:429): pid=25730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.8120" name=2F6E6577726F6F742F313538382FE91F7189591E9233614B2F66696C6530 dev="loop1" ino=3 res=1 errno=0 [ 1686.152913][ T5878] usb 3-1: USB disconnect, device number 21 [ 1686.400525][T19683] EXT4-fs error: 9 callbacks suppressed [ 1686.400613][T19683] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 1686.679553][T19683] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 1686.850236][T19683] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 1686.994459][T19683] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 1687.268904][T19683] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 1687.400531][T19683] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 1687.536203][T19683] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 1687.667423][T19683] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 1687.812681][T19683] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 1687.949432][T19683] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 1688.737853][T25756] loop1: detected capacity change from 0 to 4096 [ 1688.825130][T25756] NILFS (loop1): invalid segment: Checksum error in segment payload [ 1688.833511][T25756] NILFS (loop1): trying rollback from an earlier position [ 1688.906949][T25756] NILFS (loop1): recovery complete [ 1688.928985][T25762] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1688.940676][ T5878] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1689.162174][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1689.173638][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1689.183803][ T5878] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1689.197296][ T5878] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1689.206689][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.328469][ T5878] usb 3-1: config 0 descriptor?? [ 1689.837417][ T5878] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1690.104932][ T11] usb 3-1: USB disconnect, device number 22 [ 1691.594820][T25788] loop0: detected capacity change from 0 to 4096 [ 1691.666736][T25788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1691.877926][T25797] loop1: detected capacity change from 0 to 1024 [ 1691.926066][T25788] EXT4-fs (loop0): shut down requested (0) [ 1692.063886][T19683] EXT4-fs error: 14 callbacks suppressed [ 1692.063975][T19683] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 1692.451329][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1692.560675][T19683] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 1693.034306][T19683] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 1693.548023][T19683] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 1693.637370][T25820] netlink: 'syz.0.8159': attribute type 2 has an invalid length. [ 1693.904108][T19683] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 1694.327816][T19683] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 1694.451086][T25838] input: syz0 as /devices/virtual/input/input65 [ 1694.723522][T19683] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 1695.036717][T25844] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1695.149321][T19683] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 1695.519988][T19683] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 1695.578827][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1695.586150][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1695.773989][T19683] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 1696.363720][T25865] loop0: detected capacity change from 0 to 4096 [ 1696.432532][T25865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1696.602532][T25865] fs-verity (loop0, inode 16): fs-verity keyring is empty, rejecting signed file! [ 1696.851187][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1697.467851][T25875] loop1: detected capacity change from 0 to 4096 [ 1697.676379][T25881] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1698.021330][T19340] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1698.032282][T19340] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1698.042147][T19340] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1698.057032][T19340] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1698.070775][T19340] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1698.706753][T25892] loop2: