last executing test programs: 9m1.780407038s ago: executing program 32 (id=182): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xc8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000001}]}]}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x16, 0x5, 0x1, 0x5, 0x0, 0xffffffff, 0x7fffffff}}, {0x4}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 8m49.0529544s ago: executing program 2 (id=228): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@cgroup=r1, 0xffffffffffffffff, 0x9, 0x0, 0x0, @void, @value}, 0x10) 8m48.173177326s ago: executing program 2 (id=231): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_DST_IF={0x8, 0xa, r1}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 8m47.605471676s ago: executing program 2 (id=234): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x3000000, &(0x7f0000001f80)=ANY=[], 0x11, 0x2cd, &(0x7f0000002100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) unshare(0x24060400) fdatasync(r0) 8m46.160394333s ago: executing program 2 (id=238): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x2000000, &(0x7f0000000440)={[{@uid_forget}, {@uid_forget}, {@gid_ignore}, {@shortad}, {@fileset={'fileset', 0x3d, 0x7}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@longad}, {@unhide}, {@anchor={'anchor', 0x3d, 0x2}}, {@undelete}, {}, {@uid}]}, 0xde, 0xc2d, &(0x7f0000002d80)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x1c0) getdents(r0, 0x0, 0x58) 8m44.378836755s ago: executing program 2 (id=242): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x10003, 0x9) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0x10034) 8m42.615144953s ago: executing program 2 (id=245): syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 8m38.035548304s ago: executing program 33 (id=245): syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 8m8.505816148s ago: executing program 4 (id=347): r0 = io_uring_setup(0x5013, &(0x7f00000000c0)={0x0, 0xfffffffc, 0x3681, 0x0, 0x10000000}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x140, 0x800, 0x3ff, 0x0, 0x0, 0x0, {0x4, 0x4}, {}, {0x0, 0x4}, {0x0, 0x0, 0x8}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, 0xc}) io_uring_enter(r0, 0x0, 0x0, 0xf, &(0x7f0000000000), 0x18) 8m7.122879835s ago: executing program 4 (id=351): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000240)={@local, 0x53, r2}) 8m6.207418453s ago: executing program 4 (id=356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0x2c, 0xd, 0xa, 0xe01, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x2c}}, 0x0) 8m5.062554609s ago: executing program 4 (id=361): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRESHEX], 0x3, 0x18a, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 8m4.008192438s ago: executing program 4 (id=366): openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 8m3.318817983s ago: executing program 4 (id=370): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@data_err_abort}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = fspick(r0, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 8m1.238969635s ago: executing program 34 (id=370): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@data_err_abort}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = fspick(r0, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 7m30.409426338s ago: executing program 1 (id=467): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) write$sndseq(r0, 0x0, 0x0) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) 7m29.279013787s ago: executing program 1 (id=471): r0 = socket$inet(0x2b, 0x801, 0x0) listen(r0, 0x9) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @empty}, 0x10) 7m28.288870629s ago: executing program 1 (id=475): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x480, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xd3}}, {@allow_other}]}}, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) 7m26.463299131s ago: executing program 1 (id=482): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x10b091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(0x0, &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x44000, 0x0) 7m25.333937672s ago: executing program 1 (id=485): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x7fffffff) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x16) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x2) 7m24.703274772s ago: executing program 1 (id=489): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000003140)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0xfd}}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x9, 0x3, 0x7f, 0x6, 0x40}, 0x14) 7m22.035505987s ago: executing program 35 (id=489): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000003140)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0xfd}}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x9, 0x3, 0x7f, 0x6, 0x40}, 0x14) 4m58.547060503s ago: executing program 3 (id=1164): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000004940), r0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r1, &(0x7f0000004a80)={0x0, 0x0, &(0x7f0000004a40)={&(0x7f0000004a00)={0x14, r2, 0x201, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4004) 4m57.755028083s ago: executing program 3 (id=1169): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 4m57.199732496s ago: executing program 3 (id=1171): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x80, 0x80000000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 4m56.384320767s ago: executing program 3 (id=1174): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000000500)=ANY=[@ANYBLOB='volume=00000000000000000062,gid=', @ANYRESDEC=0x0, @ANYBLOB=',dmode=00000000000000000000004,rootdir=00000000000000000004,iocharset=cp1251,gid=', @ANYRESDEC=0xee01, @ANYBLOB="000000003d69676e6f72652c696f636861727365743d63083733372c6c6f6eec1d184a87f5b8e03a7df1008e1eebad4b99fb3e582dc773597fca39651f404642a9e2058ae62c258d52c2d3bb6f4087e83ea4b62b00010d3e637d1747bf5e821b4531f6ec9e71a1f15a8930174f5c10a78a2f9fb3dd952e876a83b2053ab841bef796b18e2932fea1403f1af1c6d7541aa941a0f344617ddfe57b772dc483d8a9637ee1dd2412f566cfd6041d6977ba300d7bc59988323eb7e23c0dff8b7efc293e69be135042d483dd7a0400e32fb1be0a734f1df82b57b2a32b628aed9dd3a5653631d862634a07cec93831cee369202edc2cb72d4be3e990138bf44160f409e74ec947257c79c740bb38f3bcb36efec351b5c0d5921479481e6a2e4c12636ee147d7ad7e3331ca00aa0a58d8976083f96c896d982cc599d66d8c47a1e8f5d432853d2871d9ffdcddac3feaa331d180c7c4dd6424945391cf047e2d0952cacec0126570a1b1116dfa74f4b293df7e49ccbc697d7621"], 0x1, 0xc32, &(0x7f0000000e00)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQIm1GFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sXxr5445f4PAE+Uy/7/HwAAAAAAAAAAAAAA9rsURTwdKeYurqXJ6n1X/UJn8OatidGxrasdTFXNgap8+VM/eer0mS+9NHK2lxc6Mx9R/377bLwxfvl849XZG3Pz7YWF9lRjYqZzdXaqveMj7Lb+ZseqE9C48ebNqWvXFhqnXjy9Yfet4Q+HnjoyfG7k+ePP9cpOjI6Njd8pUu8vX7vnhnRtN8PjQBRxPFK88L2fplZEFLH7c1F/sGO/2cGqE8eqTkyMjlUdme60ZhbLnZd6J6KIaPRVavbO0dZjEbXBB9qH7TUjlsrmlw0+VnZvfK4137oy3W5cas0vdhY7szOXUre1ZX8aUcTZFLEcEatDdx9uMIqoRYrvHF5LVyJioHcevlhNDN6+HcUe9nEHynY2BiOWi0dgzPaxoSji9Ujxs/eOxtV8namuNV+IeL3MH0S8U+YrEan8YpyJ+GCL7xGPploU8efl+J9bS1PV9aB3XbnwtcZXZq7N9pXtXVd+yfvDXVeKh3R/OLgpH4x9fm2qRxGt6oq/lu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2Kp2Nmc3AN5YuCldCmlhzyX+ElWjyL+OM//+9bDbgwAAAAAAAAAAAAAAAAAAMATrYifRIqX3z+alqN/TfHOzPXG5daV6e6qsL21f3trpq+vr683UjebOSdzLuVczrmSczVnFLl+zmbOyZxLOZdzruRczRkDuX7OZs7JnEs5l3Ou5FzNGbVcP2cz52TOpZzLOVdyruaMfbJ2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaEZPRzZWhh906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0lIr4fqRo/EHz9rZaRKTq366j5S9nonmgzE9Gc6TMV6J5PmerylrzWw+h/ezOYCrix5FiqP7u7QHP4z/YfXf7axDvfPPOu8/WujnQ2zn84dBTRw6fGxn7tWe3e522asCxC52Zm7caE6NjY+N9m2v50z/Zt204f25xf7pORCy89fabrenp9vy9vyi/Aruo/gi9SLUnpadeVC+iti+a8XD6zhOgvP9/ECl++/1/793wu/f/evy/7rvbd/j4+Z/cuf+/vPlAO7z/1zbXy/f/8p6+1f3/6b5tL+ffjQzWIuqLN+YGj0TUF956+3jnRut6+3p75syJE18eGfny6RODByLq1zrT7b5X9+V0AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcquZrDZ8bef74cwMxUM232jBv+43xy+cbr87emJtvLyy0pxoTM52rs1PtnX5cvZruNTE6tied+VgH97j9B+uvzs69Nd+5/oeLW+4/VD9/ZWFxvnV1691xMIqIZv+WY1WDJ0bHqkZPd1ozVdVLW06m/+UNpiL+I1JcPdNIn8/b8vz/zTP8N8z/X9p8oD2a//+Jvm3lZ6ZUxM8jxW/9xbPx+aqdh+Kuc5bL/U2kOHb2c7lcHCjL9drQfa5Ad2ZgWfZ/IsU//GJj2d58yKfvlD254xP7iCjH/3Ck+P6ffTd+PW/b+PyHrcf/0OYD7dH4P9O37dCG5xXsuuvk8T8eKV55+t34jbzto57/0Xv2xtFc+PbzOfZo/D/Vt204f+5v3p+uAwAAAAAAAAAAPNIGUxF/Gyl+OFZLL+VtO/n7f1ObD7RHf//r033bpu7PekUf+2LXJxUAAAAA9onBVMRPIsX1xXdvz6HeOP+7b/7n79yZ/zmaNu2t/pzvV6rnBtzPP//rN5w/d3L33QYAAAAAAAAAAAAAAAAAAIB9JaUiXsrrqU9W8/mntl1PfSVSvPZfL+Ry6UhZrrcO/HD1a/3i7Mzx89PTs1dbi60r0+3G+Fzrarus+0ykWPvrz+W6RbW+em+9+e4a73fWYp+PFGN/1yvbXYu9tzb5M72yS+2TZdlPRIr//PuNZXvrWH/qznFPlWX/KlJ8/Z+2LnvkTtnTZdnvRooffb3RK3uoLNt7Puqn75R98epssQejAgAAAAAAAAAAAAAAAAAAwJNmMBXxp5Hiv28s357Ln9f/H+x7W3nnm33r/W9yq1rnf7ha/3+71/ey/n/1XIGl7T4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTymKeDtSzF1cSytD5fuu+oXOzM1bE6NjW1c7mKqaA1X58qd+8tTpM196aeRsLz+6/v32mXhj/PL5xquzN+bm2wsL7anGxEzn6uxUe8dH2G39zY5VJ6Bx482bU9euLTROvXh6w+5bwx8OPXVk+NzI88ef65WdGB0bG+8rUxu850+/S9pm+4Eo4i8jxQvf+2n64VBEEbs/Fx/z3dlrB6tOHKs6MTE6VnVkutOaWSx3XuqdiCKi0Vep2TtHD2AsdqUZsVQ2v2zwsbJ743Ot+daV6XbjUmt+sbPYmZ25lLqtLfvTiCLOpojliFgduvtwg1HEm5HiO4fX0j8PRQz0zsMXL45/9cSp7dtR7GEfd6BsZ2MwYrn4qDHbosNsMBRF/GOk+Nl7R+NfhiJq0f2JL0S8XuYPIt6J7nin8otxJuIDp/WxUYsi/rcc/3Nr6b2h8nrQu65c+FrjKzPXZvvK9q4rj/z94UHa5/eTehTxo+qKv5b+1X/XAAAAAAAAAAAAAAAAAPtIEb8aKV5+/2iq5gffnlPcmbneuNy6Mt2d1teb+9ebM72+vr7eSN1s5pzMuZRzOedKztWcUeT6OZtl1tfXJ/P7pZzLOVdyruaMgVw/ZzPnZM6lnMs5V3Ku5oxarp+zmXMy51LO5ZwrOVdzxj6ZuwcAAAAAAAAAAAAAAAAAADxeiuqfFN/+xlpaH6rWlx7o7VuxHuhj7/8CAAD//0pa+Ck=") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x160) 4m55.143448151s ago: executing program 3 (id=1182): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000bc0)={[{@nobarrier}, {@nobarrier}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'cp855'}}, {@umask={'umask', 0x3d, 0x1f}}, {@umask={'umask', 0x3d, 0xde5}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x2) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) 4m54.265850471s ago: executing program 3 (id=1187): r0 = socket$kcm(0x29, 0x5, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000005580)={0x0, 0x0, 0x0}, 0x40400d4) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18000}], 0x8}, 0x0) 4m51.955295763s ago: executing program 36 (id=1187): r0 = socket$kcm(0x29, 0x5, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000005580)={0x0, 0x0, 0x0}, 0x40400d4) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18000}], 0x8}, 0x0) 4m9.338910052s ago: executing program 7 (id=1391): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000180001000000000000000000020000000000000900000000060015000600000010001680040003"], 0x34}}, 0x0) 4m8.563687321s ago: executing program 7 (id=1394): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r0 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfffffffe}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 4m5.912628592s ago: executing program 7 (id=1400): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000340)='./file1\x00', 0x1804810, &(0x7f0000000180)=ANY=[], 0xf6, 