last executing test programs: 39m11.493967352s ago: executing program 32 (id=226): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) bind$can_raw(r0, &(0x7f000001b1c0), 0x10) 37m36.03349117s ago: executing program 33 (id=550): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x4080, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x1) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) 30m31.159953121s ago: executing program 34 (id=2280): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bond0\x00'}) 29m34.640275581s ago: executing program 35 (id=2410): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200c00, &(0x7f0000000d00)=ANY=[], 0x3, 0xa80, &(0x7f0000001480)="$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") r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fsync(r0) 27m46.483832658s ago: executing program 36 (id=2752): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x3c56, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000580), 0xffffffff, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300), 0xfffffffffffffffe, 0x43, r0}, 0x38) 27m5.289674098s ago: executing program 37 (id=2890): syz_mount_image$nilfs2(&(0x7f0000000280), &(0x7f0000000200)='./file0\x00', 0x14, &(0x7f0000000480)=ANY=[], 0x5, 0xaa8, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8) getdents64(r0, 0x0, 0x0) 25m2.817118815s ago: executing program 38 (id=3396): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000df250700"/20, @ANYRES32=0x0, @ANYBLOB="0c00018006"], 0x24}}, 0x80) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001b14010000000000000000000800030001fc000008"], 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x10) 22m39.080192628s ago: executing program 39 (id=4110): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file3\x00', 0x8, &(0x7f00000003c0)=ANY=[], 0x1, 0x1c0, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) lseek(r0, 0x4000800000, 0x4) 20m18.75835751s ago: executing program 40 (id=4874): r0 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000004140)='.\x00', 0x1a4243c, &(0x7f0000000700)=ANY=[@ANYRES64=r0, @ANYBLOB="838af82ba0aed93ae1412b5d66c15d5708bf640ad92729f0adf01dc1f5c02e252ccc1a9f08cafb", @ANYRESOCT=r0, @ANYBLOB="f1bcca05ed588d63a176cc3afd51baf29cde0400000092f4e66ff7ef22aa9af727ceae8a8ec938d9b73083de2de825a0cb2b0be774fdb33650d7dace27c16bc23b2f7c7fb72585548939698f280d138aa9255a8a924008f8477e82ba11cdb11efd5ca2f1ab049ce2cc7815d2daf8daea25533a558d561654faf5e0924f1376174f4579664fad4a6ab24ec000ccace822e7f9426e8e5de1fe580865961834d46208b9fb4c91a1fa962a8b00a9717fcbb46c2400dc2e319379ea1e5a07aeb3f9cd4e648df445a1b4213e732300000000000010000758027a472e7d263ef567a84166f26ee56e701c63a8863787889bf1c90fccf31954a940c8b584ca89a512f28edec08eb1c0823c02090000003f5d8769023c01ac63f7f959571e8e899b43c293bc21a2b833e5c9c703c4cfa063dd050045706bde3d7ac373ab04b62b4111b59eab0080dd97e788a36ef25bad99beec474e667515c6000000000000000026b63491ba803bb4010693087e3154fc722afd63e63d23f19ea91d580b41a8a48cfdc742e177f9e9ac87649b1faca032038fe39bc94fda756fc4144837837c0d05a05bd20e51ab02ffdaf7b7add01cc9160847cc16577a3ee62434f144fbaec25b603c2aa524f11bbef48b6ba1d2f9a538867d797bbbe648cddf01cc0d", @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESHEX, @ANYRES32=r0, @ANYRES64, @ANYRES32=0x0, @ANYRES8=r0], 0x5, 0x0, &(0x7f0000000000)) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./control\x00') 18m12.055759107s ago: executing program 41 (id=5606): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000080), 0x51) 18m0.59509693s ago: executing program 42 (id=5642): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd600066f100003afffe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 17m33.760336882s ago: executing program 43 (id=5678): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) 16m4.338955628s ago: executing program 44 (id=6133): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000240)=0x4) 15m29.718874042s ago: executing program 45 (id=6344): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='ext4_get_implied_cluster_alloc_exit\x00', r0, 0x0, 0x5}, 0x18) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8205, &(0x7f0000000000)={[{@i_version}, {@jqfmt_vfsold}, {@minixdf}, {@errors_remount}, {@abort}, {@noblock_validity}, {@barrier_val={'barrier', 0x3d, 0xcc}}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x618, &(0x7f0000000640)="$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") 13m58.609125901s ago: executing program 46 (id=6720): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001e01000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) setresgid(0x0, 0xffffffffffffffff, 0xee00) 13m5.520038635s ago: executing program 47 (id=7026): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000000)='./file2\x00', 0x2810880, &(0x7f0000000500)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESOCT=0x0, @ANYRES16, @ANYRESHEX], 0x88, 0x290, &(0x7f0000006940)="$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") r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000280)='./file0\x00', 0x200) 10m13.800210768s ago: executing program 48 (id=7891): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x9) 6m1.494501309s ago: executing program 49 (id=9280): r0 = socket$inet(0x2b, 0x801, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x5) poll(&(0x7f0000000000)=[{r0, 0x6356}], 0x1, 0xff16) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) 5m49.304994358s ago: executing program 50 (id=9323): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010401010000000000800000000083ff0500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 5m20.679445268s ago: executing program 9 (id=9447): r0 = io_uring_setup(0x3382, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x0, 0x4}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000540)=[@ioring_restriction_register_op={0x0, 0x13}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, 0x0, 0x2) 5m19.963168733s ago: executing program 9 (id=9452): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) r1 = dup(r0) write$FUSE_INIT(r1, 0x0, 0x0) 5m19.549674038s ago: executing program 9 (id=9455): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0xd7e, @remote, 0x2}}, [0x10000, 0x9, 0xd, 0x5, 0x100000003, 0x4, 0x7272, 0x41, 0x100, 0x83, 0xb23, 0x7, 0xdf6, 0x6, 0x1]}, &(0x7f0000000080)=0x100) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 5m18.838348251s ago: executing program 9 (id=9461): syz_mount_image$minix(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x1000008, &(0x7f0000000040)=ANY=[], 0x1, 0x18c, &(0x7f00000003c0)="$eJzs2z9v2kAYx/GfTYGW/od26VKkDu1S3NKpW/tSEDgIxSQIWECRokjJq8iU95dIyR7FkQ12xBEpxDE4wPczPQ+P73yHOHM3WAC2VlVVWbKUl/RV0mHFklTKelgAVsCXdOMD2E65y6xHACAbF/+lnqTzq4Omcvm5/UFQ/xfV7cJ8/Uj6EjWzinpp7i/OpO9Re+vVve1L8v1Jff7cEdR/fIvu/1pv9Fbv9F4f9FHlab0V9//5CTshYPtYqpn5zAe2djqe+yvO82H+O84LYV438j9xXgzzWnPfay1rCgASsh9Y/zlj/b8w1j+A9TUYjXcbnuf2FwsKesTFM4HsyQ0TNjeDoLs0+kkjOC4r8dfiuf2T68lR7LlMZ/VBcH70i6n9NgjSCIwHxTCLpxOAZXKG3Z4zGI1/drqNttt29+qn08pfJ9z5O7P7fwCb4+5PP+uRAAAAAAAAAAAAAACApCr6tMhl5mt9AAAAANbQKl4nynqOAAAAAAAAAAAAAAAAAAAAwKa4DQAA///lKx5P") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x189040, 0x10a) 5m17.914742784s ago: executing program 9 (id=9466): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x1ab400, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 5m17.199377518s ago: executing program 9 (id=9471): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x28}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00)'], 0x28}, 0x4004005) 5m15.12634285s ago: executing program 51 (id=9471): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x28}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00)'], 0x28}, 0x4004005) 5m0.327508132s ago: executing program 1 (id=9537): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0xbc, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa8, 0x1, [@m_ctinfo={0x50, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x7, 0x7, 0x1, 0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}}, 0x980) 4m59.455377497s ago: executing program 1 (id=9540): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./bus\x00', 0x2, &(0x7f00000009c0)={[{@errors_remount}, {@grpquota}]}, 0x2, 0x51f, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0xd2) 4m58.240710885s ago: executing program 1 (id=9545): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r1, 0xc0189436, 0x0) 4m57.360655613s ago: executing program 1 (id=9549): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./file1\x00', 0x2008000, &(0x7f00000002c0)=ANY=[@ANYBLOB="696f636861727365743d6370313235302c6e6f6164696e6963622c6e6f6164696e6963622c73686f727461642c7569643d666f726765742c6769643d666f726765742c6769643d69676e6f72652c6e6f6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c00508d5c6fd14a140518c2f8949ec502a29ec1c3795fd47c03a3a72c97984a3502b51d8bfa33ab6090f2e4dc00fe8ed0b41f905b98973a0ca9e4c5eea9e8f394f5f12b6f8f8f86dda2c5d5dd18d0075da59034af306372c1b6cf04e02375a1f7ce9a910a4fc47c7e3a34fd"], 0x2, 0xc40, &(0x7f0000002740)="$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") mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x1c0) getdents(r0, 0x0, 0x58) 4m56.435032097s ago: executing program 1 (id=9555): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) lchown(0x0, 0xffffffffffffffff, 0xee01) 4m55.683731593s ago: executing program 1 (id=9559): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffb000/0x1000)=nil) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) get_robust_list(r0, 0x0, 0x0) 4m53.74521961s ago: executing program 52 (id=9559): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffb000/0x1000)=nil) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) get_robust_list(r0, 0x0, 0x0) 4m23.922723104s ago: executing program 5 (id=9713): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES64=r2], 0x48}}, 0x0) 4m23.442371913s ago: executing program 5 (id=9716): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 4m22.238618865s ago: executing program 5 (id=9722): r0 = socket$inet(0x2, 0xa, 0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @TCA_RATE={0x6}]}, 0x58}}, 0x0) 4m21.674444997s ago: executing program 5 (id=9724): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0xf04, &(0x7f0000000f40)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 4m20.474512191s ago: executing program 5 (id=9731): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg$sock(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x10, 0x1, 0x41, 0x1}}], 0x10}}], 0x1, 0x20040874) 4m19.464778632s ago: executing program 5 (id=9738): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x28, 0x9, 0x8, 0xdffff034}, {0x6, 0x0, 0x69, 0xfffffffe}]}, 0x8) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[], 0x0) 4m17.522884842s ago: executing program 53 (id=9738): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x28, 0x9, 0x8, 0xdffff034}, {0x6, 0x0, 0x69, 0xfffffffe}]}, 0x8) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[], 0x0) 3m33.662139478s ago: executing program 0 (id=9962): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x108005, 0x4) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}], 0x1}, 0x0) 3m33.02366733s ago: executing program 0 (id=9966): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000000c0)) 3m32.324982542s ago: executing program 0 (id=9971): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x50, &(0x7f0000001540)={[{@usrquota}, {}, {@commit}, {@mblk_io_submit}, {@barrier_val={'barrier', 0x3d, 0xfff}}]}, 0x1, 0x3eb, &(0x7f0000000880)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 3m31.303084114s ago: executing program 0 (id=9976): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="757466383d302c757466383d312c757466383d302c696f636861727365743d6d61636963656c616e642c73686f72746e616d653d6c6f7765722c646973636172642c757466383d312c696f636861727365743d398d3933362c726f6469722c726f6469722c726f6469722c756e615f786c6174653d312c00"], 0x1, 0x26c, &(0x7f0000000340)="$eJzs3U9rU1kYB+A3bTpJC0OyGCgzDMwdZjOr0HaYfcrQgWECipKFriw2RWlqoYWCLtruit9Bv4Iu3QouxK1fQASpghvrqgshEm//JDWJjZpG7PNs+nLu++Ock17upYueXPl1eWlhZW1xd3cn8vlMZMtRjr1MFGMkRiO1FQDA92Sv0Yg3jdSw1wIAnA7vfwA4e3q9/zNbh2PnT39lAMCgfNHf/yMDWRIAMGAXL13+f7ZSmbuQJPmI5e316no1/Zlen12M61GPWkxFId5FNA6l9b//VeamkqaXxcgvb46k+c316mh7fjoKUeycn05SUW3mDvJjMbGffzYRtZiJQvzUOT/TMf9D/PlHy/ylKMTTq7ES9ViIZjbN5yJiYzpJ/jlXOZbPfegDAAAAAAAAAAAAAAAAAAAAAIBBKCWHiu3n36Tn95RK3a6n+dbzgcZ7nQ/U2Dx2vk42fskOd+8AAAAAAAAAAAAAAAAAAADwrVi7eWtpvl6vrfYqbjy592gnlwY+2dy7yOzP219qu2fP+Ml2caz48fcXdzpdykWu38/n84qxiGgdSfanfPjbACf9WsXjnWs//7U2+Xe3nsi2jtxubrWtp8uNlB3UB/66ENG1J9/3Ddla3D8oym8/6jm4lWqr48P+xU3eLc8/2Hj+6qSpHg+NxuggHkUAAAAAAAAAAAAAAAAAAHDmHf3T77BXAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDc/T9//0WuWgbyXdt3hr2HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H0AAAD//7qXlSU=") mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[]) 3m30.141840311s ago: executing program 0 (id=9983): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={r0, 0xffffffffffffffff, 0x1a, 0x7, @void}, 0x10) 3m29.538475895s ago: executing program 0 (id=9987): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="3c00028038000100240001006e6f74696e795f70656572735f696e74657276616c00000000000000000000000500030003"], 0x58}, 0x1, 0x0, 0x0, 0x24004044}, 0x24040840) 3m27.025408674s ago: executing program 54 (id=9987): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="3c00028038000100240001006e6f74696e795f70656572735f696e74657276616c00000000000000000000000500030003"], 0x58}, 0x1, 0x0, 0x0, 0x24004044}, 0x24040840) 2m54.446400748s ago: executing program 6 (id=10122): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{}, 'syz0\x00', 0x52}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf) 2m53.545124025s ago: executing program 6 (id=10126): migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) 2m51.780784317s ago: executing program 6 (id=10135): unshare(0x20000400) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xffd1}], 0x11}, 0x800) 2m50.646704813s ago: executing program 6 (id=10142): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 2m49.38532808s ago: executing program 6 (id=10149): unshare(0x22020600) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r1}}, 0x18) 2m47.978904085s ago: executing program 6 (id=10157): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000008680)=@newtaction={0x14, 0x76, 0x1}, 0x14}}, 0x0) 2m46.087372021s ago: executing program 55 (id=10157): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000008680)=@newtaction={0x14, 0x76, 0x1}, 0x14}}, 0x0) 9.657547547s ago: executing program 8 (id=10678): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x24) 9.110514153s ago: executing program 2 (id=10679): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x5a, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc}}}}]}, 0x78}}, 0x0) 8.968976312s ago: executing program 3 (id=10680): mlockall(0x7) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22042, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)) io_setup(0x800, &(0x7f0000000040)) 8.818630894s ago: executing program 7 (id=10681): ioprio_set$uid(0x3, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0) ioprio_get$uid(0x2, 0x0) 8.183560348s ago: executing program 8 (id=10683): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006"], 0x69) close(r0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 7.651639343s ago: executing program 7 (id=10684): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={0x0}) 7.50592736s ago: executing program 2 (id=10685): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 7.430648783s ago: executing program 4 (id=10686): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@ipv4_deladdr={0x20, 0x15, 0x3, 0x70bd26, 0x25dfdbff, {0x2, 0x18, 0x42, 0xc8, r1}, [@IFA_ADDRESS={0x8, 0x1, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x40000880) 6.794121813s ago: executing program 8 (id=10687): syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x98, &(0x7f00000004c0)=ANY=[], 0xff, 0xa4, &(0x7f00000000c0)="$eJzs0b+pAkEQB+C5e/C4A9EC7OFq0CKswBKMBEEsyFYswdTIwNTkZHFFuGDBQFH4Ptg/P4ZdBuZw3U9jHNFvI/q/eOiT1XoXJf/FKr+gzmeThj655/M8YhYRVaqn7bJZHvMaPF80xd9Hb+sbAAB4XTXIdXTdM53afGk/2RMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAN7kFAAD//z7jFwY=") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x6) rename(&(0x7f0000000600)='./file1\x00', &(0x7f0000000000)='./bus\x00') 6.254543883s ago: executing program 3 (id=10688): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f00000002c0)}, 0x10) 5.931210301s ago: executing program 4 (id=10689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x0, 0x0, {0x7}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 5.852473484s ago: executing program 7 (id=10690): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 5.631585786s ago: executing program 2 (id=10691): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x186, &(0x7f0000000c40)="$eJzskrGO00AQhr+1ncSg4wQS1TV3xUlAAXF8gOhIGXo6GqzEhAgHSBwJEqUwQigFBaLkCfIaSLwAFIgHSJ0iokZG3h1bTngE9iv2z/w7O7sz8fN0kraAP7tlny4al2N+KIUHnCrjbR2jn0V/in4ywnfJeyT+e9GTdL5oSs4Z14zxIkqSeHoG/NZeZaUP3zlsdalfcugpkOd5Dg4DKNI5KnN2y74LTKocOPHgum4ir3KKRorgBtCejV+30/ni9mgcDeNh/DJ0L+4Hd4PgXth+NkriwKyqdoW0QqG3gJYvRnSk9xvAB7Eus4+qPU321SWeUNZuljM8Vhzi1M6WqvhavatF+X/B4y744L/JVM0911U8dEs9FK4EHa/2PnOXrzfu9F8lgxUKVR5b41U1OhsaVRDWg4sHGVdMqZWUPBftia7Nm9hIfHrwyXhZsX6U6GYGTd5Gs9m0UwzJ/GrI2WlYeeHVrD6w4tYvzn5z35x/ZmuxWCwWi8VisVgs/xt/AwAA//8gbnMH") munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 5.115814183s ago: executing program 3 (id=10692): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0xffffffffffffffde, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000034011100ac14140c000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa330000000200000002000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ff020000000000000000000000000001ff020000003500000a000800ac1414bb000000000000000000000000fc02000000000000000000000000000064010102000000000000000000000000fe8000000000000000000000000000323c"], 0x184}}, 0x0) 4.91423008s ago: executing program 8 (id=10693): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14846, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0], 0x0, 0x709, &(0x7f0000002000)="$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") futimesat(r1, &(0x7f0000000000)='./file1\x00', 0x0) 4.301282067s ago: executing program 7 (id=10694): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 4.151076089s ago: executing program 4 (id=10695): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = inotify_init1(0x800) r2 = fcntl$dupfd(r0, 0x406, r1) setsockopt$inet_mtu(r2, 0x111, 0xa, &(0x7f0000000000), 0x4) 4.035091747s ago: executing program 2 (id=10696): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 3.692909789s ago: executing program 3 (id=10697): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xf, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xd097}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x8, 0xf, &(0x7f0000000080)=""/15, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0xa, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x115, 0x5, 0xc}, &(0x7f0000000080)=0x10) 2.842936633s ago: executing program 4 (id=10698): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70b527, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x0, 0x0, {@in6_addr=@empty, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 2.620480089s ago: executing program 8 (id=10699): syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0x4008af24, &(0x7f0000000180)) 2.489825377s ago: executing program 7 (id=10700): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003900)=[{{&(0x7f0000000140)=@can={0x1d, r1}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)='\\R', 0x2}, {0x0}], 0x2}}], 0x1, 0x40) 2.168714261s ago: executing program 2 (id=10701): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xd0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x5, 0x4, 0x4000001}]}]}]}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x16, 0x5, 0x1, 0x5, 0x0, 0xffffffff, 0x7fffffff, 0x4}}, {0xc, 0x2, [0x8000, 0x0, 0x0, 0x3]}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.112169588s ago: executing program 3 (id=10702): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x12) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)=@multiplanar_overlay={0x2, 0xb, 0x4, 0x10, 0x4780000, {}, {0x1, 0x1, 0x5, 0x6, 0x1, 0x7, "cd3bc730"}, 0x5, 0x3, {0x0}, 0x4, 0x0, r1}) 1.455559121s ago: executing program 4 (id=10703): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, 0x0}}], 0x1, 0x4) 811.436436ms ago: executing program 7 (id=10704): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000400)) 754.162932ms ago: executing program 8 (id=10705): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r2, 0x303, 0x70bd2a, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 204.862153ms ago: executing program 2 (id=10706): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = creat(&(0x7f0000000300)='./bus\x00', 0x14) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000140)={0xf04aef, 0x3d8, 0x8, 0x7, 0x0, r0, 0x0, 0x0, 0x7, 0x0, 0x2}]) 155.750986ms ago: executing program 3 (id=10707): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x19b1, 0x4) sendmmsg$inet6(r0, &(0x7f0000001680)=[{{&(0x7f0000000440)={0xa, 0x4e1d, 0xf, @local}, 0x1c, 0x0}}], 0x1, 0x24044884) 0s ago: executing program 4 (id=10708): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0x8, {"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", 0x1000}}, 0x1006) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) kernel console output (not intermixed with test programs): an_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2359.090016][T29222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2359.108507][T29222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2359.117590][T29222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2359.147856][T29222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2359.209306][T19535] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2359.220955][T19535] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2359.231313][T19535] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2359.243346][T19535] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2359.388034][T29268] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2359.434602][T19535] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2359.626891][T29222] hsr_slave_0: entered promiscuous mode [ 2359.637660][T29222] hsr_slave_1: entered promiscuous mode [ 2359.646877][T29222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2359.656105][T29222] Cannot create hsr debugfs directory [ 2359.668278][T19535] usb 4-1: USB disconnect, device number 41 [ 2359.846084][T29272] loop5: detected capacity change from 0 to 4096 [ 2360.007414][T29272] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2360.435099][T21888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2361.003105][T29222] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2361.029086][T29222] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2361.123798][T28707] Bluetooth: hci0: command tx timeout [ 2361.163668][T29222] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2361.192690][T29222] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2361.402409][T29295] loop5: detected capacity change from 0 to 1024 [ 2362.465371][T29222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2362.654243][T29222] 8021q: adding VLAN 0 to HW filter on device team0 [ 2362.766244][ T9522] bridge0: port 1(bridge_slave_0) entered blocking state [ 2362.774078][ T9522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2362.916348][ T9522] bridge0: port 2(bridge_slave_1) entered blocking state [ 2362.924080][ T9522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2363.186160][T28707] Bluetooth: hci0: command tx timeout [ 2364.328915][T29326] loop5: detected capacity change from 0 to 2048 [ 2364.383980][T29326] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2364.519760][T29330] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2364.548497][T29222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2365.177150][T29222] veth0_vlan: entered promiscuous mode [ 2365.314830][T29222] veth1_vlan: entered promiscuous mode [ 2365.583353][T29222] veth0_macvtap: entered promiscuous mode [ 2365.699753][T29222] veth1_macvtap: entered promiscuous mode [ 2365.842906][T29222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2365.853860][T29222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2365.864245][T29222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2365.875947][T29222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2365.886475][T29222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2365.900656][T29222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2365.917771][T29222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2366.065487][T29222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2366.076911][T29222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2366.087314][T29222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2366.098190][T29222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2366.111544][T29222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2366.123446][T29222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2366.139384][T29222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2366.150469][T24640] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 2366.239593][T29222] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2366.249274][T29222] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2366.258577][T29222] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2366.267798][T29222] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2366.382742][T24640] usb 4-1: Using ep0 maxpacket: 16 [ 2366.405569][T24640] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2366.419179][T24640] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2366.431446][T24640] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2366.441574][T24640] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2366.451706][T24640] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2366.619313][T24640] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2366.629307][T24640] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2366.637825][T24640] usb 4-1: Manufacturer: syz [ 2366.775008][T24640] usb 4-1: config 0 descriptor?? [ 2367.313387][T24640] rc_core: IR keymap rc-hauppauge not found [ 2367.319685][T24640] Registered IR keymap rc-empty [ 2367.326212][T24640] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2367.375083][T29362] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 2367.385753][T29362] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 2367.421587][T24640] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2367.450752][T24640] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2367.465848][T24640] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input60 [ 2367.562973][T24640] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2367.623054][T24640] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2367.729582][T24640] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2367.840794][T24640] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2367.893101][T24640] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2367.928236][T24640] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2367.974123][T24640] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2367.997904][T24640] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2368.032622][T24640] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2368.083039][T24640] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2368.112483][T24640] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2368.121865][T24640] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2368.208772][T24640] usb 4-1: USB disconnect, device number 42 [ 2368.467221][T29373] loop6: detected capacity change from 0 to 2048 [ 2368.632981][T29373] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2368.645997][T29373] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2368.735544][ T30] audit: type=1800 audit(1746673422.387:385): pid=29373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.9536" name="file0" dev="loop6" ino=13 res=0 errno=0 [ 2368.753868][T29383] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9538'. [ 2369.096931][T28705] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2369.153504][T29387] loop1: detected capacity change from 0 to 512 [ 2369.189344][T29387] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 2369.191823][T29388] loop3: detected capacity change from 0 to 1024 [ 2369.198948][T29387] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2369.311171][T29387] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended [ 2369.418589][T29387] EXT4-fs error (device loop1): ext4_orphan_get:1390: comm syz.1.9540: inode #15: comm syz.1.9540: iget: illegal inode # [ 2369.472798][T29387] EXT4-fs (loop1): Remounting filesystem read-only [ 2369.484199][T29387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2369.499239][T29388] hfsplus: xattr search failed [ 2369.801795][T29387] EXT4-fs (loop1): shut down requested (1) [ 2370.103099][T28816] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2371.410281][T29420] loop1: detected capacity change from 0 to 2048 [ 2371.575621][T11747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2371.584768][T11747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2371.859077][ T9522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2371.870530][ T9522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2371.963660][T28816] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh [ 2371.996088][T28816] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh [ 2372.529525][ T9522] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2372.718306][ T9522] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2372.799770][T20139] Bluetooth: hci0: command 0x0405 tx timeout [ 2372.937366][ T9522] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2372.961251][T29440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9473'. [ 2372.978498][T29440] netlink: 'syz.0.9473': attribute type 30 has an invalid length. [ 2372.989016][T29440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9473'. [ 2373.118677][ T9522] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2373.542929][ T9522] bridge_slave_1: left allmulticast mode [ 2373.549095][ T9522] bridge_slave_1: left promiscuous mode [ 2373.556028][ T9522] bridge0: port 2(bridge_slave_1) entered disabled state [ 2373.607712][ T9522] bridge_slave_0: left allmulticast mode [ 2373.614078][ T9522] bridge_slave_0: left promiscuous mode [ 2373.620773][ T9522] bridge0: port 1(bridge_slave_0) entered disabled state [ 2374.143063][ T9522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2374.161514][ T9522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2374.177296][ T9522] bond0 (unregistering): Released all slaves [ 2374.696673][ T9522] hsr_slave_0: left promiscuous mode [ 2374.742542][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2374.812661][ T9522] hsr_slave_1: left promiscuous mode [ 2374.821148][ T9522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2374.830681][ T9522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2374.899442][ T9522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2374.909943][ T9522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2375.005263][ T9522] veth1_macvtap: left promiscuous mode [ 2375.014875][ T9522] veth0_macvtap: left promiscuous mode [ 2375.020896][ T9522] veth1_vlan: left promiscuous mode [ 2375.026827][ T9522] veth0_vlan: left promiscuous mode [ 2375.779207][T20139] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2375.842969][T20139] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2375.874315][T20139] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2376.002377][T29461] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2376.060389][T29461] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2376.060696][ T9522] team0 (unregistering): Port device team_slave_1 removed [ 2376.120734][ T9522] team0 (unregistering): Port device team_slave_0 removed [ 2376.218465][T29457] loop0: detected capacity change from 0 to 2048 [ 2376.361589][T29457] EXT4-fs (loop0): failed to initialize system zone (-117) [ 2376.386956][T29457] EXT4-fs (loop0): mount failed [ 2377.407731][T29456] chnl_net:caif_netlink_parms(): no params data found [ 2377.972977][T24640] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2378.008707][T29479] program syz.0.9572 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2378.142700][T29461] Bluetooth: hci4: command tx timeout [ 2378.152614][T24640] usb 4-1: Using ep0 maxpacket: 16 [ 2378.165319][T24640] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2378.176205][T24640] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2378.190088][T24640] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2378.201077][T24640] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2378.211235][T24640] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2378.279641][T24640] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2378.296828][T24640] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2378.306733][T24640] usb 4-1: Manufacturer: syz [ 2378.375249][T24640] usb 4-1: config 0 descriptor?? [ 2378.942696][T24640] rc_core: IR keymap rc-hauppauge not found [ 2378.948895][T24640] Registered IR keymap rc-empty [ 2378.954807][T24640] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2379.027396][T24640] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2379.063000][T24640] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2379.077869][T24640] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input61 [ 2379.094167][T29456] bridge0: port 1(bridge_slave_0) entered blocking state [ 2379.101781][T29456] bridge0: port 1(bridge_slave_0) entered disabled state [ 2379.115998][T29456] bridge_slave_0: entered allmulticast mode [ 2379.125788][T29456] bridge_slave_0: entered promiscuous mode [ 2379.174543][T24640] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2379.287812][T29456] bridge0: port 2(bridge_slave_1) entered blocking state [ 2379.296049][T29456] bridge0: port 2(bridge_slave_1) entered disabled state [ 2379.304507][T29456] bridge_slave_1: entered allmulticast mode [ 2379.321057][T29456] bridge_slave_1: entered promiscuous mode [ 2379.398888][T24640] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2379.463296][T24640] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2379.531283][T24640] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2379.562661][T24640] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2379.582538][T24640] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2379.652683][T29456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2379.653412][T24640] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2379.712996][T24640] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2379.752712][T24640] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2379.752856][T29456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2379.793162][T24640] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2379.839435][T24640] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 2379.847970][T24640] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2379.865255][T24640] usb 4-1: USB disconnect, device number 43 [ 2380.044720][T29456] team0: Port device team_slave_0 added [ 2380.067629][T29499] loop6: detected capacity change from 0 to 128 [ 2380.068736][T29456] team0: Port device team_slave_1 added [ 2380.142330][T29499] EXT4-fs (loop6): Test dummy encryption mode enabled [ 2380.217344][T29499] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2380.251210][T29461] Bluetooth: hci4: command tx timeout [ 2380.263122][T29456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2380.270325][T29456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2380.273413][T29499] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2380.296745][T29456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2380.304152][T29456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2380.326350][T29456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2380.353887][T29456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2380.706875][T29456] hsr_slave_0: entered promiscuous mode [ 2380.718872][T29456] hsr_slave_1: entered promiscuous mode [ 2380.728095][T29456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2380.736061][T29456] Cannot create hsr debugfs directory [ 2380.796254][T29510] netlink: 'syz.5.9582': attribute type 2 has an invalid length. [ 2380.946785][T28705] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2381.354302][T29515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9585'. [ 2382.373032][T29461] Bluetooth: hci4: command tx timeout [ 2382.433399][T29456] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2382.484284][T29456] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2382.534318][T29456] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2382.567818][T29456] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2383.658477][T29456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2383.849223][T29456] 8021q: adding VLAN 0 to HW filter on device team0 [ 2383.970567][ T753] bridge0: port 1(bridge_slave_0) entered blocking state [ 2383.978399][ T753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2384.089280][ T753] bridge0: port 2(bridge_slave_1) entered blocking state [ 2384.097047][ T753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2384.382967][T29461] Bluetooth: hci4: command tx timeout [ 2384.898221][T29561] netlink: 'syz.6.9603': attribute type 9 has an invalid length. [ 2384.906612][T29561] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9603'. [ 2384.933999][T29561] hsr0: entered promiscuous mode [ 2384.939684][T29561] macvlan2: entered promiscuous mode [ 2384.952947][T29561] macvlan2: entered allmulticast mode [ 2384.958639][T29561] hsr0: entered allmulticast mode [ 2384.964162][T29561] hsr_slave_0: entered allmulticast mode [ 2384.970111][T29561] hsr_slave_1: entered allmulticast mode [ 2385.740404][T29456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2386.206158][T29456] veth0_vlan: entered promiscuous mode [ 2386.320331][T29456] veth1_vlan: entered promiscuous mode [ 2386.346637][T29576] loop5: detected capacity change from 0 to 1024 [ 2386.585350][T29578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2386.600754][T29578] bond0: (slave bond1): Enslaving as an active interface with an up link [ 2386.658545][ T30] audit: type=1326 audit(1746673440.317:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29579 comm="syz.0.9611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2386.682243][ T30] audit: type=1326 audit(1746673440.317:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29579 comm="syz.0.9611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 2386.820904][T29456] veth0_macvtap: entered promiscuous mode [ 2386.900699][T29456] veth1_macvtap: entered promiscuous mode [ 2386.983468][T29456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2386.998612][T29456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2387.009896][T29456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2387.020730][T29456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2387.031364][T29456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2387.042314][T29456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2387.058461][T29456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2387.211664][T29456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2387.222668][T29456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2387.233903][T29456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2387.246386][T29456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2387.257087][T29456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2387.267994][T29456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2387.283970][T29456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2387.459498][T29456] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2387.469313][T29456] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2387.478629][T29456] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2387.487818][T29456] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2387.560626][ T30] audit: type=1326 audit(1746673441.207:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29592 comm="syz.5.9616" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 2387.648966][ T30] audit: type=1326 audit(1746673441.267:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29592 comm="syz.5.9616" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 2387.674068][ T30] audit: type=1326 audit(1746673441.267:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29592 comm=04 exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 2387.696267][ T30] audit: type=1326 audit(1746673441.267:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29592 comm=04 exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 2387.720297][ T30] audit: type=1326 audit(1746673441.287:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29592 comm=04 exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 2387.743031][ T30] audit: type=1326 audit(1746673441.287:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29592 comm=04 exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 2387.764857][ T30] audit: type=1326 audit(1746673441.287:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29592 comm=04 exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 2388.197987][T29601] loop5: detected capacity change from 0 to 256 [ 2388.227213][T29601] exfat: Deprecated parameter 'namecase' [ 2388.233836][T29601] exfat: Deprecated parameter 'namecase' [ 2388.370945][T29601] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 2389.086444][T29612] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9622'. [ 2389.810240][T11764] kernel write not supported for file /137/attr/sockcreate (pid: 11764 comm: kworker/0:3) [ 2390.051487][T29627] netlink: 'syz.5.9628': attribute type 1 has an invalid length. [ 2391.706812][T29649] loop0: detected capacity change from 0 to 1024 [ 2391.816351][T29649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2392.325888][T29222] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2393.052914][ T9522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2393.061153][ T9522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2393.172618][ T9522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2393.180792][ T9522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2393.464770][T29682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9646'. [ 2394.756363][T29697] loop3: detected capacity change from 0 to 2048 [ 2394.839888][T29697] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 2394.849399][T29697] UDF-fs: Scanning with blocksize 512 failed [ 2394.950267][T29697] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2395.103063][T18833] kernel write not supported for file /input/mouse0 (pid: 18833 comm: kworker/1:0) [ 2395.110634][T29703] loop6: detected capacity change from 0 to 16 [ 2396.482695][T29721] loop5: detected capacity change from 0 to 16 [ 2396.544843][T29721] erofs (device loop5): mounted with root inode @ nid 36. [ 2397.001604][T29729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9667'. [ 2397.574822][T29735] loop2: detected capacity change from 0 to 256 [ 2397.996165][T29741] loop3: detected capacity change from 0 to 64 [ 2398.123959][T29741] syz.3.9673: attempt to access beyond end of device [ 2398.123959][T29741] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 2398.137975][T29741] buffer_io_error: 312 callbacks suppressed [ 2398.138052][T29741] Buffer I/O error on dev loop3, logical block 512, async page read [ 2398.156778][T29741] syz.3.9673: attempt to access beyond end of device [ 2398.156778][T29741] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 2398.171497][T29741] Buffer I/O error on dev loop3, logical block 56576, async page read [ 2398.249744][T29747] loop2: detected capacity change from 0 to 64 [ 2398.288502][T29746] sp0: Synchronizing with TNC [ 2398.313811][T29743] loop0: detected capacity change from 0 to 1024 [ 2398.573420][T29743] hfsplus: bad catalog entry type [ 2398.922417][T29751] loop3: detected capacity change from 0 to 512 [ 2398.922484][ T9522] hfsplus: b-tree write err: -5, ino 4 [ 2398.999681][T29751] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 2399.106101][T29751] EXT4-fs (loop3): 1 truncate cleaned up [ 2399.115090][T29751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2399.115409][T29757] loop2: detected capacity change from 0 to 64 [ 2399.204857][T29751] fscrypt (loop3, inode 18): Direct key flag not allowed with different contents and filenames modes [ 2399.484604][T21539] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2399.505144][T29760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9681'. [ 2399.549015][T29456] hfs: node 4:3 still has 1 user(s)! [ 2399.671365][T29763] netlink: 'syz.5.9683': attribute type 4 has an invalid length. [ 2399.679906][T29763] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9683'. [ 2399.692876][T29763] NCSI netlink: No device for ifindex 6906736 [ 2400.159996][T29770] pim6reg: entered allmulticast mode [ 2400.192780][T29768] pim6reg: left allmulticast mode [ 2400.395403][T29776] loop5: detected capacity change from 0 to 64 [ 2400.474461][ T30] audit: type=1800 audit(1746673454.127:395): pid=29776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.9688" name="file1" dev="loop5" ino=18 res=0 errno=0 [ 2401.871408][T11764] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 2402.053221][T11764] usb 3-1: Using ep0 maxpacket: 16 [ 2402.083096][T11764] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2402.093976][T11764] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2402.105267][T11764] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2402.115342][T11764] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2402.125596][T11764] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2402.141706][T18833] kernel write not supported for file /input/mice (pid: 18833 comm: kworker/1:0) [ 2402.275503][T11764] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2402.285237][T11764] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2402.293638][T11764] usb 3-1: Manufacturer: syz [ 2402.335050][T11764] usb 3-1: config 0 descriptor?? [ 2402.802162][T29805] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9701'. [ 2402.982331][T11764] rc_core: IR keymap rc-hauppauge not found [ 2402.988521][T11764] Registered IR keymap rc-empty [ 2402.994766][T11764] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2403.052863][T11764] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2403.103484][T11764] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 2403.118236][T11764] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input62 [ 2403.218829][T11764] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2403.336602][T11764] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2403.373337][T11764] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2403.417310][T11764] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2403.457718][T11764] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2403.498535][T11764] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2403.552614][T11764] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2403.574306][T11764] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2403.622684][T11764] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2403.653068][T11764] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2403.688785][T11764] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2403.698727][T11764] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2403.781208][T11764] usb 3-1: USB disconnect, device number 6 [ 2404.115442][T29820] loop3: detected capacity change from 0 to 512 [ 2404.134971][T29820] EXT4-fs: Ignoring removed orlov option [ 2404.149890][T29822] loop5: detected capacity change from 0 to 8 [ 2404.228667][T29820] EXT4-fs error (device loop3): ext4_orphan_get:1390: inode #15: comm syz.3.9709: casefold flag without casefold feature [ 2404.313298][T29820] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.9709: couldn't read orphan inode 15 (err -117) [ 2404.360323][T29820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2404.485493][T29824] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 217 vs 220 free clusters [ 2404.618367][T21539] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2404.721946][T29828] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9713'. [ 2404.928779][T29832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9715'. [ 2404.958563][T29832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9715'. [ 2405.042497][T11764] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 2405.265297][T11764] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 2405.274937][T11764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2405.283368][T11764] usb 3-1: Product: syz [ 2405.287802][T11764] usb 3-1: Manufacturer: syz [ 2405.292979][T11764] usb 3-1: SerialNumber: syz [ 2405.359620][T11764] usb 3-1: config 0 descriptor?? [ 2406.256909][T29844] loop6: detected capacity change from 0 to 512 [ 2406.310662][T29845] loop3: detected capacity change from 0 to 1024 [ 2406.328246][T29845] EXT4-fs: Ignoring removed orlov option [ 2406.373217][T29844] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2406.386866][T29844] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2406.430363][T29845] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2406.458834][T11764] cx82310_eth 3-1:0.0: probe with driver cx82310_eth failed with error -22 [ 2406.486162][T11764] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 2406.501738][T11764] usb 3-1: USB disconnect, device number 7 [ 2406.506914][T29845] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 2406.575557][T29844] EXT4-fs (loop6): shut down requested (2) [ 2406.606789][T29845] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2406.747199][T28705] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2406.920778][ T30] audit: type=1800 audit(1746673460.577:396): pid=29853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9723" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 