detected capacity change from 0 to 1024 [ 1698.993313][T25892] hfsplus: request for non-existent node 33554434 in B*Tree [ 1699.000956][T25892] hfsplus: request for non-existent node 33554434 in B*Tree [ 1699.012863][T25886] chnl_net:caif_netlink_parms(): no params data found [ 1699.090451][T25892] hfsplus: request for non-existent node 33554434 in B*Tree [ 1699.102397][T25892] hfsplus: request for non-existent node 33554434 in B*Tree [ 1699.183772][T25900] loop1: detected capacity change from 0 to 2048 [ 1699.352425][T25900] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1699.476534][T14579] hfsplus: request for non-existent node 33554434 in B*Tree [ 1699.484595][T14579] hfsplus: request for non-existent node 33554434 in B*Tree [ 1700.252838][T24203] Bluetooth: hci5: command tx timeout [ 1700.333207][T25886] bridge0: port 1(bridge_slave_0) entered blocking state [ 1700.342743][T25886] bridge0: port 1(bridge_slave_0) entered disabled state [ 1700.351044][T25886] bridge_slave_0: entered allmulticast mode [ 1700.361260][T25886] bridge_slave_0: entered promiscuous mode [ 1700.412874][T25886] bridge0: port 2(bridge_slave_1) entered blocking state [ 1700.420441][T25886] bridge0: port 2(bridge_slave_1) entered disabled state [ 1700.433557][T25886] bridge_slave_1: entered allmulticast mode [ 1700.443811][T25886] bridge_slave_1: entered promiscuous mode [ 1700.859710][T25886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1700.947776][T25886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1701.242662][T14579] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1701.253183][T14579] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.266493][T19683] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1701.460563][T14579] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1701.470647][T14579] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.565104][T25886] team0: Port device team_slave_0 added [ 1701.581808][T25929] loop2: detected capacity change from 0 to 1024 [ 1701.608547][T25886] team0: Port device team_slave_1 added [ 1701.621612][T25929] EXT4-fs: Ignoring removed nobh option [ 1701.627450][T25929] EXT4-fs: Ignoring removed bh option [ 1701.647856][T14579] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1701.658366][T14579] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.798930][T25929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1701.843536][T14579] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1701.854130][T14579] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.942348][T25929] overlayfs: conflicting lowerdir path [ 1701.960292][T25886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1701.968436][T25886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1701.995358][T25886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1702.146473][T25886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1702.153637][T25886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1702.180034][T25886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1702.246471][T25941] team0: Device ipvlan2 failed to register rx_handler [ 1702.309860][T20990] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1702.486968][T24203] Bluetooth: hci5: command tx timeout [ 1702.790726][T25886] hsr_slave_0: entered promiscuous mode [ 1702.801512][T25886] hsr_slave_1: entered promiscuous mode [ 1702.810600][T25886] debugfs: 'hsr0' already exists in 'hsr' [ 1702.816534][T25886] Cannot create hsr debugfs directory [ 1702.824464][T14579] bridge_slave_1: left allmulticast mode [ 1702.830625][T14579] bridge_slave_1: left promiscuous mode [ 1702.837322][T14579] bridge0: port 2(bridge_slave_1) entered disabled state [ 1703.433038][T14579] batman_adv: batadv0: Interface deactivated: macvlan2 [ 1703.496338][T14579] batman_adv: batadv0: Removing interface: macvlan2 [ 1703.895158][T14579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1703.968742][T14579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1704.002977][T14579] bond0 (unregistering): Released all slaves [ 1704.247755][T14579] tipc: Disabling bearer [ 