0x67b, &(0x7f0000001780)="$eJzs3c1vHGcdB/DvbDZrb1qCmyZtQJVqNRIgIhI7VgrmQkAI+RChqhw4W4nTWNmkxXaRWyHq8HrtoX9AOfiCOCFxj1Q4cIFbb8jHSkhceqk5LdrZWXttr93dvNhO+Xyi8fPMPPM885vfszP7pmgD/N+au5j6gxSZu3h9tbO+sT7T2lifudurJxlLspbUk9SSFJ+12+2PkmtJsTVMsavc44PF2dc//nTjk+5avVrK/WsH9dul2m9t1+a13rbJJCeq8hHsGO/GI49XbEV+LcmFqoQjdzJJe4ef/f3ZrZY+zUG9xw8lRuDJKrrPm3tMJKeqC73zOqD3zFs73OiGNzbkfrtfQQAAAMDTZpj3wF/ezGZWi9OHEA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8Iaxt//5/US21Xn0yRe/3/xvVtlT14+Xl0XZ/8KTiAAAAAAAAAIBD9PJmNrOa0731dlF+5/9KuXK2/PtM3s5yFrKUS1nNfFaykqVMJ5noG6ixOr+ysjQ9RM8rA3te+ZxAx6qy+XjOGwAAAAAAAAC+YH6Vue3v/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DgokhPdIsX9vs0TqdWTjCdpdDasJf/s1Z9mD446AAAAADgEY8lmVnO6t94ucjbJC+VnAON5O/eyksWspJWF3Cw/F+i+669trM+0NtZn7naWveN+/z8jhVGOmO5nD4OPfL7co5lbWSy3XMqNvJlWbqZW9uw4X8XTG7UvrvEk9zsxFd+rDBnZzarsnPn7VbnHeyOd7H5G/DBloszIya2MTFWxdbLxXG9mBs3QwFMY5UjTqW0Fe3bXkRrJZ+2uPGzOT/UF+ru9AV8fNf7HZ3cmrvQ9+l44KOcdX//Ln346VdVHnoMjdqIqy0lNc28mZvoy8eIwmbjdunfn9q3li09bJvaYKjNxbmt9Lj/KT3Ixk3ktS1nMzzOflSxkMj8sa/PV5Bd9l/w+mbq2Y+21z4ukUT1Cu5M1WkyvlH1PZzE/zpu5mYW8Wv67kul8O1dzNbN9M3zu4Bkur/raPld9+0sDg7/wjarSTPL7qjweOnl9ri+v/ffcibKtf8t2ls4MkaUR7431r1aVzjF+XZXHw+5MTPdl4vndmRjf0fUP5W1luXXvztLt+beGO9yZ96tK5zr6bTJ5tDeSxq76mc5klWs7Hx2dtucHtk2XbWe32mp72s5ttXWv1LV9r9RG9Rpu70hXyrYXB7bNlG3n+9oGvd4C4Ng79c1Tjea/m/9oftj8TfN28/r4D8a+M/ZSIyf/evK79akTX6u9VPw5H+aX2+//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh7f8zrt35luthaVupZGkrLTb7fd2No1aqVdHeMjuj1DJ5L+e6Rx5QFPv58wOMZ6vPJsc3rkf18p/2+12taXYZ58//u3YJKr6IcP2sUjdqJXNxxP80d2TgMNxeeXuW5eX33n3W4t3599YeGPh3uzVq7NTs1dfnbl8a7G1MNX9e9RRAk/C9pP+UUcCAAAAAAAAAAAADOsw/lvCUZ8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HSbu5j6gxSZnro01VnfWJ9pdZZefXvPepJakuIXSfFR0uw1TPQNV+x3nA8WZ1//+NONT7bHqvf2rx3Ubzhr1ZLJJCe65f3HNd6NqjxQcdApFFtneC3JhaqEI/e/AAAA//+smw/y") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/55, 0x37) getdents64(r0, 0xfffffffffffffffe, 0x29) 4m4.8109795s ago: executing program 7 (id=1405): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000000500)=ANY=[@ANYBLOB='volume=00000000000000000062,gid=', @ANYRESDEC=0x0, @ANYBLOB=',dmode=00000000000000000000004,rootdir=00000000000000000004,iocharset=cp1251,gid=', @ANYRESDEC=0xee01, @ANYBLOB="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"], 0x1, 0xc32, &(0x7f0000000e00)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQIm1GFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sXxr5445f4PAE+Uy/7/HwAAAAAAAAAAAAAA9rsURTwdKeYurqXJ6n1X/UJn8OatidGxrasdTFXNgap8+VM/eer0mS+9NHK2lxc6Mx9R/377bLwxfvl849XZG3Pz7YWF9lRjYqZzdXaqveMj7Lb+ZseqE9C48ebNqWvXFhqnXjy9Yfet4Q+HnjoyfG7k+ePP9cpOjI6Njd8pUu8vX7vnhnRtN8PjQBRxPFK88L2fplZEFLH7c1F/sGO/2cGqE8eqTkyMjlUdme60ZhbLnZd6J6KIaPRVavbO0dZjEbXBB9qH7TUjlsrmlw0+VnZvfK4137oy3W5cas0vdhY7szOXUre1ZX8aUcTZFLEcEatDdx9uMIqoRYrvHF5LVyJioHcevlhNDN6+HcUe9nEHynY2BiOWi0dgzPaxoSji9Ujxs/eOxtV8namuNV+IeL3MH0S8U+YrEan8YpyJ+GCL7xGPploU8efl+J9bS1PV9aB3XbnwtcZXZq7N9pXtXVd+yfvDXVeKh3R/OLgpH4x9fm2qRxGt6oq/lu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2Kp2Nmc3AN5YuCldCmlhzyX+ElWjyL+OM//+9bDbgwAAAAAAAAAAAAAAAAAAMATrYifRIqX3z+alqN/TfHOzPXG5daV6e6qsL21f3trpq+vr683UjebOSdzLuVczrmSczVnFLl+zmbOyZxLOZdzruRczRkDuX7OZs7JnEs5l3Ou5FzNGbVcP2cz52TOpZzLOVdyruaMfbJ2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaEZPRzZWhh906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0lIr4fqRo/EHz9rZaRKTq366j5S9nonmgzE9Gc6TMV6J5PmerylrzWw+h/ezOYCrix5FiqP7u7QHP4z/YfXf7axDvfPPOu8/WujnQ2zn84dBTRw6fGxn7tWe3e522asCxC52Zm7caE6NjY+N9m2v50z/Zt204f25xf7pORCy89fabrenp9vy9vyi/Aruo/gi9SLUnpadeVC+iti+a8XD6zhOgvP9/ECl++/1/793wu/f/evy/7rvbd/j4+Z/cuf+/vPlAO7z/1zbXy/f/8p6+1f3/6b5tL+ffjQzWIuqLN+YGj0TUF956+3jnRut6+3p75syJE18eGfny6RODByLq1zrT7b5X9+V0AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcquZrDZ8bef74cwMxUM232jBv+43xy+cbr87emJtvLyy0pxoTM52rs1PtnX5cvZruNTE6tied+VgH97j9B+uvzs69Nd+5/oeLW+4/VD9/ZWFxvnV1691xMIqIZv+WY1WDJ0bHqkZPd1ozVdVLW06m/+UNpiL+I1JcPdNIn8/b8vz/zTP8N8z/X9p8oD2a//+Jvm3lZ6ZUxM8jxW/9xbPx+aqdh+Kuc5bL/U2kOHb2c7lcHCjL9drQfa5Ad2ZgWfZ/IsU//GJj2d58yKfvlD254xP7iCjH/3Ck+P6ffTd+PW/b+PyHrcf/0OYD7dH4P9O37dCG5xXsuuvk8T8eKV55+t34jbzto57/0Xv2xtFc+PbzOfZo/D/Vt204f+5v3p+uAwAAAAAAAAAAPNIGUxF/Gyl+OFZLL+VtO/n7f1ObD7RHf//r033bpu7PekUf+2LXJxUAAAAA9onBVMRPIsX1xXdvz6HeOP+7b/7n79yZ/zmaNu2t/pzvV6rnBtzPP//rN5w/d3L33QYAAAAAAAAAAAAAAAAAAIB9JaUiXsrrqU9W8/mntl1PfSVSvPZfL+Ry6UhZrrcO/HD1a/3i7Mzx89PTs1dbi60r0+3G+Fzrarus+0ykWPvrz+W6RbW+em+9+e4a73fWYp+PFGN/1yvbXYu9tzb5M72yS+2TZdlPRIr//PuNZXvrWH/qznFPlWX/KlJ8/Z+2LnvkTtnTZdnvRooffb3RK3uoLNt7Puqn75R98epssQejAgAAAAAAAAAAAAAAAAAAwJNmMBXxp5Hiv28s357Ln9f/H+x7W3nnm33r/W9yq1rnf7ha/3+71/ey/n/1XIGl7T4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTymKeDtSzF1cSytD5fuu+oXOzM1bE6NjW1c7mKqaA1X58qd+8tTpM196aeRsLz+6/v32mXhj/PL5xquzN+bm2wsL7anGxEzn6uxUe8dH2G39zY5VJ6Bx482bU9euLTROvXh6w+5bwx8OPXVk+NzI88ef65WdGB0bG+8rUxu850+/S9pm+4Eo4i8jxQvf+2n64VBEEbs/Fx/z3dlrB6tOHKs6MTE6VnVkutOaWSx3XuqdiCKi0Vep2TtHD2AsdqUZsVQ2v2zwsbJ743Ot+daV6XbjUmt+sbPYmZ25lLqtLfvTiCLOpojliFgduvtwg1HEm5HiO4fX0j8PRQz0zsMXL45/9cSp7dtR7GEfd6BsZ2MwYrn4qDHbosNsMBRF/GOk+Nl7R+NfhiJq0f2JL0S8XuYPIt6J7nin8otxJuIDp/WxUYsi/rcc/3Nr6b2h8nrQu65c+FrjKzPXZvvK9q4rj/z94UHa5/eTehTxo+qKv5b+1X/XAAAAAAAAAAAAAAAAAPtIEb8aKV5+/2iq5gffnlPcmbneuNy6Mt2d1teb+9ebM72+vr7eSN1s5pzMuZRzOedKztWcUeT6OZtl1tfXJ/P7pZzLOVdyruaMgVw/ZzPnZM6lnMs5V3Ku5oxarp+zmXMy51LO5ZwrOVdzxj6ZuwcAAAAAAAAAAAAAAAAAADxeiuqfFN/+xlpaH6rWlx7o7VuxHuhj7/8CAAD//0pa+Ck=") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x160) 4m3.093531502s ago: executing program 7 (id=1409): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="400000001000210400"/20, @ANYRES32=r1, @ANYBLOB="00000000000001002000128008000100677265001400028006000f00aa00000006000e0007"], 0x40}}, 0x0) 4m2.439073522s ago: executing program 7 (id=1413): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x1}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) 4m0.490328031s ago: executing program 37 (id=1413): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x1}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) 7.336178493s ago: executing program 6 (id=2765): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 6.640164479s ago: executing program 6 (id=2767): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7}) syz_clone3(&(0x7f0000001100)={0x40200, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) 5.815516967s ago: executing program 6 (id=2771): ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file2\x00', 0x1018658, &(0x7f0000000000), 0x6, 0x60a, &(0x7f0000000c00)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) 4.685502012s ago: executing program 6 (id=2779): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.399546163s ago: executing program 8 (id=2780): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000017c0)=r0, 0x4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0xc800) 3.948793955s ago: executing program 6 (id=2784): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f00000020c0)='./file0\x00', 0x4, &(0x7f00000002c0)=ANY=[], 0x1, 0xae4, &(0x7f0000000340)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 3.709697653s ago: executing program 0 (id=2785): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0xfffc, 0x0, @mcast1, 0x5}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x3}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) 3.705320279s ago: executing program 8 (id=2795): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x1d, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) 3.673470463s ago: executing program 9 (id=2786): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x7, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000001b40)) 3.569410452s ago: executing program 5 (id=2787): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x153}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x4040) 3.236404677s ago: executing program 0 (id=2788): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000640)=0x13) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000400)={0xff02, 0x0, 0x200, 0xeb, 0x0, "0500ff00001300"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x3) 3.170738148s ago: executing program 8 (id=2789): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe}) 3.078673327s ago: executing program 9 (id=2790): r0 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) 2.974428762s ago: executing program 5 (id=2791): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x2, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x5, 0x9, 0x2, 0x15, 0xb, 0x15, 0x6}}, @TCA_RED_MAX_P={0x8, 0x3, 0x54}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0xde7ee9c5d571f8c2}, 0x0) 2.822269523s ago: executing program 6 (id=2792): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, 0x0) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x10016, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRESOCT, @ANYRES64], 0xff, 0x5a10, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) 2.591963673s ago: executing program 9 (id=2793): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='nv\x00', 0x3) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000003c0)) 2.508427993s ago: executing program 8 (id=2794): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 2.438029202s ago: executing program 5 (id=2796): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x13}) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000224e0000", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) 2.419327674s ago: executing program 0 (id=2797): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff26650042e2dacd00005efeece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9d6d2e19c211220940ad5def53b911ba5b9da13641f9826d7012a749f54b901ee80ea6132ca6e88c776553e1833052ca376304313c4b37780136a4b838570400"}, 0x80, 0x0}, 0x0) 2.121135889s ago: executing program 9 (id=2798): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xb0}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}}, 0x0) 1.902813603s ago: executing program 8 (id=2799): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @sdr={0x0, 0xfff}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x10001, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix={0x4, 0xfffffffd, 0x33565348, 0x4, 0xfffffffb, 0x4, 0x6, 0x4, 0x0, 0x4, 0x1, 0x7}}) 1.62158941s ago: executing program 5 (id=2800): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) sync() 1.494593767s ago: executing program 0 (id=2801): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5}]}]}, 0x30}}, 0x0) 1.48947925s ago: executing program 9 (id=2802): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000280), 0x836f1adcfdea06a1) 1.134531589s ago: executing program 8 (id=2803): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES16=r1, @ANYRES16], 0x0) 618.733462ms ago: executing program 5 (id=2804): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f000006b000)={{r1, r2+10000000}, {0x0, 0x9}}, 0x0) timer_gettime(r0, &(0x7f0000000040)) 532.100222ms ago: executing program 0 (id=2805): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1000001d, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x6, 0x3, 0x7fff, 0x8, 0x80000000, 0x242, 0x0, 0xe, 0x0, 0x71, 0x7, 0x7, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x0, 0x8000, 0x2009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x4, 0x42, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4004, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa3, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xa2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x4, 0x6, 0x0, 0x5, 0xce7, 0x8001, 