2407.069519][T21539] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2407.496049][T29855] loop5: detected capacity change from 0 to 4096 [ 2407.597103][T29861] loop3: detected capacity change from 0 to 1024 [ 2407.647882][T29861] EXT4-fs: Ignoring removed nobh option [ 2407.654187][T29861] EXT4-fs: Ignoring removed bh option [ 2407.660093][T29863] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9728'. [ 2407.703428][T29864] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2407.807806][T29861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2407.959650][T29861] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #14: comm syz.3.9727: attempt to clear invalid blocks 1886221359 len 1 [ 2408.305940][T21539] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2408.889758][ T70] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2409.087556][ T70] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2409.149568][T29881] loop6: detected capacity change from 0 to 2048 [ 2409.259471][ T70] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2409.320617][T29881] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2409.517730][ T70] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2409.825157][ T70] bridge_slave_1: left allmulticast mode [ 2409.835039][ T70] bridge_slave_1: left promiscuous mode [ 2409.841762][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 2409.872866][T28705] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2409.883639][ T70] bridge_slave_0: left allmulticast mode [ 2409.889557][ T70] bridge_slave_0: left promiscuous mode [ 2409.896658][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 2410.525179][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2410.546996][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2410.574150][ T70] bond0 (unregistering): Released all slaves [ 2410.597412][ T70] bond1 (unregistering): Released all slaves [ 2411.178357][ T70] hsr_slave_0: left promiscuous mode [ 2411.214056][ T70] hsr_slave_1: left promiscuous mode [ 2411.353050][ T70] veth1_macvtap: left promiscuous mode [ 2411.359152][ T70] veth1_vlan: left promiscuous mode [ 2411.368106][ T70] veth0_vlan: left promiscuous mode [ 2411.724804][T28707] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2411.766993][T28707] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2411.781406][T28707] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2411.848505][T28707] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2411.868702][T28707] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2412.313870][T29903] loop0: detected capacity change from 0 to 512 [ 2412.329116][ T70] team0 (unregistering): Port device team_slave_1 removed [ 2412.355183][T29903] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 2412.373074][ T70] team0 (unregistering): Port device team_slave_0 removed [ 2412.773517][ T30] audit: type=1804 audit(1746673466.427:397): pid=29911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.9749" name="/newroot/18/bus" dev="tmpfs" ino=112 res=1 errno=0 [ 2412.813520][T29903] EXT4-fs (loop0): 1 truncate cleaned up [ 2412.822499][T29903] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2413.554281][ T70] IPVS: stop unused estimator thread 0... [ 2413.634422][T29222] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2413.698746][T29897] chnl_net:caif_netlink_parms(): no params data found [ 2413.903173][T28707] Bluetooth: hci3: command tx timeout [ 2414.366841][T29927] loop6: detected capacity change from 0 to 128 [ 2414.402856][T29927] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 2414.428641][T29927] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2414.827730][T29897] bridge0: port 1(bridge_slave_0) entered blocking state [ 2414.828325][T29932] loop2: detected capacity change from 0 to 256 [ 2414.838723][T29897] bridge0: port 1(bridge_slave_0) entered disabled state [ 2414.857635][T29897] bridge_slave_0: entered allmulticast mode [ 2414.867524][T29897] bridge_slave_0: entered promiscuous mode [ 2414.949668][T29932] exfat: Deprecated parameter 'utf8' [ 2414.956274][T29932] exfat: Deprecated parameter 'utf8' [ 2414.962727][T29932] exfat: Deprecated parameter 'utf8' [ 2414.967566][T29897] bridge0: port 2(bridge_slave_1) entered blocking state [ 2414.976560][T29897] bridge0: port 2(bridge_slave_1) entered disabled state [ 2414.986344][T29897] bridge_slave_1: entered allmulticast mode [ 2414.996413][T29897] bridge_slave_1: entered promiscuous mode [ 2415.070180][T29932] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 2415.346732][T29897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2415.446059][T29897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2415.818078][T29897] team0: Port device team_slave_0 added [ 2415.875555][T29897] team0: Port device team_slave_1 added [ 2415.891414][T29945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9762'. [ 2415.902435][T29945] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9762'. [ 2415.931348][T29945] gretap1: entered promiscuous mode [ 2415.983965][T28707] Bluetooth: hci3: command tx timeout [ 2416.137816][T29897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2416.145885][T29897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2416.172429][T29897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2416.287863][T29897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2416.297371][T29897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2416.324957][T29897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2416.769884][T29897] hsr_slave_0: entered promiscuous mode [ 2416.781126][T29897] hsr_slave_1: entered promiscuous mode [ 2416.888166][ T1565] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2417.146951][ T1565] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2417.159120][ T1565] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2417.169344][ T1565] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 2417.178879][ T1565] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2417.274820][ T1565] usb 4-1: config 0 descriptor?? [ 2417.702201][ T1565] arvo 0003:1E7D:30D4.0057: unknown main item tag 0x0 [ 2417.781695][ T1565] arvo 0003:1E7D:30D4.0057: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 2417.915056][ T1565] arvo 0003:1E7D:30D4.0057: couldn't init struct arvo_device [ 2417.927456][ T1565] arvo 0003:1E7D:30D4.0057: couldn't install keyboard [ 2417.961500][T29966] loop2: detected capacity change from 0 to 128 [ 2417.995835][ T1565] arvo 0003:1E7D:30D4.0057: probe with driver arvo failed with error -71 [ 2418.035924][ T1565] usb 4-1: USB disconnect, device number 44 [ 2418.072891][T28707] Bluetooth: hci3: command tx timeout [ 2418.399438][T29897] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2418.425170][T29897] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2418.456555][T29897] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2418.563662][T29897] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2419.757995][T29897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2419.976202][T29897] 8021q: adding VLAN 0 to HW filter on device team0 [ 2420.098576][T11747] bridge0: port 1(bridge_slave_0) entered blocking state [ 2420.106368][T11747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2420.171146][T28707] Bluetooth: hci3: command tx timeout [ 2420.206594][T11747] bridge0: port 2(bridge_slave_1) entered blocking state [ 2420.214328][T11747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2421.997559][T29897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2422.335694][T30011] loop6: detected capacity change from 0 to 2048 [ 2422.448997][T30020] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2422.509718][ T30] audit: type=1800 audit(1746673476.167:398): pid=30011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.9791" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 2422.596170][T30020] NILFS (loop6): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 2422.607473][T30020] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=16) [ 2422.648871][T30020] Remounting filesystem read-only [ 2422.662743][T30021] NILFS (loop6): error -2 truncating bmap (ino=16) [ 2422.703166][ T30] audit: type=1800 audit(1746673476.327:399): pid=30021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.9791" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 2422.737455][T30016] loop2: detected capacity change from 0 to 4096 [ 2423.000069][T30016] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 2423.156577][T28705] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 2423.620843][T30033] loop3: detected capacity change from 0 to 1024 [ 2423.677307][T30033] EXT4-fs: Ignoring removed orlov option [ 2423.747454][T30033] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2423.777121][T30033] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 2423.968693][T30033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2424.156595][T30033] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 2424.208534][T29897] veth0_vlan: entered promiscuous mode [ 2424.279879][T30042] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 2424.301477][T29897] veth1_vlan: entered promiscuous mode [ 2424.563507][T29897] veth0_macvtap: entered promiscuous mode [ 2424.634210][T30046] vxcan1: tx address claim with dlc 0 [ 2424.640757][T29897] veth1_macvtap: entered promiscuous mode [ 2424.820840][T29897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2424.832940][T29897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2424.843515][T29897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2424.863607][T29897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2424.872493][T21539] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2424.874056][T29897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2424.898977][T29897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2424.909427][T29897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2424.921229][T29897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2424.937919][T29897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2425.159766][T29897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2425.171109][T29897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2425.181306][T29897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2425.197057][T29897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2425.209167][T29897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2425.220031][T29897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2425.230324][T29897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2425.241132][T29897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2425.256964][T29897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2425.341074][T29897] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2425.351464][T29897] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2425.363810][T29897] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2425.373236][T29897] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2426.540221][T30064] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 2426.551600][T11764] IPVS: starting estimator thread 0... [ 2426.612536][T30057] loop2: detected capacity change from 0 to 32768 [ 2426.643497][T30066] IPVS: using max 240 ests per chain, 12000 per kthread [ 2426.643809][T30057] (syz.2.9807,30057,1):ocfs2_sb_probe:759 ERROR: incompatible version: 2.33686018 [ 2426.660446][T30057] (syz.2.9807,30057,1):ocfs2_sb_probe:772 ERROR: This is an ocfs v1 filesystem which must be upgraded before mounting with ocfs v2 [ 2426.675301][T30057] (syz.2.9807,30057,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 2426.684640][T30057] (syz.2.9807,30057,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 2427.539413][T30073] loop3: detected capacity change from 0 to 8 [ 2427.680449][T30073] SQUASHFS error: lzo decompression failed, data probably corrupt [ 2427.690290][T30073] SQUASHFS error: Failed to read block 0x91: -5 [ 2427.697184][T30073] SQUASHFS error: Unable to read metadata cache entry [8f] [ 2427.704880][T30073] SQUASHFS error: Unable to read inode 0x13f [ 2427.874191][T30079] Bluetooth: MGMT ver 1.23 [ 2432.037194][T30125] loop2: detected capacity change from 0 to 1024 [ 2432.352723][ T9522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2432.363432][ T9522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2432.453213][T11747] hfsplus: b-tree write err: -5, ino 4 [ 2432.540764][T11747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2432.549746][T11747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2433.107589][T29461] Bluetooth: hci1: command 0x0406 tx timeout [ 2433.669529][T30143] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9740'. [ 2434.316877][T30153] pim6reg: tun_chr_ioctl cmd 1074025677 [ 2434.323546][T30153] pim6reg: linktype set to 0 [ 2435.571703][T30169] loop3: detected capacity change from 0 to 128 [ 2435.669856][T30169] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2435.783154][T30169] ext4 filesystem being mounted at /764/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2436.128989][T30177] loop0: detected capacity change from 0 to 2048 [ 2436.175986][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2436.230051][T21539] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2436.310391][T30177] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2437.978846][T30203] input: syz0 as /devices/virtual/input/input63 [ 2438.032346][T30205] program syz.8.9864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2438.583379][T30211] loop2: detected capacity change from 0 to 2048 [ 2438.681440][T30211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2438.695084][T30211] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2438.721877][T30215] loop6: detected capacity change from 0 to 256 [ 2438.764781][T30215] exfat: Deprecated parameter 'utf8' [ 2438.867792][T30215] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xaf973ef3, utbl_chksum : 0xe619d30d) [ 2439.135745][T29456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2440.976410][T30242] loop3: detected capacity change from 0 to 4096 [ 2441.308464][T30242] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 2441.491015][T30242] ntfs3(loop3): Failed to load $Extend (-22). [ 2441.497679][T30242] ntfs3(loop3): Failed to initialize $Extend. [ 2441.837016][T30258] input: syz0 as /devices/virtual/input/input64 [ 2442.042457][T30261] loop2: detected capacity change from 0 to 1024 [ 2442.240425][T30261] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 2442.247399][T30261] hfsplus: xattr searching failed [ 2442.473056][T30269] loop8: detected capacity change from 0 to 128 [ 2442.522676][T30269] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2442.529698][T30269] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2442.570161][T30269] EXT4-fs (loop8): Test dummy encryption mode enabled [ 2442.604067][T30269] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2442.635872][T30269] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2442.661311][ T70] hfsplus: b-tree write err: -5, ino 4 [ 2443.031110][T29897] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2443.328751][T30281] loop0: detected capacity change from 0 to 1024 [ 2443.399771][T30281] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 2443.410044][T30281] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 2443.500007][T30281] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 2443.510803][T30281] EXT4-fs (loop0): orphan cleanup on readonly fs [ 2443.554710][T30281] EXT4-fs error (device loop0): ext4_read_inode_bitmap:167: comm syz.0.9895: Inode bitmap for bg 0 marked uninitialized [ 2443.655167][T30281] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2443.958786][T30280] loop3: detected capacity change from 0 to 4096 [ 2444.012680][T30280] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 2444.187707][T29222] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2444.385865][T30280] ntfs3(loop3): ino=1a, mi_enum_attr [ 2444.391535][T30280] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 2444.473461][T30280] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 2445.648070][T30316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9910'. [ 2446.918309][T30336] loop0: detected capacity change from 0 to 64 [ 2447.169530][T30342] loop3: detected capacity change from 0 to 128 [ 2447.245974][T30342] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2447.298231][T30342] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2447.704074][ T9522] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2448.065974][T30354] bond1: entered promiscuous mode [ 2448.071301][T30354] bond1: entered allmulticast mode [ 2448.078812][T30354] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2448.134207][T30354] bond1 (unregistering): Released all slaves [ 2449.212519][T30373] loop0: detected capacity change