1704.254293][T14579] tipc: Left network mode [ 1704.601656][T25974] 9pnet_fd: Insufficient options for proto=fd [ 1704.700530][T24203] Bluetooth: hci5: command tx timeout [ 1704.943926][T14579] hsr_slave_0: left promiscuous mode [ 1704.974008][T14579] hsr_slave_1: left promiscuous mode [ 1704.982571][T14579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1704.990845][T14579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1705.054804][T14579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1705.062627][T14579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1705.145387][T14579] veth1_macvtap: left promiscuous mode [ 1705.151732][T14579] veth0_macvtap: left promiscuous mode [ 1705.157719][T14579] veth1_vlan: left promiscuous mode [ 1705.164478][T14579] veth0_vlan: left promiscuous mode [ 1706.514286][T14579] team0 (unregistering): Port device team_slave_1 removed [ 1706.580712][T14579] team0 (unregistering): Port device team_slave_0 removed [ 1706.924457][T24203] Bluetooth: hci5: command tx timeout [ 1706.963126][T26007] loop0: detected capacity change from 0 to 128 [ 1707.316093][T14579] IPVS: stop unused estimator thread 0... [ 1708.450076][T25886] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1708.503440][T25886] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1708.587699][T25886] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1708.686783][T25886] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1709.609215][T25886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1709.666209][T26027] loop1: detected capacity change from 0 to 8192 [ 1709.698752][T25886] 8021q: adding VLAN 0 to HW filter on device team0 [ 1709.739800][T14579] bridge0: port 1(bridge_slave_0) entered blocking state [ 1709.747668][T14579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1709.796198][T14579] bridge0: port 2(bridge_slave_1) entered blocking state [ 1709.804069][T14579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1710.681627][T26042] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1711.172378][T25886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1712.386252][T26070] loop1: detected capacity change from 0 to 2048 [ 1712.463602][T26076] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1712.801553][T26076] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1712.813864][T26076] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1712.881320][T26076] Remounting filesystem read-only [ 1712.889144][ T5817] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 1713.233958][T25886] veth0_vlan: entered promiscuous mode [ 1713.307705][T25886] veth1_vlan: entered promiscuous mode [ 1713.573924][T25886] veth0_macvtap: entered promiscuous mode [ 1713.626146][T25886] veth1_macvtap: entered promiscuous mode [ 1713.727782][T25886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1713.792643][T25886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1713.867901][T14579] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.917292][T14579] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.981241][T14579] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.017812][T14579] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.149419][T26101] loop1: detected capacity change from 0 to 512 [ 1714.254762][T26101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1714.268624][T26101] ext4 filesystem being mounted at /1626/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1714.322807][T26101] EXT4-fs error (device loop1): ext4_empty_dir:3077: inode #12: comm syz.1.8267: invalid size [ 1714.348888][T26101] EXT4-fs (loop1): Remounting filesystem read-only [ 1714.565005][T26114] input: syz1 as /devices/virtual/input/input66 [ 1714.659873][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1714.673104][T14579] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1714.684696][T14579] Quota error (device loop1): write_blk: dquota write failed [ 1714.692283][T14579] Quota error (device loop1): free_dqentry: Can't write quota data block 5 [ 1715.047042][T26121] loop1: detected capacity change from 0 to 128 [ 1715.739653][T26132] loop2: detected capacity change from 0 to 512 [ 