0x2, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x0, 0x5, 0x8, 0xc8, 0xee1, 0x7, 0xffff, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x80010080, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) unshare(0x6020400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 166.999693ms ago: executing program 9 (id=2806): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000004c0)=[@in6={0xa, 0x4e21, 0x10000, @mcast1, 0x83f9}], 0x1c) 107.53984ms ago: executing program 5 (id=2807): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) map_shadow_stack(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 0s ago: executing program 0 (id=2808): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0x4004e502, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x1158a6c0}], 0x1, 0x5, 0x0) kernel console output (not intermixed with test programs): ce not active [ 591.377256][ T9761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.384665][ T9761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.413609][ T9761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.681096][ T9761] hsr_slave_0: entered promiscuous mode [ 591.691152][ T9761] hsr_slave_1: entered promiscuous mode [ 591.703234][ T9761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 591.711005][ T9761] Cannot create hsr debugfs directory [ 592.524072][ T9727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.843413][ T5798] Bluetooth: hci3: command tx timeout [ 592.861426][ T9727] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.910912][ T4202] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.918647][ T4202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.183048][ T4202] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.190700][ T4202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.420290][ T9727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 594.132924][ T9761] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 594.276691][ T9761] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 594.344862][ T9761] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 594.395303][ T9761] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 594.589755][ T9843] netlink: 'syz.6.1449': attribute type 9 has an invalid length. [ 594.923747][ T5798] Bluetooth: hci3: command tx timeout [ 595.128360][ T9727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.651236][ T9761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.878635][ T9761] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.938807][ T4202] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.946651][ T4202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.071892][ T4202] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.079638][ T4202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.003030][ T5798] Bluetooth: hci3: command tx timeout [ 597.451083][ T9727] veth0_vlan: entered promiscuous mode [ 597.571683][ T9727] veth1_vlan: entered promiscuous mode [ 597.888464][ T9727] veth0_macvtap: entered promiscuous mode [ 597.980947][ T9727] veth1_macvtap: entered promiscuous mode [ 598.139000][ T9882] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1462'. [ 598.199826][ T9727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.211902][ T9727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.222498][ T9727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.233377][ T9727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.245602][ T9727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.258948][ T9727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.269676][ T9727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.280561][ T9727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.297360][ T9727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.414603][ T9761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.519447][ T9727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.530754][ T9727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.544888][ T9727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.555749][ T9727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.568584][ T9727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.579908][ T9727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.590093][ T9727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.600824][ T9727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.619122][ T9727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.868569][ T9727] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.877879][ T9727] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.887066][ T9727] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.897002][ T9727] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.167967][ T9761] veth0_vlan: entered promiscuous mode [ 599.343273][ T9761] veth1_vlan: entered promiscuous mode [ 599.694043][ T9761] veth0_macvtap: entered promiscuous mode [ 599.738928][ T9761] veth1_macvtap: entered promiscuous mode [ 599.939194][ T9761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.951043][ T9761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.961329][ T9761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.972431][ T9761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.982680][ T9761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.996070][ T9761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.006901][ T9761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.017685][ T9761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.027879][ T9761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.038825][ T9761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.057613][ T9761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 600.187271][ T9761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.201920][ T9761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.212724][ T9761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.223737][ T9761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.233948][ T9761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.245262][ T9761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.255446][ T9761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.266245][ T9761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.276458][ T9761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.287988][ T9761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.306444][ T9761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.547221][ T9761] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.556559][ T9761] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.566920][ T9761] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.576125][ T9761] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.160625][ T10] kernel write not supported for file 547/task/548/clear_refs (pid: 10 comm: kworker/0:1) [ 602.154006][ T9926] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1474'. [ 602.163419][ T9926] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1474'. [ 605.019810][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.028121][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.286692][ T4775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.294911][ T4775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.252073][ T4775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.263812][ T4775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.500005][ T4775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.508256][ T4775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.358785][ T9996] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1495'. [ 607.373662][ T9996] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1495'. [ 607.464366][ T9998] loop9: detected capacity change from 0 to 256 [ 608.279609][T10011] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1501'. [ 608.614927][T10013] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 608.621222][T10013] pim6reg0: linktype set to 6 [ 608.843281][ T5798] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 608.852049][ T5798] Bluetooth: hci1: Injecting HCI hardware error event [ 608.859876][ T5798] Bluetooth: hci1: hardware error 0x00 [ 609.581091][T10026] loop6: detected capacity change from 0 to 1024 [ 609.792625][T10026] hfsplus: xattr searching failed [ 609.838790][T10026] hfsplus: xattr searching failed [ 609.891372][T10029] hfsplus: xattr searching failed [ 609.945223][T10029] hfsplus: bad catalog file entry [ 610.273653][ T4775] hfsplus: b-tree write err: -5, ino 3 [ 610.312468][ T4775] hfsplus: bad catalog file entry [ 610.739782][T10040] loop8: detected capacity change from 0 to 128 [ 610.810495][T10040] VFS: Found a Xenix FS (block size = 512) on device loop8 [ 610.927079][ T5798] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 611.077944][T10047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1516'. [ 611.220932][ T7446] sysv_free_block: trying to free block not in datazone [ 611.246847][ T7446] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 611.793134][T10057] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1521'. [ 611.833685][T10061] netlink: 'syz.0.1522': attribute type 2 has an invalid length. [ 612.117987][T10060] loop5: detected capacity change from 0 to 2048 [ 612.288711][T10060] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 612.700469][ T9727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.289372][T10079] loop5: detected capacity change from 0 to 64 [ 613.874056][T10090] netlink: 'syz.8.1534': attribute type 10 has an invalid length. [ 613.885838][T10090] syz_tun: entered promiscuous mode [ 613.916387][T10090] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 614.311008][T10094] loop5: detected capacity change from 0 to 128 [ 614.471652][T10096] batadv0: entered promiscuous mode [ 614.482608][T10096] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 614.490826][T10096] team0: Device macvtap1 failed to register rx_handler [ 614.537719][T10096] batadv0: left promiscuous mode [ 614.547597][T10094] FAT-fs (loop5): Directory bread(block 32) failed [ 614.554776][T10094] FAT-fs (loop5): Directory bread(block 33) failed [ 614.561698][T10094] FAT-fs (loop5): Directory bread(block 34) failed [ 614.568960][T10094] FAT-fs (loop5): Directory bread(block 35) failed [ 614.576129][T10094] FAT-fs (loop5): Directory bread(block 36) failed [ 614.583149][T10094] FAT-fs (loop5): Directory bread(block 37) failed [ 614.590056][T10094] FAT-fs (loop5): Directory bread(block 38) failed [ 614.597009][T10094] FAT-fs (loop5): Directory bread(block 39) failed [ 614.604159][T10094] FAT-fs (loop5): Directory bread(block 40) failed [ 614.610956][T10094] FAT-fs (loop5): Directory bread(block 41) failed [ 614.781982][T10094] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 614.790255][T10094] FAT-fs (loop5): Filesystem has been set read-only [ 616.895788][T10129] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1551'. [ 617.713051][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 617.713137][ T29] audit: type=1326 audit(1740159044.585:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10140 comm="syz.6.1556" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7eff579 code=0x7ffc0000 [ 617.841693][ T29] audit: type=1326 audit(1740159044.635:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10140 