from 0 to 128 [ 2449.265806][T30373] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2449.311559][T30373] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2449.493373][T30373] fscrypt (loop0, inode 12): Unsupported encryption flags (0x29) [ 2449.825410][T30383] loop3: detected capacity change from 0 to 128 [ 2449.855333][T29222] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2450.067878][T30385] loop2: detected capacity change from 0 to 2048 [ 2450.098964][T30383] FAT-fs (loop3): error, corrupted directory (invalid i_start) [ 2450.108273][T30383] FAT-fs (loop3): Filesystem has been set read-only [ 2450.186250][T30385] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2450.306743][T30388] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2450.368294][T30390] loop8: detected capacity change from 0 to 128 [ 2450.744473][T30388] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 2450.756444][T30388] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 2450.817331][T30388] Remounting filesystem read-only [ 2450.840754][T29456] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 2451.256322][T30397] netlink: 71 bytes leftover after parsing attributes in process `syz.8.9944'. [ 2452.656582][T30407] loop8: detected capacity change from 0 to 128 [ 2452.677418][T30407] EXT4-fs: Ignoring removed nobh option [ 2452.713622][T30407] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2452.793819][T30407] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2452.947482][T30407] EXT4-fs (loop8): shut down requested (0) [ 2453.302809][T29897] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2453.438078][T30418] loop3: detected capacity change from 0 to 512 [ 2453.488288][T30418] EXT4-fs (loop3): blocks per group (255) and clusters per group (8192) inconsistent [ 2455.315817][T30442] loop2: detected capacity change from 0 to 128 [ 2455.344165][T30442] EXT4-fs: Ignoring removed nobh option [ 2455.378701][T30442] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2455.413383][T30442] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2455.914951][T29456] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2456.443221][T30460] loop0: detected capacity change from 0 to 512 [ 2456.465595][T30459] loop2: detected capacity change from 0 to 512 [ 2456.487521][T30460] EXT4-fs: Ignoring removed mblk_io_submit option [ 2456.500136][T30459] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2456.588619][T30460] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2456.765614][T30459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 2456.779149][T30459] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2457.067458][T29222] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2457.275051][T29456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 2457.607028][T30474] loop0: detected capacity change from 0 to 256 [ 2457.674898][T30474] vfat: Unknown parameter 'una_xlate' [ 2458.741596][T11747] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2458.970651][T11747] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2459.170548][T11747] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2459.398669][T11747] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2459.882684][T11747] bridge_slave_1: left allmulticast mode [ 2459.888634][T11747] bridge_slave_1: left promiscuous mode [ 2459.895565][T11747] bridge0: port 2(bridge_slave_1) entered disabled state [ 2459.946728][T11747] bridge_slave_0: left allmulticast mode [ 2459.952912][T11747] bridge_slave_0: left promiscuous mode [ 2459.959500][T11747] bridge0: port 1(bridge_slave_0) entered disabled state [ 2460.444025][T11747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2460.504952][T11747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2460.564958][T11747] bond0 (unregistering): Released all slaves [ 2461.004382][T11747] hsr_slave_0: left promiscuous mode [ 2461.033804][T11747] hsr_slave_1: left promiscuous mode [ 2461.045517][T11747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2461.053490][T11747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2461.115071][T11747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2461.123064][T11747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2461.214298][T11747] veth1_macvtap: left promiscuous mode [ 2461.220133][T11747] veth0_macvtap: left promiscuous mode [ 2461.226436][T11747] veth1_vlan: left promiscuous mode [ 2461.238660][T11747] veth0_vlan: left promiscuous mode [ 2462.373382][T11747] team0 (unregistering): Port device team_slave_1 removed [ 2462.423662][T11747] team0 (unregistering): Port device team_slave_0 removed [ 2462.494681][T29461] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2462.505048][T29461] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2462.515918][T29461] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2462.530400][T29461] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2462.542923][T29461] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2464.384298][T30506] chnl_net:caif_netlink_parms(): no params data found [ 2464.622344][T29461] Bluetooth: hci0: command tx timeout [ 2465.790885][T30506] bridge0: port 1(bridge_slave_0) entered blocking state [ 2465.798771][T30506] bridge0: port 1(bridge_slave_0) entered disabled state [ 2465.807375][T30506] bridge_slave_0: entered allmulticast mode [ 2465.817304][T30506] bridge_slave_0: entered promiscuous mode [ 2465.886783][T30506] bridge0: port 2(bridge_slave_1) entered blocking state [ 2465.895048][T30506] bridge0: port 2(bridge_slave_1) entered disabled state [ 2465.903080][T30506] bridge_slave_1: entered allmulticast mode [ 2465.920525][T30506] bridge_slave_1: entered promiscuous mode [ 2466.215887][T30539] loop2: detected capacity change from 0 to 128 [ 2466.219869][T30536] loop3: detected capacity change from 0 to 1024 [ 2466.244485][T30539] adfs: Bad value for 'uid' [ 2466.254511][T30539] adfs: Bad value for 'uid' [ 2466.344550][T30506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2466.412546][T30506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2466.702590][T29461] Bluetooth: hci0: command tx timeout [ 2466.809113][T30506] team0: Port device team_slave_0 added [ 2466.818550][ T70] hfsplus: b-tree write err: -5, ino 4 [ 2466.883550][T30506] team0: Port device team_slave_1 added [ 2467.194011][T30506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2467.201291][T30506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2467.227821][T30506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2467.328861][T30506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2467.336362][T30506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2467.362887][ C0] vkms_vblank_simulate: vblank timer overrun [ 2467.369749][T30506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2467.793835][T30506] hsr_slave_0: entered promiscuous mode [ 2467.804630][T30506] hsr_slave_1: entered promiscuous mode [ 2467.813696][T30506] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2467.821501][T30506] Cannot create hsr debugfs directory [ 2468.324064][T30559] netlink: 124 bytes leftover after parsing attributes in process `syz.2.10013'. [ 2468.792626][T29461] Bluetooth: hci0: command tx timeout [ 2470.050252][T30506] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2470.128360][T30506] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2470.213877][T30506] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2470.303699][T30506] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2470.862719][T29461] Bluetooth: hci0: command tx timeout [ 2471.954669][T30506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2472.207617][T30506] 8021q: adding VLAN 0 to HW filter on device team0 [ 2472.337495][T11747] bridge0: port 1(bridge_slave_0) entered blocking state [ 2472.345234][T11747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2472.457061][T11747] bridge0: port 2(bridge_slave_1) entered blocking state [ 2472.464806][T11747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2473.403904][T30602] loop8: detected capacity change from 0 to 128 [ 2473.640612][T30605] loop3: detected capacity change from 0 to 128 [ 2473.706956][T30605] FAT-fs (loop3): bogus logical sector size 256 [ 2473.714294][T30605] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2474.248380][T30506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2475.607214][T30635] loop3: detected capacity change from 0 to 256 [ 2475.646695][T30635] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2476.221829][T30641] loop2: detected capacity change from 0 to 256 [ 2476.314332][T30506] veth0_vlan: entered promiscuous mode [ 2476.450181][T30506] veth1_vlan: entered promiscuous mode [ 2476.724639][T30644] loop3: detected capacity change from 0 to 256 [ 2476.785266][T30506] veth0_macvtap: entered promiscuous mode [ 2476.853276][T30644] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 2476.905928][T30506] veth1_macvtap: entered promiscuous mode [ 2477.125871][T30506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2477.137418][T30506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2477.147701][T30506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2477.158557][T30506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2477.168793][T30506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2477.179666][T30506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2477.191363][T30506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2477.202595][T30506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2477.219852][T30506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2477.239684][T30649] loop2: detected capacity change from 0 to 1024 [ 2477.375649][T30649] EXT4-fs error (device loop2): ext4_orphan_get:1416: comm syz.2.10047: bad orphan inode 196608 [ 2477.424650][T30506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2477.435586][T30506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2477.445925][T30506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2477.456832][T30506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2477.467191][T30506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2477.478622][T30506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2477.488888][T30506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2477.499827][T30506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2477.517576][T30506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2477.630907][T30649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2477.774788][T30506] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2477.785397][T30506] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2477.794574][T30506] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2477.803891][T30506] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2478.134557][T30661] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10049'. [ 2478.651892][T29456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2479.953159][T30679] loop8: detected capacity change from 0 to 2048 [ 2480.057861][T30679] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2480.071015][T30679] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2480.490653][T29897] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2480.777818][T30693] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10058'. [ 2480.787744][T30693] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10058'. [ 2480.820549][T30693] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2480.829984][T30693] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2480.839188][T30693] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2480.848384][T30693] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2481.070568][T30697] netlink: 'syz.8.10060': attribute type 8 has an invalid length. [ 2481.080330][T30697] bridge0: port 2(bridge_slave_1) entered disabled state [ 2481.090643][T30697] bridge0: port 1(bridge_slave_0) entered disabled state [ 2481.105135][T30697] bridge0: entered allmulticast mode [ 2481.611057][T11764] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 2481.809721][T11764] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2481.826345][T11764] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2481.838294][T11764] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 2481.847742][T11764] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2481.923269][T11764] usb 3-1: config 0 descriptor?? [ 2482.405846][T11764] cm6533_jd 0003:0D8C:0022.0058: item fetching failed at offset 1/5 [ 2482.424970][T11764] cm6533_jd 0003:0D8C:0022.0058: parse failed [ 2482.439065][T11764] cm6533_jd 0003:0D8C:0022.0058: probe with driver cm6533_jd failed with error -22 [ 2482.647458][T11764] usb 3-1: USB disconnect, device number 8 [ 2482.824828][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2482.833641][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2482.898102][T30710] loop8: detected capacity change from 0 to 2048 [ 2482.919537][ T753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2482.928025][ T753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2483.037967][T30710] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2483.196864][T30710] EXT4-fs error (device loop8): ext4_find_inline_data_nolock:169: inode #12: comm syz.8.10064: inline data xattr refers to an external xattr inode [ 2483.273982][T30710] EXT4-fs (loop8): Remounting filesystem read-only [ 2483.286764][T30718] EXT4-fs (loop8): shut down requested (0) [ 2483.537990][T29897] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2483.924121][T30724] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9988'. [ 2484.262960][T30728] loop2: detected capacity change from 0 to 256 [ 2484.340381][T30726] loop8: detected capacity change from 0 to 2048 [ 2484.367834][T30726] EXT4-fs: Ignoring removed mblk_io_submit option [ 2484.433466][T30726] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2484.470898][T30728] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 2484.894349][T29897] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2485.443388][T30742] loop8: detected capacity change from 0 to 512 [ 2485.483705][T30742] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 2485.498872][T30742] EXT4-fs (loop8): orphan cleanup on readonly fs [ 2485.521520][T30742] EXT4-fs warning (device loop8): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 2485.642923][T30742] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 2485.702824][T30742] EXT4-fs error (device loop8): ext4_orphan_get:1390: inode #16: comm syz.8.10073: invalid fast symlink length 9000 [ 2485.758803][T30742] EXT4-fs error (device loop8): ext4_orphan_get:1395: comm syz.8.10073: couldn't read orphan inode 16 (err -117) [ 2485.864872][T30742] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2486.092540][T30750] loop2: detected capacity change from 0 to 1024 [ 2486.266175][T29897] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2486.310851][T30752] loop7: detected capacity change from 0 to 1024 [ 2486.448632][T11747] hfsplus: b-tree write err: -5, ino 4 [ 2487.548654][T30764] loop7: detected capacity change from 0 to 1024 [ 2487.902407][T30769] loop3: detected capacity change from 0 to 1024 [ 2487.931424][T30769] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2488.032897][T10067] hfsplus: b-tree write err: -5, ino 4 [ 2488.144079][T30769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2488.627148][T21539] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2490.264654][T30791] loop7: detected capacity change from 0 to 4096 [ 2490.303072][T30791] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 2490.331887][T30798] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10098'. [ 2492.178597][T30823] loop3: detected capacity change from 0 to 64 [ 2493.233810][T30837] netlink: 'syz.6.10114': attribute type 39 has an invalid length. [ 2493.895301][T30843] loop2: detected capacity change from 0 to 128 [ 2494.432203][T30849] input: syz0 as /devices/virtual/input/input66 [ 2495.180702][T30855] loop8: detected capacity change from 0 to 4096 [ 2495.489608][T30855] ntfs3(loop8): Failed to initialize $Extend/$ObjId. [ 2495.663484][T30855] ntfs3(loop8): ino=21, "file1" fallocate(0x11) is not supported [ 2495.731387][T30865] loop3: detected capacity change from 0 to 64 [ 2496.300350][T30869] loop2: detected capacity change from 0 to 4096 [ 2496.397802][T30869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2497.045172][T29456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2497.627473][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2497.850279][T30889] netlink: 72 bytes leftover after parsing attributes in process `syz.7.10140'. [ 2498.067123][T30891] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 2498.425377][T30898] pim6reg: tun_chr_ioctl cmd 2147767520 [ 2498.781066][T30904] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 