1715.767925][T26132] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1715.799369][T26132] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1715.875987][T26132] EXT4-fs (loop2): 1 truncate cleaned up [ 1715.884391][T26132] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1716.432777][T20990] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1716.489163][T26147] bridge0: entered promiscuous mode [ 1716.495134][T26147] macvlan2: entered promiscuous mode [ 1716.592848][T26147] macvlan3: entered promiscuous mode [ 1716.661445][T26149] loop0: detected capacity change from 0 to 1024 [ 1716.855973][T23839] hfsplus: b-tree write err: -5, ino 4 [ 1717.219929][T26158] loop2: detected capacity change from 0 to 512 [ 1718.679471][T26186] netlink: 348 bytes leftover after parsing attributes in process `syz.1.8293'. [ 1719.078684][ T30] audit: type=1800 audit(2000000424.060:430): pid=26189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.8294" name="file1" dev="tmpfs" ino=2675 res=0 errno=0 [ 1719.229021][ C1] ===================================================== [ 1719.236414][ C1] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x14a3/0x1ff0 [ 1719.244989][ C1] bpf_prog_run_generic_xdp+0x14a3/0x1ff0 [ 1719.251002][ C1] do_xdp_generic+0xd52/0x1690 [ 1719.255964][ C1] __netif_receive_skb_core+0x2524/0x6df0 [ 1719.261970][ C1] __netif_receive_skb+0xcc/0xac0 [ 1719.267232][ C1] process_backlog+0x485/0xa00 [ 1719.272279][ C1] __napi_poll+0xdd/0x8a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1719.276800][ C1] net_rx_action+0xa59/0x1ac0 [ 1719.281755][ C1] handle_softirqs+0x166/0x6e0 [ 1719.286696][ C1] __do_softirq+0x14/0x1b [ 1719.291206][ C1] do_softirq+0x99/0x100 [ 1719.295798][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 1719.300991][ C1] tun_rx_batched+0x889/0x980 [ 1719.305917][ C1] tun_get_user+0x5028/0x6ca0 [ 1719.310775][ C1] tun_chr_write_iter+0x3e9/0x5c0 [ 1719.316059][ C1] vfs_write+0xbe2/0x15d0 [ 1719.320588][ C1] __ia32_sys_write+0x1f9/0x4d0 [ 1719.325714][ C1] ia32_sys_call+0x35bc/0x4310 [ 1719.330638][ C1] __do_fast_syscall_32+0xb0/0x150 [ 1719.336035][ C1] do_fast_syscall_32+0x38/0x80 [ 1719.341098][ C1] do_SYSENTER_32+0x1f/0x30 [ 1719.345872][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1719.352420][ C1] [ 1719.354831][ C1] Uninit was created at: [ 1719.359436][ C1] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 1719.366168][ C1] kmalloc_reserve+0x22f/0x4b0 [ 1719.371211][ C1] pskb_expand_head+0x1fc/0x1610 [ 1719.376370][ C1] do_xdp_generic+0xa79/0x1690 [ 1719.381422][ C1] __netif_receive_skb_core+0x2524/0x6df0 [ 1719.387361][ C1] __netif_receive_skb+0xcc/0xac0 [ 1719.392670][ C1] process_backlog+0x485/0xa00 [ 1719.397643][ C1] __napi_poll+0xdd/0x8a0 [ 1719.402260][ C1] net_rx_action+0xa59/0x1ac0 [ 1719.407154][ C1] handle_softirqs+0x166/0x6e0 [ 1719.412172][ C1] __do_softirq+0x14/0x1b [ 1719.416676][ C1] [ 1719.419106][ C1] CPU: 1 UID: 0 PID: 26194 Comm: syz.1.8296 Not tainted syzkaller #0 PREEMPT(none) [ 1719.428749][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1719.439022][ C1] ===================================================== [ 1719.446141][ C1] Disabling lock debugging due to kernel taint [ 1719.452486][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 1719.459048][ C1] CPU: 1 UID: 0 PID: 26194 Comm: syz.1.8296 Tainted: G B syzkaller #0 PREEMPT(none) [ 1719.470212][ C1] Tainted: [B]=BAD_PAGE [ 1719.474487][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1719.484687][ C1] Call Trace: [ 1719.488079][ C1] [ 1719.491033][ C1] __dump_stack+0x26/0x30 [ 1719.495576][ C1] dump_stack_lvl+0x53/0x270 [ 1719.500377][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1719.506436][ C1] dump_stack+0x1e/0x25 [ 1719.510792][ C1] vpanic+0x361/0xc50 [ 1719.514966][ C1] panic+0x15d/0x160 [ 1719.519083][ C1] kmsan_report+0x31c/0x320 [ 1719.523762][ C1] ? __msan_warning+0x1b/0x30 [ 1719.528586][ C1] ? bpf_prog_run_generic_xdp+0x14a3/0x1ff0 [ 1719.534662][ C1] ? do_xdp_generic+0xd52/0x1690 [ 1719.539770][ C1] ? __netif_receive_skb_core+0x2524/0x6df0 [ 1719.545856][ C1] ? __netif_receive_skb+0xcc/0xac0 [ 1719.551235][ C1] ? process_backlog+0x485/0xa00 [ 1719.556425][ C1] ? __napi_poll+0xdd/0x8a0 [ 1719.561099][ C1] ? net_rx_action+0xa59/0x1ac0 [ 1719.566141][ C1] ? handle_softirqs+0x166/0x6e0 [ 1719.571259][ C1] ? __do_softirq+0x14/0x1b [ 1719.575935][ C1] ? do_softirq+0x99/0x100 [ 1719.580494][ C1] ? __local_bh_enable_ip+0xa1/0xb0 [ 1719.585848][ C1] ? tun_rx_batched+0x889/0x980 [ 1719.590854][ C1] ? tun_get_user+0x5028/0x6ca0 [ 1719.595854][ C1] ? tun_chr_write_iter+0x3e9/0x5c0 [ 1719.601199][ C1] ? vfs_write+0xbe2/0x15d0 [ 1719.605887][ C1] ? __ia32_sys_write+0x1f9/0x4d0 [ 1719.611085][ C1] ? ia32_sys_call+0x35bc/0x4310 [ 1719.616181][ C1] ? __do_fast_syscall_32+0xb0/0x150 [ 1719.621668][ C1] ? do_fast_syscall_32+0x38/0x80 [ 1719.626877][ C1] ? do_SYSENTER_32+0x1f/0x30 [ 1719.631743][ C1] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1719.638447][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 1719.643730][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 1719.649021][ C1] ? __bpf_prog_run32+0xc2/0xf0 [ 1719.654017][ C1] ? kmem_cache_free+0x3ef/0xec0 [ 1719.659153][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 1719.664448][ C1] __msan_warning+0x1b/0x30 [ 1719.669100][ C1] bpf_prog_run_generic_xdp+0x14a3/0x1ff0 [ 1719.675015][ C1] ? kmsan_report+0x2e1/0x320 [ 1719.679939][ C1] do_xdp_generic+0xd52/0x1690 [ 1719.684877][ C1] ? __netif_receive_skb_core+0x21/0x6df0 [ 1719.690797][ C1] ? filter_irq_stacks+0x49/0x190 [ 1719.696090][ C1] __netif_receive_skb_core+0x2524/0x6df0 [ 1719.702005][ C1] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1719.708508][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 1719.713798][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1719.719803][ C1] ? filter_irq_stacks+0x49/0x190 [ 1719.725071][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 1719.730354][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1719.736363][ C1] __netif_receive_skb+0xcc/0xac0 [ 1719.741595][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 1719.746900][ C1] process_backlog+0x485/0xa00 [ 1719.751884][ C1] ? __pfx_process_backlog+0x10/0x10 [ 1719.757362][ C1] __napi_poll+0xdd/0x8a0 [ 1719.761880][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 1719.767170][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1719.773166][ C1] net_rx_action+0xa59/0x1ac0 [ 1719.778055][ C1] ? tmigr_handle_remote+0x30b/0x1bf0 [ 1719.783586][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 1719.788954][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1719.794263][ C1] handle_softirqs+0x166/0x6e0 [ 1719.799234][ C1] __do_softirq+0x14/0x1b [ 1719.803750][ C1] do_softirq+0x99/0x100 [ 1719.808141][ C1] [ 1719.811157][ C1] [ 1719.814182][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 1719.819365][ C1] ? tun_rx_batched+0x16c/0x980 [ 1719.824376][ C1] tun_rx_batched+0x889/0x980 [ 1719.829221][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 1719.834538][ C1] tun_get_user+0x5028/0x6ca0 [ 1719.839395][ C1] ? stack_depot_save_flags+0x35/0x7b0 [ 1719.845089][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 1719.850384][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 1719.855671][ C1] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1719.862169][ C1] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1719.868527][ C1] tun_chr_write_iter+0x3e9/0x5c0 [ 1719.873747][ C1] vfs_write+0xbe2/0x15d0 [ 1719.878282][ C1] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1719.884004][ C1] __ia32_sys_write+0x1f9/0x4d0 [ 1719.889059][ C1] ia32_sys_call+0x35bc/0x4310 [ 1719.893976][ C1] __do_fast_syscall_32+0xb0/0x150 [ 1719.899320][ C1] do_fast_syscall_32+0x38/0x80 [ 1719.904391][ C1] do_SYSENTER_32+0x1f/0x30 [ 1719.909113][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1719.915665][ C1] RIP: 0023:0xf7f12539 [ 1719.919850][ C1] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1719.939638][ C1] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1719.948201][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1719.956303][ C1] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 1719.964396][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1719.972483][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1719.980569][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1719.988683][ C1] [ 1719.992207][ C1] Kernel Offset: disabled [ 1719.996595][ C1] Rebooting in 86400 seconds..