comm="syz.6.1556" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7eff579 code=0x7ffc0000 [ 617.868116][ T29] audit: type=1326 audit(1740159044.635:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10140 comm="syz.6.1556" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7eff579 code=0x7ffc0000 [ 617.891108][ T29] audit: type=1326 audit(1740159044.645:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10140 comm="syz.6.1556" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7eff579 code=0x7ffc0000 [ 617.916995][ T29] audit: type=1326 audit(1740159044.655:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10140 comm="syz.6.1556" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7eff579 code=0x7ffc0000 [ 617.940360][ T29] audit: type=1326 audit(1740159044.665:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10140 comm="syz.6.1556" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7eff579 code=0x7ffc0000 [ 617.962714][ T29] audit: type=1326 audit(1740159044.685:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10140 comm="syz.6.1556" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7eff5a7 code=0x7ffc0000 [ 617.985173][ T29] audit: type=1326 audit(1740159044.695:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10140 comm="syz.6.1556" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7eff579 code=0x7ffc0000 [ 618.007968][ T29] audit: type=1326 audit(1740159044.715:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10140 comm="syz.6.1556" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7eff579 code=0x7ffc0000 [ 618.034873][ T29] audit: type=1326 audit(1740159044.715:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10140 comm="syz.6.1556" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7eff5a7 code=0x7ffc0000 [ 618.456882][T10149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1559'. [ 619.930349][T10169] syz.9.1569 uses obsolete (PF_INET,SOCK_PACKET) [ 620.002845][T10172] overlayfs: missing 'workdir' [ 620.770776][T10182] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode [ 620.771014][T10182] macsec1: entered allmulticast mode [ 620.771118][T10182] mac80211_hwsim hwsim22 wlan0: entered allmulticast mode [ 620.903996][T10182] mac80211_hwsim hwsim22 wlan0: left allmulticast mode [ 620.904132][T10182] mac80211_hwsim hwsim22 wlan0: left promiscuous mode [ 621.657012][T10190] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 621.834852][T10193] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1579'. [ 622.101783][ T5835] IPVS: starting estimator thread 0... [ 622.217224][T10196] IPVS: using max 240 ests per chain, 12000 per kthread [ 622.374148][T10198] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1581'. [ 622.457617][T10204] loop0: detected capacity change from 0 to 256 [ 622.638280][ C1] hrtimer: interrupt took 240545 ns [ 622.711079][T10204] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 623.677374][T10219] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1588'. [ 624.375739][T10222] loop6: detected capacity change from 0 to 2048 [ 624.462762][T10222] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 624.582485][T10230] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 624.931455][ T6607] NILFS (loop6): DAT doesn't have a block to manage vblocknr = 3044605952 [ 624.940607][ T6607] NILFS error (device loop6): nilfs_bmap_truncate: broken bmap (inode number=15) [ 624.953601][ T6607] Remounting filesystem read-only [ 624.958837][ T6607] NILFS (loop6): error -5 truncating bmap (ino=15) [ 625.423195][T10240] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 625.618129][T10246] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.627384][T10246] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.636551][T10246] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.648448][T10246] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.659355][T10246] vxlan0: entered promiscuous mode [ 625.664937][T10246] vxlan0: entered allmulticast mode [ 625.732585][T10246] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.741843][T10246] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.751394][T10246] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.764929][T10246] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.862849][T10245] loop9: detected capacity change from 0 to 1764 [ 625.896192][T10245] iso9660: Unknown parameter '0x0000000000000000' [ 626.080010][T10246] Zero length message leads to an empty skb [ 627.007005][ T9216] Bluetooth: hci3: command 0x0405 tx timeout [ 627.728951][T10267] loop0: detected capacity change from 0 to 64 [ 628.772540][T10280] loop9: detected capacity change from 0 to 512 [ 628.830368][T10280] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 628.888636][T10270] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 628.943906][T10280] EXT4-fs (loop9): 1 truncate cleaned up [ 628.951654][T10280] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 629.096070][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 629.096150][ T29] audit: type=1800 audit(1740159055.985:93): pid=10280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1617" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 629.105030][T10280] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.1617: corrupted in-inode xattr: overlapping e_value [ 629.216308][T10280] EXT4-fs (loop9): Remounting filesystem read-only [ 629.223471][T10280] EXT4-fs warning (device loop9): ext4_xattr_set_entry:1772: inode #15: comm syz.9.1617: unable to update i_inline_off [ 629.569294][ T9214] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.069790][T10293] netlink: 296 bytes leftover after parsing attributes in process `syz.9.1621'. [ 630.354414][ T5835] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 630.439770][T10300] loop8: detected capacity change from 0 to 1 [ 630.475654][T10300] Dev loop8: unable to read RDB block 1 [ 630.481790][T10300] loop8: unable to read partition table [ 630.527093][T10300] loop8: partition table beyond EOD, truncated [ 630.534025][T10300] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 630.549934][ T5835] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 630.558761][ T5835] usb 1-1: config 8 has no interface number 0 [ 630.570445][ T5835] usb 1-1: config 8 interface 177 has no altsetting 0 [ 630.580917][ T5835] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 630.590435][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.850295][ T5835] usb 1-1: string descriptor 0 read error: -71 [ 630.863245][ T5835] ir_toy 1-1:8.177: required endpoints not found [ 630.947095][ T5835] usb 1-1: USB disconnect, device number 2 [ 631.378290][T10310] loop6: detected capacity change from 0 to 4096 [ 631.459049][T10310] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 631.783713][T10310] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 631.899057][T10317] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1632'. [ 631.908573][T10317] nbd: illegal input index 1803188595 [ 632.194004][T10323] loop9: detected capacity change from 0 to 512 [ 632.262072][T10323] UDF-fs: warning (device loop9): udf_load_vrs: No VRS found [ 632.273480][T10323] UDF-fs: Scanning with blocksize 512 failed [ 632.345624][T10323] UDF-fs: warning (device loop9): udf_load_vrs: No VRS found [ 632.357448][T10323] UDF-fs: Scanning with blocksize 1024 failed [ 632.589398][T10323] UDF-fs: warning (device loop9): udf_load_vrs: No VRS found [ 632.597369][T10323] UDF-fs: Scanning with blocksize 2048 failed [ 632.731329][T10323] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 632.934894][T10323] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 633.206479][T10332] loop6: detected capacity change from 0 to 1024 [ 633.214842][T10334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1640'. [ 633.490876][T10331] hfsplus: invalid extended attribute record [ 633.918687][ T7295] hfsplus: b-tree write err: -5, ino 4 [ 634.240387][T10345] netlink: 'syz.5.1645': attribute type 4 has an invalid length. [ 634.642701][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 634.692524][ T5835] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 634.892701][ T5835] usb 9-1: Using ep0 maxpacket: 16 [ 634.896848][ T10] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 634.907681][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.918597][ T5835] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 634.918735][ T5835] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 634.918896][ T5835] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 634.919024][ T5835] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 634.919159][ T5835] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 634.925614][ T5835] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 634.930721][ T10] usb 7-1: Product: syz [ 634.930822][ T10] usb 7-1: Manufacturer: syz [ 634.930927][ T10] usb 7-1: SerialNumber: syz [ 634.954696][ T10] usb 7-1: config 0 descriptor?? [ 634.963999][ T5835] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 634.964127][ T5835] usb 9-1: Manufacturer: syz [ 635.039462][ T10] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 005 [ 635.063382][ T5835] usb 9-1: config 0 descriptor?? [ 635.454806][ T10] (null): failure reading functionality [ 635.497829][ T10] i2c i2c-1: connected i2c-tiny-usb device [ 635.663400][ T5835] rc_core: IR keymap rc-hauppauge not found [ 635.669656][ T5835] Registered IR keymap rc-empty [ 635.675475][ T5835] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 635.707803][ T5835] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 635.743047][ T5835] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 635.757728][ T5835] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input13 [ 635.790338][ T10] usb 7-1: USB disconnect, device number 5 [ 635.819599][ T5835] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 635.884201][ T5835] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 635.953043][ T5835] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 635.983012][ T5835] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 636.009528][ T5835] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 636.045697][ T5835] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 636.080447][ T5835] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 636.103230][ T5835] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 636.133201][ T5835] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 636.182627][ T5835] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 636.214744][ T5835] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 636.223324][ T5835] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 636.274945][ T5835] usb 9-1: USB disconnect, device number 4 [ 638.283875][T10406] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1670'. [ 638.676916][T10411] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1671'. [ 638.687079][T10411] netlink: 'syz.0.1671': attribute type 9 has an invalid length. [ 638.695177][T10411] netlink: 'syz.0.1671': attribute type 2 has an invalid length. [ 639.134690][T10418] loop5: detected capacity change from 0 to 512 [ 639.251243][T10418] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a054c028, mo2=0002] [ 639.311658][T10418] System zones: 0-2, 18-18, 34-35 [ 