0 [ 2498.900090][T30900] bridge0: port 2(bridge_slave_1) entered disabled state [ 2499.665134][T28707] Bluetooth: hci4: command 0x0406 tx timeout [ 2499.892488][T27999] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2500.072832][T27999] usb 4-1: Using ep0 maxpacket: 8 [ 2500.114332][T27999] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2500.125232][T27999] usb 4-1: config 0 has no interfaces? [ 2500.131037][T27999] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2500.140550][T27999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2500.190609][T27999] usb 4-1: config 0 descriptor?? [ 2500.336168][ T3571] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2500.347124][ T3571] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2500.444599][T27999] usb 4-1: USB disconnect, device number 45 [ 2500.506769][ T3571] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2500.517743][ T3571] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2500.699844][ T3571] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2500.710803][ T3571] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2500.880556][ T3571] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2500.891432][ T3571] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2500.968380][T30926] netem: incorrect gi model size [ 2500.977500][T30926] netem: change failed [ 2501.323001][ T3571] bridge_slave_1: left allmulticast mode [ 2501.328956][ T3571] bridge_slave_1: left promiscuous mode [ 2501.336000][ T3571] bridge0: port 2(bridge_slave_1) entered disabled state [ 2501.381884][ T3571] bridge_slave_0: left allmulticast mode [ 2501.388075][ T3571] bridge_slave_0: left promiscuous mode [ 2501.394861][ T3571] bridge0: port 1(bridge_slave_0) entered disabled state [ 2502.034540][ T3571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2502.059413][ T3571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2502.127961][ T3571] bond0 (unregistering): (slave bond1): Releasing backup interface [ 2502.141759][ T3571] bond0 (unregistering): Released all slaves [ 2502.167395][ T3571] bond1 (unregistering): Released all slaves [ 2502.750637][T30935] netlink: 830 bytes leftover after parsing attributes in process `syz.7.10162'. [ 2502.926204][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2502.934786][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2503.016408][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2503.024446][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2503.172398][ T3571] hsr0: left allmulticast mode [ 2503.178390][ T3571] veth1_macvtap: left promiscuous mode [ 2503.184571][ T3571] veth0_macvtap: left promiscuous mode [ 2503.192756][ T3571] veth1_vlan: left promiscuous mode [ 2503.198409][ T3571] veth0_vlan: left promiscuous mode [ 2503.445256][T30938] loop8: detected capacity change from 0 to 256 [ 2503.508024][T28707] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2503.517837][T28707] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2503.549612][T28707] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2503.565590][T28707] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2503.583800][T28707] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2503.835294][T30946] loop7: detected capacity change from 0 to 128 [ 2503.863229][T30938] FAT-fs (loop8): Directory bread(block 64) failed [ 2503.870211][T30938] FAT-fs (loop8): Directory bread(block 65) failed [ 2503.878068][T30938] FAT-fs (loop8): Directory bread(block 66) failed [ 2503.885118][T30938] FAT-fs (loop8): Directory bread(block 67) failed [ 2503.892269][T30938] FAT-fs (loop8): Directory bread(block 68) failed [ 2503.899068][T30938] FAT-fs (loop8): Directory bread(block 69) failed [ 2503.906247][T30938] FAT-fs (loop8): Directory bread(block 70) failed [ 2503.915383][T30938] FAT-fs (loop8): Directory bread(block 71) failed [ 2503.923658][T30938] FAT-fs (loop8): Directory bread(block 72) failed [ 2503.930472][T30938] FAT-fs (loop8): Directory bread(block 73) failed [ 2504.131616][ T3571] team0 (unregistering): Port device team_slave_1 removed [ 2504.164762][ T3571] team0 (unregistering): Port device team_slave_0 removed [ 2504.254981][ T30] audit: type=1800 audit(1746677652.910:400): pid=30946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.10168" name="file1" dev="loop7" ino=1118 res=0 errno=0 [ 2505.463717][ T3571] IPVS: stop unused estimator thread 0... [ 2505.630458][T30942] chnl_net:caif_netlink_parms(): no params data found [ 2505.753189][T28707] Bluetooth: hci1: command tx timeout [ 2506.910331][T30942] bridge0: port 1(bridge_slave_0) entered blocking state [ 2506.918302][T30942] bridge0: port 1(bridge_slave_0) entered disabled state [ 2506.926343][T30942] bridge_slave_0: entered allmulticast mode [ 2506.936192][T30942] bridge_slave_0: entered promiscuous mode [ 2507.203892][T30942] bridge0: port 2(bridge_slave_1) entered blocking state [ 2507.211676][T30942] bridge0: port 2(bridge_slave_1) entered disabled state [ 2507.219686][T30942] bridge_slave_1: entered allmulticast mode [ 2507.229670][T30942] bridge_slave_1: entered promiscuous mode [ 2507.838008][T30942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2507.860877][T28707] Bluetooth: hci1: command tx timeout [ 2507.885465][T30942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2508.241006][T30942] team0: Port device team_slave_0 added [ 2508.284409][T30942] team0: Port device team_slave_1 added [ 2508.614227][T30942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2508.623660][T30942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2508.654721][T30942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2508.713289][T30942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2508.722864][T30942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2508.750012][T30942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2509.135794][T30942] hsr_slave_0: entered promiscuous mode [ 2509.146460][T30942] hsr_slave_1: entered promiscuous mode [ 2509.162731][T30942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2509.170563][T30942] Cannot create hsr debugfs directory [ 2509.903112][T28707] Bluetooth: hci1: command tx timeout [ 2511.341836][T30942] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2511.399315][T30942] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2511.463961][T30942] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2511.518203][T30942] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2511.544538][T31021] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10196'. [ 2511.815190][T31028] loop7: detected capacity change from 0 to 512 [ 2511.933967][T31028] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2511.948150][T31028] ext4 filesystem being mounted at /22/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 2511.982735][T28707] Bluetooth: hci1: command tx timeout [ 2512.094337][T31028] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #4: comm syz.7.10198: corrupted inode contents [ 2512.114029][T31028] EXT4-fs error (device loop7): ext4_dirty_inode:6103: inode #4: comm syz.7.10198: mark_inode_dirty error [ 2512.137252][T31028] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #4: comm syz.7.10198: corrupted inode contents [ 2512.172477][T31028] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #4: comm syz.7.10198: mark_inode_dirty error [ 2512.211855][T31028] Quota error (device loop7): write_blk: dquota write failed [ 2512.221153][T31028] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5 [ 2512.235428][T31028] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 2512.246969][T31028] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.10198: Failed to acquire dquot type 1 [ 2512.569406][T30942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2512.747250][T30506] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2512.824826][T30942] 8021q: adding VLAN 0 to HW filter on device team0 [ 2512.940406][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 2512.948454][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2513.101517][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 2513.109276][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2514.789573][T30942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2514.838540][T31063] loop7: detected capacity change from 0 to 128 [ 2514.889839][T31063] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2514.974031][T31063] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2515.130765][T31066] netlink: 108 bytes leftover after parsing attributes in process `syz.2.10212'. [ 2515.384612][ T3723] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2516.577153][T31084] loop2: detected capacity change from 0 to 1024 [ 2516.706362][T31084] hfsplus: bad catalog entry type [ 2516.773054][T30942] veth0_vlan: entered promiscuous mode [ 2516.899726][T30942] veth1_vlan: entered promiscuous mode [ 2516.987365][T10067] hfsplus: b-tree write err: -5, ino 4 [ 2517.036978][T31086] loop3: detected capacity change from 0 to 1024 [ 2517.192400][T30942] veth0_macvtap: entered promiscuous mode [ 2517.234975][T30942] veth1_macvtap: entered promiscuous mode [ 2517.410040][T30942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2517.421030][T30942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2517.433684][T30942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2517.445419][T30942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2517.458813][T30942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2517.470694][T30942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2517.480927][T30942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2517.491799][T30942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2517.508115][T30942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2517.569682][T30942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2517.580914][T30942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2517.597047][T30942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2517.610626][T30942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2517.620985][T30942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2517.624302][T31090] loop8: detected capacity change from 0 to 1024 [ 2517.633969][T30942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2517.650614][T30942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2517.664712][T30942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2517.683800][T30942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2517.769712][T30942] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2517.779673][T30942] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2517.790000][T30942] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2517.801461][T30942] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2517.861238][T31090] hfsplus: xattr search failed [ 2519.713253][T27999] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2519.912645][T27999] usb 4-1: Using ep0 maxpacket: 32 [ 2519.946825][T27999] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 2519.955743][T27999] usb 4-1: config 0 has no interface number 0 [ 2520.006068][T27999] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2520.016702][T27999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2520.025492][T27999] usb 4-1: Product: syz [ 2520.029910][T27999] usb 4-1: Manufacturer: syz [ 2520.034894][T27999] usb 4-1: SerialNumber: syz [ 2520.107211][T27999] usb 4-1: config 0 descriptor?? [ 2520.145195][T27999] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2520.406027][T27999] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2520.464117][T27999] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2520.865801][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2520.878393][T27999] usb 4-1: USB disconnect, device number 46 [ 2520.928544][T27999] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2520.978727][T27999] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2520.995434][T27999] quatech2 4-1:0.51: device disconnected [ 2521.870392][T31127] loop8: detected capacity change from 0 to 8192 [ 2522.941798][ T3723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2522.960805][ T3723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2523.087927][T29947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2523.096539][T29947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2524.518817][T31173] loop8: detected capacity change from 0 to 512 [ 2524.626982][T31173] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2524.640328][T31173] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2525.161692][T29897] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2526.259034][T31197] netlink: 'syz.2.10259': attribute type 1 has an invalid length. [ 2526.267597][T31197] netlink: 'syz.2.10259': attribute type 2 has an invalid length. [ 2526.342475][T31200] netlink: 'syz.2.10259': attribute type 1 has an invalid length. [ 2526.350701][T31200] netlink: 'syz.2.10259': attribute type 2 has an invalid length. [ 2526.396876][T31201] loop4: detected capacity change from 0 to 256 [ 2527.192256][ T1565] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 2527.402247][ T1565] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2527.414060][ T1565] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2527.424374][ T1565] usb 9-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 2527.434119][ T1565] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2527.523151][ T1565] usb 9-1: config 0 descriptor?? [ 2527.689759][T31218] loop4: detected capacity change from 0 to 64 [ 2528.013237][ T1565] playstation 0003:054C:0DF2.0059: unknown main item tag 0x0 [ 2528.021039][ T1565] playstation 0003:054C:0DF2.0059: unknown main item tag 0x0 [ 2528.028949][ T1565] playstation 0003:054C:0DF2.0059: unknown main item tag 0x0 [ 2528.036845][ T1565] playstation 0003:054C:0DF2.0059: unknown main item tag 0x0 [ 2528.044981][ T1565] playstation 0003:054C:0DF2.0059: unknown main item tag 0x0 [ 2528.113218][ T1565] playstation 0003:054C:0DF2.0059: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.8-1/input0 [ 2528.175366][T31216] loop2: detected capacity change from 0 to 4096 [ 2528.211808][ T1565] playstation 0003:054C:0DF2.0059: Invalid reportID received, expected 9 got 236 [ 2528.221772][ T1565] playstation 0003:054C:0DF2.0059: Failed to retrieve DualSense pairing info: -22 [ 2528.239493][ T1565] playstation 0003:054C:0DF2.0059: Failed to get MAC address from DualSense [ 2528.248674][ T1565] playstation 0003:054C:0DF2.0059: Failed to create dualsense. [ 2528.276105][ T1565] playstation 0003:054C:0DF2.0059: probe with driver playstation failed with error -22 [ 2528.359390][T31216] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2528.450852][T18833] usb 9-1: USB disconnect, device number 21 [ 2528.797301][T29456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2530.340499][T31251] loop7: detected capacity change from 0 to 512 [ 2530.422506][T31251] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 2530.501831][T31251] System zones: 0-2, 18-18, 34-35 [ 2530.677228][T31251] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2530.690795][T31251] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2531.368241][T30506] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2531.414412][T31267] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10287'. [ 2532.592465][T31282] loop2: detected capacity change from 0 to 256 [ 2532.645479][T31284] sctp: [Deprecated]: syz.7.10295 (pid 31284) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2532.645479][T31284] Use struct sctp_sack_info instead [ 2532.894056][T31282] FAT-fs (loop2): Directory bread(block 64) failed [ 2532.900918][T31282] FAT-fs (loop2): Directory bread(block 65) failed [ 2532.908393][T31282] FAT-fs (loop2): Directory bread(block 66) failed [ 2532.919340][T31282] FAT-fs (loop2): Directory bread(block 67) failed [ 2532.926494][T31282] FAT-fs (loop2): Directory bread(block 68) failed [ 2532.933593][T31282] FAT-fs (loop2): Directory bread(block 69) failed [ 2532.940609][T31282] FAT-fs (loop2): Directory bread(block 70) failed [ 2532.947769][T31282] FAT-fs (loop2): Directory bread(block 71) failed [ 2532.954979][T31282] FAT-fs (loop2): Directory bread(block 72) failed [ 2532.961784][T31282] FAT-fs (loop2): Directory bread(block 73) failed [ 2533.203680][T31288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10299'. [ 2535.502563][T29461] Bluetooth: hci3: command 0x0406 tx timeout [ 2535.933412][T31322] loop3: detected capacity change from 0 to 1764 [ 2536.463273][T31327] loop2: detected capacity change from 0 to 1024 [ 2536.753520][T31335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10320'. [ 2536.857850][T31327] EXT4-fs: Ignoring removed orlov option [ 2536.864775][T31327] EXT4-fs: Conflicting test_dummy_encryption options [ 2537.968263][T31349] netlink: 'syz.7.10325': attribute type 2 has an invalid length. [ 2538.570744][T31356] netlink: 92 bytes leftover after parsing attributes in process `syz.4.10329'. [ 2539.282957][T31369] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10333'. [ 2540.182518][T18833] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 2540.370517][T18833] usb 3-1: Using ep0 maxpacket: 32 [ 2540.402306][T18833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2540.453553][T18833] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 2540.467661][T18833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2540.478556][T18833] usb 3-1: Product: syz [ 2540.483676][T18833] usb 3-1: Manufacturer: syz [ 2540.485309][T31384] 9p: Unknown access argument 18446744073709551615: -34 [ 2540.488440][T18833] usb 3-1: SerialNumber: syz [ 2540.526509][T18833] usb 3-1: config 0 descriptor?? [ 2540.542940][T18833] hub 3-1:0.0: bad descriptor, ignoring hub [ 2540.549167][T18833] hub 3-1:0.0: probe with driver hub failed with error -5 [ 2540.565753][T18833] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input68 [ 2540.584282][T18833] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 2540.604635][T18833] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 2540.943767][T18833] usb 3-1: USB disconnect, device number 9 [ 2542.422293][T31390] loop4: detected capacity change from 0 to 40427 [ 2542.487907][T31390] F2FS-fs (loop4): Invalid segment/section count (24 != 24 * 3) [ 2542.496120][T31390] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2542.505493][T31390] F2FS-fs (loop4): Unrecognized mount option "00000000000000000000000" or missing value [ 2543.309722][T31398] loop7: detected capacity change from 0 to 512 [ 2543.364770][T31398] EXT4-fs: Ignoring removed orlov option [ 2543.419028][T31400] loop2: detected capacity change from 0 to 1024 [ 2543.456816][T31398] EXT4-fs error (device loop7): dx_probe:793: inode #2: comm syz.7.10349: Attempting to read directory block (0) that is past i_size (256) [ 2543.492500][T31398] EXT4-fs (loop7): Remounting filesystem read-only [ 2543.523010][T31398] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 2543.534163][T31398] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2543.586419][T31400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2543.707499][T30506] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2543.997039][T29456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2544.244570][T31407] ALSA: mixer_oss: invalid index 100000 [ 2544.835701][T31411] loop2: detected capacity change from 0 to 2048 [ 2545.547326][T31419] loop3: detected capacity change from 0 to 2048 [ 2545.758957][T31419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2546.002765][T21539] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2546.928095][T31438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10373'. [ 2549.663734][T31469] mac80211_hwsim hwsim38 wlan1: entered promiscuous mode [ 2549.722399][T31469] mac80211_hwsim hwsim38 wlan1: left promiscuous mode [ 2551.789594][T31488] loop2: detected capacity change from 0 to 512 [ 2552.019277][T31488] EXT4-fs (loop2): 1 orphan inode deleted [ 2552.028879][T31488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2552.146991][T31488] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2552.166165][T29947] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 2552.176821][T29947] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 1 [ 2552.725917][T29456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2553.971729][ T30] audit: type=1326 audit(1746677702.620:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31516 comm="syz.3.10395" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x0 [ 2554.515357][T31527] netlink: 72 bytes leftover after parsing attributes in process `syz.7.10399'. [ 2554.807392][T31529] loop4: detected capacity change from 0 to 8 [ 2555.634731][T31542] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10406'. [ 2555.860004][T31544] loop7: detected capacity change from 0 to 1024 [ 2556.019363][ T30] audit: type=1326 audit(1746677704.680:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31545 comm="syz.3.10408" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x0 [ 2556.532096][T31551] loop4: detected capacity change from 0 to 1024 [ 2556.547119][T31551] EXT4-fs: Ignoring removed orlov option [ 2556.632857][T31551] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2556.646644][T31551] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 2556.658039][T31551] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 2556.735639][T31552] netlink: 'syz.8.10409': attribute type 1 has an invalid length. [ 2557.909004][T31560] loop3: detected capacity change from 0 to 4096 [ 2557.969073][T31560] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 2558.223119][T31560] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 2558.256019][T31560] ntfs3(loop3): Failed to load $Extend (-22). [ 2558.263154][T31560] ntfs3(loop3): Failed to initialize $Extend. [ 2558.402252][T31560] [syz.3.10414/31560] FS: loop3 File: /file0/hugetlb.2MB.usage_in_bytes would truncate fibmap result [ 2558.804658][T31575] ptrace attach of "./syz-executor exec"[30506] was attempted by ""[31575] [ 2559.064827][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2559.689499][T31568] loop8: detected capacity change from 0 to 8192 [ 2560.245041][T31593] loop7: detected capacity change from 0 to 512 [ 2560.279881][T31593] EXT4-fs: inline encryption not supported [ 2560.298350][T31593] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 2560.364791][T31593] EXT4-fs (loop7): 1 truncate cleaned up [ 2560.373508][T31593] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2560.566906][T30506] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2561.778122][T31612] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2562.800106][T31626] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2562.985894][T31626] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2563.249595][T31626] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2563.341735][T31633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10445'. [ 2563.526919][T31626] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2563.831042][T31637] loop2: detected capacity change from 0 to 256 [ 2563.861749][T31638] loop8: detected capacity change from 0 to 164 [ 2563.862088][T31626] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2563.888032][T31626] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2563.925236][T31626] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2563.961746][T31626] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2563.974220][T31637] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 2564.249546][T31638] syz.8.10446: attempt to access beyond end of device [ 2564.249546][T31638] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 2564.264811][T31638] syz.8.10446: attempt to access beyond end of device [ 2564.264811][T31638] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 2564.353061][T29442] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 2564.512847][T29442] usb 3-1: Using ep0 maxpacket: 16 [ 2564.520237][T29442] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2564.520411][T29442] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2564.520555][T29442] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2564.520731][T29442] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2564.520886][T29442] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2564.570356][T29442] usb 3-1: config 0 descriptor?? [ 2564.889421][T31642] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 2565.032209][T29442] hid (null): unknown global tag 0xd [ 2565.051157][T29442] hid (null): unknown global tag 0xe [ 2565.058093][T29442] hid (null): report_id 1007702018 is invalid [ 2565.068873][T29442] hid (null): unknown global tag 0x80 [ 2565.077642][T29442] hid (null): unknown global tag 0x3e [ 2565.267805][T27999] usb 3-1: USB disconnect, device number 10 [ 2567.955799][T31662] loop4: detected capacity change from 0 to 4096 [ 2568.030903][T31662] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 2570.302929][T31678] loop7: detected capacity change from 0 to 128 [ 2570.338378][T31678] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 2570.486610][T31678] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2573.866314][T31704] loop3: detected capacity change from 0 to 256 [ 2574.018449][T31707] loop2: detected capacity change from 0 to 512 [ 2574.082333][T31708] netlink: 'syz.4.10479': attribute type 4 has an invalid length. [ 2574.133491][T31707] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 2574.252062][T31707] EXT4-fs (loop2): 1 truncate cleaned up [ 2574.265019][T31707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2574.328515][T31704] FAT-fs (loop3): Directory bread(block 64) failed [ 2574.336176][T31704] FAT-fs (loop3): Directory bread(block 65) failed [ 2574.343330][T31704] FAT-fs (loop3): Directory bread(block 66) failed [ 2574.350132][T31704] FAT-fs (loop3): Directory bread(block 67) failed [ 2574.357214][T31704] FAT-fs (loop3): Directory bread(block 68) failed [ 2574.367710][T31704] FAT-fs (loop3): Directory bread(block 69) failed [ 2574.375849][T31704] FAT-fs (loop3): Directory bread(block 70) failed [ 2574.388516][T31704] FAT-fs (loop3): Directory bread(block 71) failed [ 2574.398098][T31704] FAT-fs (loop3): Directory bread(block 72) failed [ 2574.405103][T31704] FAT-fs (loop3): Directory bread(block 73) failed [ 2575.155867][T29456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2577.189634][T31719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10483'. [ 2579.577804][T31723] loop7: detected capacity change from 0 to 8192 [ 2579.772333][T31735] hsr0: entered promiscuous mode [ 2579.917836][T31723] loop7: p1 p2 p3 [ 2583.054776][T31749] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10498'. [ 2583.143215][T31746] loop4: detected capacity change from 0 to 4096 [ 2583.519421][T31754] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2584.438279][T31760] loop3: detected capacity change from 0 to 64 [ 2584.810322][T31760] Trying to free block not in datazone [ 2585.118639][T31761] Trying to free block not in datazone [ 2585.124571][T31761] minix_free_inode: bit 3 already cleared [ 2585.207873][ T30] audit: type=1800 audit(1746677733.860:403): pid=31760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10501" name="file0" dev="loop3" ino=5 res=0 errno=0 [ 2588.151029][T31769] loop3: detected capacity change from 0 to 8192 [ 2589.900721][ T1565] kernel write not supported for file /media2 (pid: 1565 comm: kworker/0:2) [ 2594.692367][ T1565] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 2594.952860][ T1565] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2594.963293][ T1565] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 2594.983529][ T1565] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2595.009145][T31812] loop8: detected capacity change from 0 to 512 [ 2595.229958][ T1565] usb 4-1: config 0 descriptor?? [ 2595.340995][T31812] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2595.754380][ T1565] lg-g15 0003:046D:C222.005B: unbalanced collection at end of report description [ 2595.857120][T31812] EXT4-fs error (device loop8): ext4_get_branch:178: inode #11: block 4294967295: comm syz.8.10521: invalid block [ 2595.919385][ T1565] lg-g15 0003:046D:C222.005B: probe with driver lg-g15 failed with error -22 [ 2596.023448][T31812] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.10521: invalid indirect mapped block 4294967295 (level 1) [ 2596.052292][ T1565] usb 4-1: USB disconnect, device number 47 [ 2596.246917][T31812] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.10521: invalid indirect mapped block 4294967295 (level 1) [ 2596.426449][T31812] EXT4-fs (loop8): 2 truncates cleaned up [ 2596.435803][T31812] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2598.121594][T29897] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2598.696480][T31834] loop7: detected capacity change from 0 to 512 [ 2598.839495][T31834] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2599.078396][T31834] EXT4-fs error (device loop7): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.7.10534: path /91/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=21, inode=14, rec_len=1, size=60 fake=0 [ 2599.252439][T31834] EXT4-fs (loop7): Remounting filesystem read-only [ 2599.907083][T30506] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2600.066090][T31842] loop2: detected capacity change from 0 to 1024 [ 2600.169873][T31842] hfsplus: invalid extent max_key_len 65535 [ 2600.214936][T31842] hfsplus: failed to load extents file [ 2600.375346][T31845] bridge0: port 1(bridge_slave_0) entered blocking state [ 2600.383159][T31845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2600.818735][T31842] loop2: detected capacity change from 0 to 1024 [ 2602.053038][T29442] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2602.389085][T29442] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2602.400637][T29442] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2602.411199][T29442] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 2602.425077][T29442] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2602.714814][T29442] usb 5-1: config 0 descriptor?? [ 2603.335980][T29442] sony 0003:054C:024B.005C: unexpected long global item [ 2603.498344][T29442] sony 0003:054C:024B.005C: parse failed [ 2603.505394][T29442] sony 0003:054C:024B.005C: probe with driver sony failed with error -22 [ 2603.640274][T29442] usb 5-1: USB disconnect, device number 26 [ 2604.496469][T31859] loop3: detected capacity change from 0 to 4096 [ 2604.603336][T31859] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 2605.555698][T31868] loop2: detected capacity change from 0 to 512 [ 2605.644926][T31868] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 2605.825183][T31868] EXT4-fs (loop2): 1 truncate cleaned up [ 2605.834686][T31868] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2606.968628][T29456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2607.700856][T31880] loop3: detected capacity change from 0 to 128 [ 2607.993724][T31880] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2608.115041][T31880] ext4 filesystem being mounted at /925/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2608.757844][T29442] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2608.887447][T21539] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2608.898246][T31879] loop7: detected capacity change from 0 to 4096 [ 2609.092404][T29442] usb 5-1: Using ep0 maxpacket: 32 [ 2609.174107][T29442] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2609.186667][T29442] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2609.326518][T29442] usb 5-1: config 0 descriptor?? [ 2609.429147][T31879] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 2609.656562][T29442] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2609.749396][T29442] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2609.801769][T29442] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2609.817764][T29442] usb 5-1: media controller created [ 2610.060475][T29442] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2611.003139][T29442] az6027: usb out operation failed. (-71) [ 2611.053481][T29442] az6027: usb out operation failed. (-71) [ 2611.059592][T29442] stb0899_attach: Driver disabled by Kconfig [ 2611.065978][T29442] az6027: no front-end attached [ 2611.065978][T29442] [ 2611.152184][T31897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10561'. [ 2611.212759][T29442] az6027: usb out operation failed. (-71) [ 2611.218919][T29442] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2611.235028][T29442] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input70 [ 2611.507309][T29442] dvb-usb: schedule remote query interval to 400 msecs. [ 2611.514936][T29442] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2611.674740][T29442] usb 5-1: USB disconnect, device number 27 [ 2612.016618][T31900] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10563'. [ 2612.026583][T31900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10563'. [ 2612.585980][T29442] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2612.812889][T31907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10566'. [ 2612.842951][T31909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10566'. [ 2612.939758][T31904] loop3: detected capacity change from 0 to 1024 [ 2612.956992][T31904] ext4: Unknown parameter 'nouser_xattr' [ 2615.050375][T31922] loop7: detected capacity change from 0 to 128 [ 2615.166814][T31913] loop4: detected capacity change from 0 to 4096 [ 2615.190663][T31922] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 