639.388905][T10418] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.402396][T10418] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 639.428631][T10425] loop6: detected capacity change from 0 to 64 [ 639.647990][T10418] EXT4-fs error (device loop5): ext4_empty_dir:3097: inode #12: comm syz.5.1676: Directory hole found for htree leaf block 0 [ 639.694623][T10418] EXT4-fs (loop5): Remounting filesystem read-only [ 639.957247][ T9727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.981955][ T52] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 639.993041][ T52] Quota error (device loop5): write_blk: dquota write failed [ 640.000671][ T52] Quota error (device loop5): free_dqentry: Can't write quota data block 5 [ 640.010363][ T52] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 640.021354][ T52] Quota error (device loop5): write_blk: dquota write failed [ 640.029053][ T52] Quota error (device loop5): free_dqentry: Can't write quota data block 5 [ 641.718812][T10453] syz.8.1692 (10453) used greatest stack depth: 4000 bytes left [ 642.193425][T10466] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1697'. [ 643.135275][T10479] loop0: detected capacity change from 0 to 64 [ 643.195722][T10479] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 643.346788][T10485] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1707'. [ 643.391417][T10485] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1707'. [ 644.673084][T10506] sg_write: process 512 (syz.8.1716) changed security contexts after opening file descriptor, this is not allowed. [ 645.952084][T10525] tipc: Started in network mode [ 645.957420][T10525] tipc: Node identity 326b00000000000006, cluster identity 4711 [ 646.001405][T10526] loop5: detected capacity change from 0 to 64 [ 646.120960][T10526] Trying to free block not in datazone [ 646.150332][T10526] minix_free_block (loop5:21): bit already cleared [ 646.251908][T10532] loop6: detected capacity change from 0 to 128 [ 646.342722][T10532] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 646.391333][T10533] loop8: detected capacity change from 0 to 2048 [ 646.477316][T10532] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 646.534173][T10533] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.961181][ T7446] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.271371][T10541] loop9: detected capacity change from 0 to 4096 [ 647.327605][T10541] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512). [ 647.641777][ T29] audit: type=1800 audit(1740159074.525:94): pid=10541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1733" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop9" ino=30 res=0 errno=0 [ 647.762418][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 647.954220][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 86, changing to 10 [ 647.965908][ T10] usb 9-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 647.976357][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.064768][ T10] usb 9-1: config 0 descriptor?? [ 648.124512][T10559] loop5: detected capacity change from 0 to 512 [ 648.599680][ T10] wacom 0003:056A:0333.0006: hidraw0: USB HID v0.00 Device [HID 056a:0333] on usb-dummy_hcd.8-1/input0 [ 648.757629][ T5835] usb 9-1: USB disconnect, device number 5 [ 649.353528][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 649.360210][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 649.650438][T10576] loop9: detected capacity change from 0 to 512 [ 649.749291][T10576] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 650.133225][ T9214] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.334252][T10587] vivid-002: disconnect [ 650.361939][T10586] vivid-002: reconnect [ 652.573493][T10616] netlink: 'syz.6.1764': attribute type 21 has an invalid length. [ 652.581734][T10616] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1764'. [ 652.595070][T10616] netlink: 'syz.6.1764': attribute type 21 has an invalid length. [ 652.603970][T10616] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1764'. [ 653.024102][ T5835] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 653.150457][T10623] loop0: detected capacity change from 0 to 1024 [ 653.167058][T10623] EXT4-fs: Ignoring removed nobh option [ 653.194182][ T10] hid (null): unknown global tag 0xd [ 653.207984][ T10] hid-generic 0005:10CF:4501.0007: unknown global tag 0xd [ 653.216248][ T10] hid-generic 0005:10CF:4501.0007: item 0 0 1 13 parsing failed [ 653.247625][ T10] hid-generic 0005:10CF:4501.0007: probe with driver hid-generic failed with error -22 [ 653.260957][ T5835] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 653.270601][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.357621][ T5835] usb 6-1: config 0 descriptor?? [ 653.379130][T10623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 653.410836][ T5835] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 653.572018][ T29] audit: type=1326 audit(1740159080.445:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10617 comm="syz.9.1765" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7fc00000 [ 653.596824][ T5835] gspca_sunplus: reg_w_riv err -71 [ 653.602589][ T5835] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 653.667845][ T5835] usb 6-1: USB disconnect, device number 6 [ 653.842896][ T9761] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.172422][ T5835] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 654.392892][ T5835] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 654.402587][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.449490][ T5835] usb 6-1: config 0 descriptor?? [ 654.498833][ T5835] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 654.871220][ T5835] gspca_sunplus: reg_w_riv err -71 [ 654.881470][ T5835] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 654.900906][ T5835] usb 6-1: USB disconnect, device number 7 [ 655.761007][T10657] loop6: detected capacity change from 0 to 1024 [ 655.838747][T10660] loop0: detected capacity change from 0 to 512 [ 655.920247][T10660] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 655.964496][T10665] loop5: detected capacity change from 0 to 512 [ 656.026652][T10665] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 656.069471][T10660] EXT4-fs (loop0): 1 truncate cleaned up [ 656.077354][T10660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.165841][T10665] EXT4-fs (loop5): 1 truncate cleaned up [ 656.173764][T10665] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 656.416665][T10665] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1784: bg 0: block 273: padding at end of block bitmap is not set [ 656.644809][ T9761] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.766712][ T9727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.817137][T10678] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1788'. [ 656.877276][T10679] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1788'. [ 657.446315][T10688] loop6: detected capacity change from 0 to 512 [ 657.627534][T10688] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.640919][T10688] ext4 filesystem being mounted at /316/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 657.902584][ T29] audit: type=1800 audit(1740159084.785:96): pid=10688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1793" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 657.923793][ T29] audit: type=1800 audit(1740159084.795:97): pid=10688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1793" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 658.274342][ T6607] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.818922][T10703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1798'. [ 658.847756][T10703] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1798'. [ 658.847848][T10703] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1798'. [ 658.904691][T10704] loop5: detected capacity change from 0 to 512 [ 658.907733][T10704] EXT4-fs: inline encryption not supported [ 658.907849][T10704] EXT4-fs: Ignoring removed nobh option [ 658.921510][T10704] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 659.064292][T10704] EXT4-fs (loop5): 1 truncate cleaned up [ 659.066153][T10704] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 659.175508][T10708] EXT4-fs error (device loop5): ext4_check_all_de:656: inode #12: block 7: comm syz.5.1800: bad entry in directory: inode out of bounds - offset=0, inode=16777215, rec_len=16, size=124 fake=0 [ 659.223090][T10704] EXT4-fs error (device loop5): ext4_find_dest_de:2079: inode #12: block 7: comm syz.5.1800: bad entry in directory: inode out of bounds - offset=0, inode=16777215, rec_len=16, size=56 fake=0 [ 659.402531][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 659.532483][T10710] loop0: detected capacity change from 0 to 512 [ 659.579575][ T9727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.586879][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 659.587028][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 659.605298][T10710] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 659.612384][ T10] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 659.612528][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.612645][ T10] usb 7-1: Product: syz [ 659.612738][ T10] usb 7-1: Manufacturer: syz [ 659.612833][ T10] usb 7-1: SerialNumber: syz [ 659.617298][ T10] usb 7-1: config 0 descriptor?? [ 659.620480][T10707] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 659.620992][T10707] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 659.663062][T10710] EXT4-fs (loop0): 1 truncate cleaned up [ 659.737114][T10710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 659.857705][T10707] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 659.858219][T10707] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 660.189307][ T9761] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.444380][T10718] loop8: detected capacity change from 0 to 1024 [ 660.469392][ T10] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 660.497598][ T10] usb 7-1: USB disconnect, device number 6 [ 660.559737][T10718] hfsplus: bad catalog entry type [ 660.647769][T10720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1805'. [ 660.705988][ T4775] hfsplus: b-tree write err: -5, ino 4 [ 660.722508][ T10] kernel read not supported for file /dsp1 (pid: 10 comm: kworker/0:1) [ 660.819579][T10722] syz.9.1806 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 661.747134][T10733] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1811'. [ 661.757109][T10733] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1811'. [ 661.766536][T10733] netlink: 31 bytes leftover after parsing attributes in process `syz.5.1811'. [ 661.775785][T10733] netlink: 'syz.5.1811': attribute type 3 has an invalid length. [ 661.783921][T10733] netlink: 'syz.5.1811': attribute type 2 has an invalid length. [ 661.791875][T10733] netlink: 31 bytes leftover after parsing attributes in process `syz.5.1811'. [ 662.408203][T10743] overlay: Unknown parameter ' [ 662.408203][T10743] time [ 662.408203][T10743] string [ 662.408203][T10743] statistic [ 662.408203][T10743] state [ 662.408203][T10743] realm [ 662.408203][T10743] rateest [ 662.408203][T10743] quota [ 662.408203][T10743] pkttype [ 662.408203][T10743] physdev [ 662.408203][T10743] cgroup [ 662.408203][T10743] cgroup [ 662.408203][T10743] cgroup [ 662.408203][T10743] owner [ 662.408203][T10743] nfacct [ 662.408203][T10743] nfacct [ 662.408203][T10743] mac [ 662.408203][T10743] limit [ 662.408203][T10743] ipvs [ 662.408203][T10743] helper [ 662.408203][T10743] devgroup [ 662.408203][T10743] cpu [ 662.408203][T10743] conntrack [ 662.408203][T10743] conntrack [ 662.408203][T10743] conntrack [ 662.408203][T10743] connlabel [ 662.408203][T10743] connbytes [ 662.408203][T10743] comment [ 662.408203][T10743] bpf [ 662.408203][T10743] bpf [ 662.408203][T10743] connmark [ 662.408203][T10743] mark [ 662.408203][T10743] rpfilter [ 662.408203][T10743] ah [ 662.408203][T10743] tcpmss [ 662.408203][T10743] socket [ 662.408203][T10743] socket [ 662.408203][T10743] socket [ 662.408203][T10743] socket [ 662.408203][T10743] sctp [ 662.408203][T10743] recent [ 662.408203][T10743] recent [ 662.408203][T10743] policy [ 662.408203][T10743] osf [ 662.408203][T10743] multiport [ 662.408203][T10743] length [ 662.408203][T10743] l2tp [ 662.408203][T10743] iprange [ 662.408203][T10743] ipcomp [ 662.408203][T10743] ttl [ 662.408203][T10743] hashlimit [ 662.408203][T10743] hashlimit [ 662.408203][T10743] hashlimit [ 662.408203][T10743] esp [ 662.408203][T10743] ecn [ 662.408203][T10743] tos [ 662.408203][T10743] dscp [ 662.408203][T10743] dccp [ 662.408203][T10743] connlimit [ 662.408203][T10743] cluster [ 662.408203][T10743] addrtype [ 662.408203][T10743] addrtype [ 662.408203][T10743] set [ 662.408203][T10743] set [ 662.408203][T10743] set [ 662.408203][T10743] set [ 662.408203][T10743] set [ 662.408203][T10743] icmp [ 662.810628][T10749] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1819'. [ 663.430417][T10761] loop9: detected capacity change from 0 to 64 [ 663.477494][T10758] IPv6: Can't replace route, no match found [ 664.056080][T10771] loop8: detected capacity change from 0 to 16 [ 664.559834][T10777] loop6: detected capacity change from 0 to 512 [ 664.604773][T10777] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 664.718449][T10777] EXT4-fs (loop6): 1 truncate cleaned up [ 664.727204][T10777] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 664.775621][ T29] audit: type=1800 audit(1740159091.665:98): pid=10777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1832" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 665.070115][ T6607] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.180282][T10789] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode [ 665.188220][T10789] macsec1: entered promiscuous mode [ 665.195075][T10789] macsec1: entered allmulticast mode [ 665.200693][T10789] mac80211_hwsim hwsim26 wlan0: entered allmulticast mode [ 666.872976][ T5835] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 667.078996][ T5835] usb 10-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 667.088738][ T5835] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.120610][T10819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1851'. [ 667.132789][ T5835] usb 10-1: config 0 descriptor?? [ 667.407740][ T5835] kaweth 10-1:0.0: Firmware present in device. [ 667.480937][ T29] audit: type=1326 audit(1740159094.355:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10823 comm="syz.8.1853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 667.622033][ T5835] kaweth 10-1:0.0: Error reading configuration (-71), no net device created [ 667.623371][ T29] audit: type=1326 audit(1740159094.395:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10823 comm="syz.8.1853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 667.631954][ T5835] kaweth 10-1:0.0: probe with driver kaweth failed with error -5 [ 667.654003][ T29] audit: type=1326 audit(1740159094.435:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10823 comm="syz.8.1853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 667.654234][ T29] audit: type=1326 audit(1740159094.455:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10823 comm="syz.8.1853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 667.710298][ T29] audit: type=1326 audit(1740159094.455:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10823 comm="syz.8.1853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 667.732880][ T29] audit: type=1326 audit(1740159094.485:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10823 comm="syz.8.1853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 667.755522][ T29] audit: type=1326 audit(1740159094.485:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10823 comm="syz.8.1853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 667.777954][ T29] audit: type=1326 audit(1740159094.485:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10823 comm="syz.8.1853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 667.803134][ T29] audit: type=1326 audit(1740159094.565:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10823 comm="syz.8.1853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f815a7 code=0x7ffc0000 [ 667.832660][ T5835] usb 10-1: USB disconnect, device number 2 [ 668.214082][T10832] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1857'. [ 668.335074][T10831] loop5: detected capacity change from 0 to 1024 [ 668.480292][T10831] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 668.554813][T10837] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1858'. [ 669.197946][ T9727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.620868][T10852] 8021q: adding VLAN 0 to HW filter on device bond1 [ 669.637288][T10852] bridge0: port 3(bond1) entered blocking state [ 669.645098][T10852] bridge0: port 3(bond1) entered disabled state [ 669.652377][T10852] bond1: entered allmulticast mode [ 669.663638][T10852] bond1: entered promiscuous mode [ 669.671420][T10852] bridge0: port 3(bond1) entered blocking state [ 669.678498][T10852] bridge0: port 3(bond1) entered forwarding state [ 669.751003][ T3504] bridge0: port 3(bond1) entered disabled state [ 670.080488][T10860] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1865'. [ 670.211056][T10862] batadv0: entered promiscuous mode [ 670.225245][T10862] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 670.233616][T10862] team0: Device macvtap1 failed to register rx_handler [ 670.305130][T10862] batadv0: left promiscuous mode [ 670.601431][T10865] loop5: detected capacity change from 0 to 256 [ 670.673366][T10867] loop8: detected capacity change from 0 to 128 [ 670.765903][T10865] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 670.838009][T10867] FAT-fs (loop8): Directory bread(block 32) failed [ 670.845196][T10867] FAT-fs (loop8): Directory bread(block 33) failed [ 670.855531][T10867] FAT-fs (loop8): Directory bread(block 34) failed [ 670.863456][T10867] FAT-fs (loop8): Directory bread(block 35) failed [ 670.870394][T10867] FAT-fs (loop8): Directory bread(block 36) failed [ 670.877379][T10867] FAT-fs (loop8): Directory bread(block 37) failed [ 670.884627][T10867] FAT-fs (loop8): Directory bread(block 38) failed [ 670.891388][T10867] FAT-fs (loop8): Directory bread(block 39) failed [ 670.898498][T10867] FAT-fs (loop8): Directory bread(block 40) failed [ 670.905377][T10867] FAT-fs (loop8): Directory bread(block 41) failed [ 671.228480][T10867] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 671.236547][T10867] FAT-fs (loop8): Filesystem has been set read-only [ 671.296285][T10873] loop9: detected capacity change from 0 to 256 [ 671.410195][T10873] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 671.826823][T10876] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1884'. [ 673.513912][T10902] bridge0: port 3(syz_tun) entered blocking state [ 673.526684][T10902] bridge0: port 3(syz_tun) entered disabled state [ 673.534183][T10902] syz_tun: entered allmulticast mode [ 673.542719][T10902] syz_tun: entered promiscuous mode [ 673.550366][T10902] bridge0: port 3(syz_tun) entered blocking state [ 673.557523][T10902] bridge0: port 3(syz_tun) entered forwarding state [ 674.443050][ T5835] kernel read not supported for file /dsp1 (pid: 5835 comm: kworker/1:2) [ 675.030598][T10925] loop6: detected capacity change from 0 to 64 [ 675.075951][ T10] IPVS: starting estimator thread 0... [ 675.182319][T10927] IPVS: using max 240 ests per chain, 12000 per kthread [ 675.647384][T10934] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1899'. [ 676.498784][T10949] loop6: detected capacity change from 0 to 64 [ 676.567140][T10950] loop5: detected capacity change from 0 to 256 [ 676.738339][T10950] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 677.656799][T10965] loop0: detected capacity change from 0 to 2048 [ 677.757691][T10966] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 678.119662][T10968] loop9: detected capacity change from 0 to 512 [ 678.237138][T10966] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 678.248393][T10966] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 678.317529][T10966] Remounting filesystem read-only [ 678.396453][T10968] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 678.410798][T10968] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 678.863486][ T9214] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.866084][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 679.866161][ T29] audit: type=1326 audit(1740159106.745:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10991 comm="syz.8.1925" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f81579 code=0x0 [ 680.169909][T10996] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1927'. [ 680.676802][T11002] team0: Device ipvlan2 failed to register rx_handler [ 682.107878][T11020] loop9: detected capacity change from 0 to 64 [ 683.142540][ T5835] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 683.363267][ T5835] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.374861][ T5835] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.385223][ T5835] usb 1-1: config 0 interface 0 has no altsetting 0 [ 683.392282][ T5835] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 683.401584][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.539224][ T5835] usb 1-1: config 0 descriptor?? [ 683.998069][ T5835] sony 0003:054C:024B.0008: item fetching failed at offset 0/5 [ 684.055077][ T5835] sony 0003:054C:024B.0008: parse failed [ 684.065151][ T5835] sony 0003:054C:024B.0008: probe with driver sony failed with error -22 [ 684.215135][ T5835] usb 1-1: USB disconnect, device number 3 [ 684.281221][ T29] audit: type=1326 audit(1740159111.145:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11044 comm="syz.9.1949" exe="/root/syz-executor" sig=31 arch=40000003 syscall=20 compat=1 ip=0xf7f46579 code=0x0 [ 684.293246][T11046] loop6: detected capacity change from 0 to 1024 [ 685.713436][ T5835] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 685.896868][ T5835] usb 10-1: Using ep0 maxpacket: 16 [ 685.934783][ T5835] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.945825][ T5835] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 685.957370][ T5835] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 685.967579][ T5835] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 685.977727][ T5835] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 686.031171][T11065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1958'. [ 686.153096][ T5835] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 686.162972][ T5835] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 686.171306][ T5835] usb 10-1: Manufacturer: syz [ 686.215521][ T5835] usb 10-1: config 0 descriptor?? [ 686.698293][T11062] loop9: detected capacity change from 0 to 1764 [ 686.758839][T11062] iso9660: Bad value for 'uid' [ 686.764420][T11062] iso9660: Bad value for 'uid' [ 687.266080][ T5835] rc_core: IR keymap rc-hauppauge not found [ 687.276682][ T5835] Registered IR keymap rc-empty [ 687.282421][ T5835] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 687.318015][ T5835] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 687.349636][ T5835] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 687.374273][ T5835] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input18 [ 687.429815][ T5835] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 687.454634][ T5835] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 687.532767][ T5835] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 687.553069][ T5835] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 687.573564][ T5835] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 687.603350][ T5835] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 687.640832][ T5835] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 687.673043][ T5835] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 687.693027][ T5835] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 687.713946][ T5835] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 687.745167][ T5835] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 687.774721][ T5835] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 687.805092][ T5835] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 22 [ 687.814788][ T5835] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 687.867682][ T5835] usb 10-1: USB disconnect, device number 3 [ 689.224075][T11107] netlink: 71 bytes leftover after parsing attributes in process `syz.6.1979'. [ 689.455853][T11110] loop8: detected capacity change from 0 to 128 [ 689.571428][T11110] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 689.630007][T11116] loop5: detected capacity change from 0 to 128 [ 689.687989][T11118] loop9: detected capacity change from 0 to 512 [ 689.688154][T11116] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 689.703183][T11110] ext4 filesystem being mounted at /286/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 689.757587][T11118] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 689.926764][ T29] audit: type=1800 audit(1740159116.795:114): pid=11116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1981" name="file2" dev="loop5" ino=132 res=0 errno=0 [ 690.042479][ T29] audit: type=1800 audit(1740159116.845:115): pid=11116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1981" name="file2" dev="loop5" ino=132 res=0 errno=0 [ 690.190008][T11123] loop6: detected capacity change from 0 to 2048 [ 690.238639][ T7446] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 690.255030][T11123] EXT4-fs: Ignoring removed mblk_io_submit option [ 690.301876][ T9214] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.386269][T11123] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 690.904757][ T6607] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.664443][T11146] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 691.670859][T11146] syzkaller1: linktype set to 823 [ 691.828055][ T5835] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 692.070068][ T5835] usb 1-1: Using ep0 maxpacket: 32 [ 692.095334][ T5835] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 692.104147][ T5835] usb 1-1: config 0 has no interface number 0 [ 692.110488][ T5835] usb 1-1: config 0 interface 184 has no altsetting 0 [ 692.170978][ T5835] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 692.180681][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.189663][ T5835] usb 1-1: Product: syz [ 692.194301][ T5835] usb 1-1: Manufacturer: syz [ 692.199107][ T5835] usb 1-1: SerialNumber: syz [ 692.261091][ T5835] usb 1-1: config 0 descriptor?? [ 692.290927][ T5835] smsc75xx v1.0.0 [ 692.544715][T11152] loop8: detected capacity change from 0 to 2048 [ 692.804864][T11152] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 693.148617][ T5835] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 693.160342][ T5835] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 693.222715][ T5835] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 693.234073][ T5835] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 693.244227][ T5835] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 693.255005][ T5835] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 693.265525][ T5835] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 693.390099][ T5835] usb 1-1: USB disconnect, device number 4 [ 694.408918][T11170] loop6: detected capacity change from 0 to 1024 [ 694.578171][T11170] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 694.591669][T11170] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 694.998253][T11178] loop8: detected capacity change from 0 to 4096 [ 695.013977][T11178] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512). [ 695.165997][ T6607] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.191503][T11175] loop0: detected capacity change from 0 to 8192 [ 695.222531][ T10] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 695.393055][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 695.446539][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 695.457440][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 695.469293][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 695.479435][ T10] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 695.489527][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 695.594931][ T10] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 695.604770][ T10] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 695.613247][ T10] usb 10-1: Manufacturer: syz [ 695.681437][ T10] usb 10-1: config 0 descriptor?? [ 696.243632][ T10] rc_core: IR keymap rc-hauppauge not found [ 696.253555][ T10] Registered IR keymap rc-empty [ 696.259062][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 696.319018][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 696.378530][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 696.393140][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input19 [ 696.514448][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 696.589514][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 696.624260][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 696.673237][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 696.694217][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 696.730493][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 696.776060][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 696.813136][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 696.843564][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 696.869885][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 696.900388][ T10] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 696.908919][ T10] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 696.973603][ T10] usb 10-1: USB disconnect, device number 4 [ 698.435756][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2037'. [ 698.901775][T11230] loop8: detected capacity change from 0 to 128 [ 698.949138][T11230] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 698.988602][T11234] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2031'. [ 699.003033][T11227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 699.026029][T11230] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 699.428279][ T3587] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 699.955792][T11243] loop8: detected capacity change from 0 to 1024 [ 700.169167][T11246] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2036'. [ 700.179461][T11246] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2036'. [ 701.749357][T11271] loop6: detected capacity change from 0 to 256 [ 702.321580][T11279] netlink: 'syz.0.2052': attribute type 1 has an invalid length. [ 702.330358][T11279] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 702.337851][T11279] IPv6: NLM_F_CREATE should be set when creating new route [ 702.460306][T11281] loop6: detected capacity change from 0 to 256 [ 702.633479][T11281] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 703.278260][T11295] loop6: detected capacity change from 0 to 8 [ 703.310083][T11294] loop9: detected capacity change from 0 to 256 [ 703.432670][ T29] audit: type=1800 audit(1740159130.315:116): pid=11294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2059" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop9" ino=135 res=0 errno=0 [ 703.658174][T11299] loop5: detected capacity change from 0 to 512 [ 703.810340][T11299] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.823761][T11299] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 703.976826][T11308] loop8: detected capacity change from 0 to 764 [ 704.244182][ T9727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.428756][T11314] loop9: detected capacity change from 0 to 512 [ 704.610173][T11314] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 704.626993][T11314] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 705.121086][ T9214] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.305856][T11328] hsr0: entered promiscuous mode [ 705.311917][T11328] macvtap1: entered allmulticast mode [ 705.317773][T11328] hsr0: entered allmulticast mode [ 705.323472][T11328] hsr_slave_0: entered allmulticast mode [ 705.329344][T11328] hsr_slave_1: entered allmulticast mode [ 705.452847][T11328] hsr0: left allmulticast mode [ 705.458051][T11328] hsr_slave_0: left allmulticast mode [ 705.468200][T11328] hsr_slave_1: left allmulticast mode [ 706.270488][T11342] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2079'. [ 706.280109][T11342] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2079'. [ 706.335770][T11344] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (78) [ 708.163792][T11359] loop6: detected capacity change from 0 to 4096 [ 708.682413][ T9710] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 708.845402][ T9710] usb 9-1: Using ep0 maxpacket: 8 [ 708.895127][ T9710] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.906782][ T9710] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 708.916907][ T9710] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 709.015409][ T9710] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 709.025047][ T9710] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.035215][ T9710] usb 9-1: Product: syz [ 709.039614][ T9710] usb 9-1: Manufacturer: syz [ 709.044700][ T9710] usb 9-1: SerialNumber: syz [ 709.329107][ T9710] cdc_ncm 9-1:1.0: bind() failure [ 709.345385][ T9710] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 709.352942][ T9710] cdc_ncm 9-1:1.1: bind() failure [ 709.389228][ T9710] usb 9-1: USB disconnect, device number 6 [ 710.099997][T11378] loop6: detected capacity change from 0 to 2048 [ 710.214017][T11378] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 710.694612][T11388] loop0: detected