2615.269675][T31922] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2615.332650][T31913] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 2615.341040][T31913] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 2615.357715][T31913] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 2615.369884][T31913] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 2615.378576][T31913] ntfs3(loop4): try to read out of volume at offset 0x3fffffc1c00 [ 2615.386948][T31913] ntfs3(loop4): try to read out of volume at offset 0x3fffffc2c00 [ 2615.395597][T31913] ntfs3(loop4): try to read out of volume at offset 0x3fffffc4c00 [ 2615.404039][T31913] ntfs3(loop4): try to read out of volume at offset 0x3fffffc8c00 [ 2615.413446][T31913] ntfs3(loop4): try to read out of volume at offset 0x3fffffd0c00 [ 2615.425136][T31913] ntfs3(loop4): try to read out of volume at offset 0x3fffffe0c00 [ 2617.327425][T31931] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10575'. [ 2617.482514][T29442] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 2617.522520][T29461] Bluetooth: hci0: command 0x0406 tx timeout [ 2617.640126][T31936] loop3: detected capacity change from 0 to 64 [ 2617.780619][T29442] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2617.792655][T29442] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2617.809097][T29442] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2617.820691][T29442] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2618.126457][T29442] usb 9-1: config 0 descriptor?? [ 2618.953808][T29442] usb 9-1: string descriptor 0 read error: -71 [ 2619.013982][T29442] uclogic 0003:256C:006D.005D: failed retrieving string descriptor #200: -71 [ 2619.023788][T29442] uclogic 0003:256C:006D.005D: failed retrieving pen parameters: -71 [ 2619.039658][T29442] uclogic 0003:256C:006D.005D: failed probing pen v2 parameters: -71 [ 2619.049418][T29442] uclogic 0003:256C:006D.005D: failed probing parameters: -71 [ 2619.057686][T29442] uclogic 0003:256C:006D.005D: probe with driver uclogic failed with error -71 [ 2619.583636][T29442] usb 9-1: USB disconnect, device number 22 [ 2620.851348][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2621.128235][T31945] loop3: detected capacity change from 0 to 40427 [ 2621.143615][T31945] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 2621.151661][T31945] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 2621.167753][T31945] F2FS-fs (loop3): Invalid segment/section count (31, 0 x 1) [ 2621.177073][T31945] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 2623.476995][T31957] loop4: detected capacity change from 0 to 256 [ 2623.705967][T31960] 9p: Unknown Cache mode or invalid value nond [ 2623.959974][T31961] loop2: detected capacity change from 0 to 512 [ 2624.245430][T31961] EXT4-fs (loop2): 1 orphan inode deleted [ 2624.258062][T31961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2624.541832][T31961] EXT4-fs error (device loop2): ext4_add_entry:2419: inode #2: comm syz.2.10587: Directory hole found for htree leaf block 0 [ 2624.662951][T31961] EXT4-fs error (device loop2): htree_dirblock_to_tree:1053: inode #2: comm syz.2.10587: Directory hole found for htree leaf block 0 [ 2625.304107][T31968] netlink: 'syz.4.10590': attribute type 10 has an invalid length. [ 2625.344300][T31968] team0: Port device dummy0 added [ 2625.432105][T29456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2625.498502][T31972] loop7: detected capacity change from 0 to 128 [ 2625.568286][T31971] loop3: detected capacity change from 0 to 512 [ 2625.677785][T31971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2626.021367][T31971] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 209 vs 212 free clusters [ 2627.296239][T21539] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2627.993379][T29442] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 2628.418164][T29442] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=d0.62 [ 2628.430532][T29442] usb 5-1: New USB device strings: Mfr=253, Product=2, SerialNumber=3 [ 2628.440015][T29442] usb 5-1: Product: syz [ 2628.447421][T29442] usb 5-1: Manufacturer: syz [ 2628.456197][T29442] usb 5-1: SerialNumber: syz [ 2628.876233][T29442] usb 5-1: config 0 descriptor?? [ 2629.050113][T29442] usb 5-1: selecting invalid altsetting 3 [ 2629.056349][T29442] comedi comedi0: could not set alternate setting 3 in high speed [ 2629.071729][T29442] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device. [ 2629.317908][T29442] usbdux 5-1:0.0: probe with driver usbdux failed with error -22 [ 2629.446036][T29442] usb 5-1: USB disconnect, device number 28 [ 2629.485783][T31990] loop3: detected capacity change from 0 to 2048 [ 2629.702101][T31990] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 2629.710167][T31990] UDF-fs: Scanning with blocksize 512 failed [ 2629.837689][T31994] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10599'. [ 2630.094466][T31990] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2632.510913][T32008] netlink: 356 bytes leftover after parsing attributes in process `syz.2.10605'. [ 2633.606720][T29442] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 2633.742211][T32011] loop4: detected capacity change from 0 to 2048 [ 2633.821454][T32011] Dev loop4: unable to read RDB block 8 [ 2633.828124][T32011] loop4: unable to read partition table [ 2633.926007][T29442] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2633.929164][T32011] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 2633.936096][T29442] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2633.936263][T29442] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2633.936405][T29442] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 2633.936617][T29442] usb 9-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 2633.936765][T29442] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2633.988126][T29442] usb 9-1: config 0 descriptor?? [ 2634.212150][ C1] sd 0:0:1:0: [sda] tag#5461 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2634.228860][ C1] sd 0:0:1:0: [sda] tag#5461 CDB: Write(6) 0a 00 4e 23 00 00 04 01 00 00 00 00 [ 2634.283220][T29442] hdpvr 9-1:0.0: firmware version 0x69 dated ̫SLٸi:hݤDju7~?belOz [ 2634.296830][T29442] hdpvr 9-1:0.0: untested firmware, the driver might not work. [ 2635.050552][T29442] hdpvr 9-1:0.0: Could not setup controls [ 2635.059813][T29442] hdpvr 9-1:0.0: registering videodev failed [ 2635.267491][T29442] hdpvr 9-1:0.0: probe with driver hdpvr failed with error -71 [ 2635.585594][T29442] usb 9-1: USB disconnect, device number 23 [ 2636.240942][T32028] serio: Serial port ttyS3 [ 2636.392219][T32022] loop2: detected capacity change from 0 to 1024 [ 2636.599298][T32022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2637.668848][T31947] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 2637.791847][T31947] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 2637.807934][T31947] EXT4-fs (loop2): This should not happen!! Data will be lost [ 2637.807934][T31947] [ 2637.817952][T31947] EXT4-fs (loop2): Total free blocks count 0 [ 2637.824411][T31947] EXT4-fs (loop2): Free/Dirty block details [ 2637.830551][T31947] EXT4-fs (loop2): free_blocks=68451041280 [ 2637.839696][T31947] EXT4-fs (loop2): dirty_blocks=32 [ 2637.850210][T31947] EXT4-fs (loop2): Block reservation details [ 2637.857437][T31947] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 2638.263379][T31947] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 2639.539150][T32047] loop7: detected capacity change from 0 to 256 [ 2639.926188][T32047] FAT-fs (loop7): Directory bread(block 64) failed [ 2639.933162][T32047] FAT-fs (loop7): Directory bread(block 65) failed [ 2639.940205][T32047] FAT-fs (loop7): Directory bread(block 66) failed [ 2639.947289][T32047] FAT-fs (loop7): Directory bread(block 67) failed [ 2639.957266][T32047] FAT-fs (loop7): Directory bread(block 68) failed [ 2639.964182][T32047] FAT-fs (loop7): Directory bread(block 69) failed [ 2639.971123][T32047] FAT-fs (loop7): Directory bread(block 70) failed [ 2639.978253][T32047] FAT-fs (loop7): Directory bread(block 71) failed [ 2639.988540][T32047] FAT-fs (loop7): Directory bread(block 72) failed [ 2639.995497][T32047] FAT-fs (loop7): Directory bread(block 73) failed [ 2642.705964][T32068] loop4: detected capacity change from 0 to 256 [ 2642.795890][T32068] exfat: Deprecated parameter 'namecase' [ 2643.137183][T32068] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 2643.446783][T32068] exFAT-fs (loop4): start_clu is invalid cluster(0x0) [ 2645.370471][T32082] loop4: detected capacity change from 0 to 512 [ 2645.485109][T32082] EXT4-fs: Ignoring removed orlov option [ 2645.542769][T32082] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 2645.713028][T32082] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 2645.840270][T32082] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.10638: corrupted in-inode xattr: e_value size too large [ 2645.959424][T32082] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.10638: couldn't read orphan inode 15 (err -117) [ 2646.094716][T32082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2647.163283][T30942] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2647.621807][T32096] loop7: detected capacity change from 0 to 64 [ 2648.472051][T32103] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x32314142, 8, 0, 0, 0) [ 2651.969266][T32126] loop2: detected capacity change from 0 to 2048 [ 2652.224018][T32126] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2654.559915][T32142] loop7: detected capacity change from 0 to 1024 [ 2654.776747][T32142] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2654.858541][T32147] loop4: detected capacity change from 0 to 128 [ 2654.979918][T32147] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2655.116551][T32147] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2655.846035][T30506] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2656.212650][ T14] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2656.246721][T32152] macvtap1: entered promiscuous mode [ 2656.252745][T32152] vlan0: entered promiscuous mode [ 2656.258023][T32152] veth1_to_bridge: entered promiscuous mode [ 2656.266891][T32152] macvtap1: entered allmulticast mode [ 2656.275841][T32152] vlan0: entered allmulticast mode [ 2656.284907][T32152] veth1_to_bridge: entered allmulticast mode [ 2656.783963][T32152] vlan0: left allmulticast mode [ 2656.789248][T32152] veth1_to_bridge: left allmulticast mode [ 2656.800882][T32152] vlan0: left promiscuous mode [ 2656.809068][T32152] veth1_to_bridge: left promiscuous mode [ 2658.155790][T32164] netlink: 44 bytes leftover after parsing attributes in process `syz.8.10673'. [ 2660.144509][T32180] netlink: 46 bytes leftover after parsing attributes in process `syz.2.10679'. [ 2661.839686][T32194] netlink: 'syz.2.10685': attribute type 4 has an invalid length. [ 2662.199892][T32196] loop8: detected capacity change from 0 to 64 [ 2662.338205][T32196] BFS-fs: bfs_fill_super(): loop8 is unclean, continuing [ 2663.417025][T32203] loop2: detected capacity change from 0 to 8 [ 2663.832925][T32206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10692'. [ 2664.478882][T32208] loop8: detected capacity change from 0 to 164 [ 2664.562759][T32208] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 2664.722569][T32208] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 2664.877914][T32208] Symlink component flag not implemented [ 2664.887306][T32208] Symlink component flag not implemented [ 2664.946121][T32208] Symlink component flag not implemented (7) [ 2664.953176][T32208] Symlink component flag not implemented (116) [ 2667.400732][T32230] netlink: 'syz.2.10701': attribute type 4 has an invalid length. [ 2668.887523][T11747] ===================================================== [ 2668.903297][T11747] BUG: KMSAN: uninit-value in n_tty_lookahead_flow_ctrl+0x240/0x2b0 [ 2668.912462][T11747] n_tty_lookahead_flow_ctrl+0x240/0x2b0 [ 2668.919066][T11747] tty_port_default_lookahead_buf+0x143/0x200 [ 2668.931182][T11747] flush_to_ldisc+0x839/0xdb0 [ 2668.937199][T11747] process_scheduled_works+0xb97/0x1d90 [ 2668.943817][T11747] worker_thread+0xedf/0x1590 [ 2668.949626][T11747] kthread+0xd59/0xf00 [ 2668.960399][T11747] ret_from_fork+0x6e/0x90 [ 2668.966020][T11747] ret_from_fork_asm+0x1a/0x30 [ 2668.971555][T11747] [ 2668.974857][T11747] Uninit was stored to memory at: [ 2669.001805][T11747] n_tty_lookahead_flow_ctrl+0x239/0x2b0 [ 2669.008586][T11747] tty_port_default_lookahead_buf+0x143/0x200 [ 2669.015523][T11747] flush_to_ldisc+0x839/0xdb0 [ 2669.020861][T11747] process_scheduled_works+0xb97/0x1d90 [ 2669.033589][T11747] worker_thread+0xedf/0x1590 [ 2669.039013][T11747] kthread+0xd59/0xf00 [ 2669.043893][T11747] ret_from_fork+0x6e/0x90 [ 2669.049058][T11747] ret_from_fork_asm+0x1a/0x30 [ 2669.054695][T11747] [ 2669.057670][T11747] Uninit was created at: [ 2669.069048][T11747] __kmalloc_noprof+0x95f/0x1310 [ 2669.074903][T11747] __tty_buffer_request_room+0x3d4/0x7a0 [ 2669.091722][T11747] __tty_insert_flip_string_flags+0x157/0x6f0 [ 2669.106076][T11747] uart_insert_char+0x368/0x930 [ 2669.111682][T11747] serial8250_read_char+0x1ba/0x670 [ 2669.117796][T11747] serial8250_handle_irq+0x930/0x1110 [ 2669.129849][T11747] serial8250_default_handle_irq+0x116/0x2b0 [ 2669.136529][T11747] serial8250_interrupt+0xc8/0x400 [ 2669.142484][T11747] __handle_irq_event_percpu+0x11c/0xbf0 [ 2669.148895][T11747] handle_irq_event+0xe0/0x2a0 [ 2669.160890][T11747] handle_edge_irq+0x450/0xfd0 [ 2669.166491][T11747] __common_interrupt+0x9f/0x220 [ 2669.172315][T11747] common_interrupt+0x94/0xb0 [ 2669.177772][T11747] asm_common_interrupt+0x2b/0x40 [ 2669.195179][T11747] [ 2669.199678][T11747] CPU: 0 UID: 0 PID: 11747 Comm: kworker/u8:3 Tainted: G W 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 2669.221156][T11747] Tainted: [W]=WARN [ 2669.225786][T11747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 2669.236662][T11747] Workqueue: events_unbound flush_to_ldisc [ 2669.249133][T11747] ===================================================== [ 2669.256600][T11747] Disabling lock debugging due to kernel taint [ 2669.263599][T11747] Kernel panic - not syncing: kmsan.panic set ... [ 2669.270213][T11747] CPU: 0 UID: 0 PID: 11747 Comm: kworker/u8:3 Tainted: G B W 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 2669.284411][T11747] Tainted: [B]=BAD_PAGE, [W]=WARN [ 2669.289582][T11747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 2669.299837][T11747] Workqueue: events_unbound flush_to_ldisc [ 2669.305900][T11747] Call Trace: [ 2669.309308][T11747] [ 2669.312372][T11747] __dump_stack+0x26/0x30 [ 2669.316931][T11747] dump_stack_lvl+0x53/0x270 [ 2669.321763][T11747] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2669.327837][T11747] dump_stack+0x1e/0x25 [ 2669.332218][T11747] panic+0x4bd/0xd50 [ 2669.336404][T11747] kmsan_report+0x29d/0x2a0 [ 2669.341158][T11747] ? pages_to_scan_store+0xec/0x160 [ 2669.346632][T11747] ? __msan_warning+0x96/0x120 [ 2669.351717][T11747] ? n_tty_lookahead_flow_ctrl+0x240/0x2b0 [ 2669.357780][T11747] ? tty_port_default_lookahead_buf+0x143/0x200 [ 2669.364243][T11747] ? flush_to_ldisc+0x839/0xdb0 [ 2669.369291][T11747] ? process_scheduled_works+0xb97/0x1d90 [ 2669.375243][T11747] ? worker_thread+0xedf/0x1590 [ 2669.380301][T11747] ? kthread+0xd59/0xf00 [ 2669.384769][T11747] ? ret_from_fork+0x6e/0x90 [ 2669.389611][T11747] ? ret_from_fork_asm+0x1a/0x30 [ 2669.394832][T11747] ? ret_from_fork_asm+0x1a/0x30 [ 2669.400048][T11747] ? n_tty_receive_buf_common+0x234d/0x2540 [ 2669.406244][T11747] ? check_preempt_wakeup_fair+0x1193/0x1c10 [ 2669.412475][T11747] ? psi_task_change+0x2ed/0x530 [ 2669.417680][T11747] ? kmsan_get_metadata+0x105/0x1b0 [ 2669.423126][T11747] ? kmsan_get_metadata+0x105/0x1b0 [ 2669.428634][T11747] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2669.434678][T11747] ? kmsan_get_metadata+0x105/0x1b0 [ 2669.440121][T11747] __msan_warning+0x96/0x120 [ 2669.444950][T11747] n_tty_lookahead_flow_ctrl+0x240/0x2b0 [ 2669.450856][T11747] ? __pfx_n_tty_lookahead_flow_ctrl+0x10/0x10 [ 2669.457270][T11747] tty_port_default_lookahead_buf+0x143/0x200 [ 2669.463570][T11747] flush_to_ldisc+0x839/0xdb0 [ 2669.468442][T11747] ? __pfx_tty_port_default_lookahead_buf+0x10/0x10 [ 2669.475301][T11747] ? __pfx_flush_to_ldisc+0x10/0x10 [ 2669.480731][T11747] process_scheduled_works+0xb97/0x1d90 [ 2669.486553][T11747] worker_thread+0xedf/0x1590 [ 2669.491467][T11747] kthread+0xd59/0xf00 [ 2669.495808][T11747] ? __pfx_worker_thread+0x10/0x10 [ 2669.501175][T11747] ? __pfx_kthread+0x10/0x10 [ 2669.506008][T11747] ret_from_fork+0x6e/0x90 [ 2669.510678][T11747] ? __pfx_kthread+0x10/0x10 [ 2669.515512][T11747] ret_from_fork_asm+0x1a/0x30 [ 2669.520552][T11747] [ 2669.524111][T11747] Kernel Offset: disabled [ 2669.528526][T11747] Rebooting in 86400 seconds..