capacity change from 0 to 2048 [ 710.793814][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 710.800677][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 710.887081][T11388] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 711.287726][T11394] loop9: detected capacity change from 0 to 1024 [ 711.325830][T11394] EXT4-fs: Ignoring removed nobh option [ 711.471537][T11394] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 712.064086][ T9214] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.608652][T11415] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2112'. [ 713.018962][T11419] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2113'. [ 713.930653][T11433] loop9: detected capacity change from 0 to 512 [ 713.954815][T11433] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 713.990887][T11433] EXT4-fs (loop9): 1 truncate cleaned up [ 713.998769][T11433] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 714.132969][T11433] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2119: bg 0: block 273: padding at end of block bitmap is not set [ 714.350981][ T9214] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.799026][T11450] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 714.806829][T11450] macsec2: entered promiscuous mode [ 714.813296][T11450] macsec2: entered allmulticast mode [ 714.818824][T11450] mac80211_hwsim hwsim24 wlan0: entered allmulticast mode [ 715.095108][T11457] loop0: detected capacity change from 0 to 256 [ 715.379596][T11457] FAT-fs (loop0): Directory bread(block 64) failed [ 715.386859][T11457] FAT-fs (loop0): Directory bread(block 65) failed [ 715.394239][T11457] FAT-fs (loop0): Directory bread(block 66) failed [ 715.403968][T11457] FAT-fs (loop0): Directory bread(block 67) failed [ 715.412615][T11457] FAT-fs (loop0): Directory bread(block 68) failed [ 715.419441][T11457] FAT-fs (loop0): Directory bread(block 69) failed [ 715.426693][T11457] FAT-fs (loop0): Directory bread(block 70) failed [ 715.433624][T11457] FAT-fs (loop0): Directory bread(block 71) failed [ 715.440516][T11457] FAT-fs (loop0): Directory bread(block 72) failed [ 715.447418][T11457] FAT-fs (loop0): Directory bread(block 73) failed [ 716.281964][T11471] loop5: detected capacity change from 0 to 1024 [ 716.475761][T11473] overlayfs: missing 'lowerdir' [ 716.484617][T11471] hfsplus: bad catalog entry type [ 716.855555][T11477] loop0: detected capacity change from 0 to 512 [ 716.883152][T11477] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 716.937848][T11477] EXT4-fs (loop0): 1 truncate cleaned up [ 716.939494][T11477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 716.948253][ T4202] hfsplus: b-tree write err: -5, ino 4 [ 717.078666][T11477] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2136: bg 0: block 273: padding at end of block bitmap is not set [ 717.231285][T11484] loop5: detected capacity change from 0 to 128 [ 717.317682][T11484] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 717.363072][ T9761] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.426742][T11484] ext4 filesystem being mounted at /123/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 717.463199][ T9710] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 717.607784][T11489] IPv6: Can't replace route, no match found [ 717.625472][ T9710] usb 10-1: Using ep0 maxpacket: 8 [ 717.658416][ T9710] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 717.670591][ T9710] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.724987][ T9710] usb 10-1: config 0 descriptor?? [ 717.997509][ T9710] asix 10-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 718.370046][ T9727] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 718.390353][T11498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2144'. [ 718.640452][ T9710] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 718.651090][ T9710] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 718.695705][ T9710] asix 10-1:0.0: probe with driver asix failed with error -71 [ 718.723081][ T9710] usb 10-1: USB disconnect, device number 5 [ 718.828383][T11503] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2147'. [ 719.533988][T11512] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2150'. [ 720.648860][T11528] batadv0: entered promiscuous mode [ 720.659897][T11528] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 720.668252][T11528] team0: Device macvtap1 failed to register rx_handler [ 720.743190][T11528] batadv0: left promiscuous mode [ 722.101685][T11549] loop5: detected capacity change from 0 to 512 [ 722.227950][T11549] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 722.384362][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2170'. [ 722.843693][ T9727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.687774][T11577] loop6: detected capacity change from 0 to 2048 [ 723.891330][T11584] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 723.983073][ T29] audit: type=1804 audit(1740159150.855:117): pid=11577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2178" name="/newroot/394/bus/bus" dev="loop6" ino=18 res=1 errno=0 [ 724.346524][T11584] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 724.357998][T11584] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 724.457406][T11584] Remounting filesystem read-only [ 724.487831][T11588] loop8: detected capacity change from 0 to 2048 [ 724.494839][ T6607] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 724.655327][T11588] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 725.319702][ T7446] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.909924][T11610] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2190'. [ 726.817879][T11625] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2198'. [ 726.945028][T11619] loop5: detected capacity change from 0 to 4096 [ 726.971449][T11619] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 727.199758][T11627] loop6: detected capacity change from 0 to 1024 [ 727.254342][T11619] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 727.400430][T11627] hfsplus: can't free extent [ 727.756830][T11633] hfsplus: can't free extent [ 728.063344][ T52] hfsplus: b-tree write err: -5, ino 4 [ 728.722616][ T9710] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 728.911304][ T9710] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 728.924158][ T9710] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 729.001104][ T9710] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 729.011783][ T9710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.022670][ T9710] usb 1-1: Product: syz [ 729.027066][ T9710] usb 1-1: Manufacturer: syz [ 729.031875][ T9710] usb 1-1: SerialNumber: syz [ 729.043517][T11653] netlink: 'syz.6.2208': attribute type 39 has an invalid length. [ 729.069269][T11653] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.093481][ T9710] usb 1-1: config 0 descriptor?? [ 729.116110][T11643] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 729.133828][T11643] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 729.212050][T11653] bridge_slave_0 (unregistering): left allmulticast mode [ 729.227673][T11653] bridge_slave_0 (unregistering): left promiscuous mode [ 729.240928][T11653] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.434944][T11643] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 729.454600][T11643] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 729.592462][T11655] loop8: detected capacity change from 0 to 2048 [ 729.667670][T11655] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 729.729820][T11660] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 730.112720][ T9710] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 730.147726][ T9710] usb 1-1: USB disconnect, device number 5 [ 730.854933][T11665] loop9: detected capacity change from 0 to 4096 [ 730.881944][T11665] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 731.020725][T11675] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2219'. [ 731.031170][T11675] 0XD: renamed from gretap0 (while UP) [ 731.100398][T11675] 0XD: entered allmulticast mode [ 731.108514][T11675] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 731.221232][T11665] ntfs3(loop9): Failed to initialize $Extend/$Reparse. [ 734.022764][ T9710] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 734.217771][ T9710] usb 7-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 734.227780][ T9710] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.314636][ T9710] usb 7-1: config 0 descriptor?? [ 734.616350][ T9710] kaweth 7-1:0.0: Firmware present in device. [ 734.678381][T11724] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2240'. [ 734.808877][ T9710] kaweth 7-1:0.0: Statistics collection: 0 [ 734.815249][ T9710] kaweth 7-1:0.0: Multicast filter limit: 0 [ 734.821530][ T9710] kaweth 7-1:0.0: MTU: 0 [ 734.826128][ T9710] kaweth 7-1:0.0: Read MAC address 00:00:00:00:00:00 [ 735.175576][ T9710] kaweth 7-1:0.0: probe with driver kaweth failed with error -5 [ 735.193724][ T9710] usb 7-1: USB disconnect, device number 7 [ 736.416546][T11745] loop8: detected capacity change from 0 to 2048 [ 736.522524][T11750] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 736.611068][ T29] audit: type=1804 audit(1740159163.485:118): pid=11745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2248" name="/newroot/340/bus/bus" dev="loop8" ino=18 res=1 errno=0 [ 736.774509][T11752] loop5: detected capacity change from 0 to 256 [ 736.863435][T11750] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 736.875164][T11750] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4) [ 736.919229][T11750] Remounting filesystem read-only [ 736.937754][ T7446] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer [ 736.944905][T11752] exFAT-fs (loop5): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 737.084236][T11756] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2255'. [ 737.972515][ T9710] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 738.162905][ T9710] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 738.172528][ T9710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.224746][ T9710] usb 1-1: config 0 descriptor?? [ 738.524080][ T9710] kaweth 1-1:0.0: Firmware present in device. [ 738.711522][ T9710] kaweth 1-1:0.0: Statistics collection: 0 [ 738.718033][ T9710] kaweth 1-1:0.0: Multicast filter limit: 0 [ 738.724356][ T9710] kaweth 1-1:0.0: MTU: 0 [ 738.728814][ T9710] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 738.916728][ T9710] kaweth 1-1:0.0: probe with driver kaweth failed with error -5 [ 738.962637][ T9710] usb 1-1: USB disconnect, device number 6 [ 739.040726][T11782] loop9: detected capacity change from 0 to 2048 [ 739.137175][T11787] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 739.199537][ T29] audit: type=1804 audit(1740159166.085:119): pid=11782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.2266" name="/newroot/203/bus/bus" dev="loop9" ino=18 res=1 errno=0 [ 739.383169][T11787] NILFS (loop9): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 739.394709][T11787] NILFS error (device loop9): nilfs_bmap_propagate: broken bmap (inode number=4) [ 739.437265][T11787] Remounting filesystem read-only [ 739.453354][ T9214] NILFS (loop9): disposed unprocessed dirty file(s) when stopping log writer [ 740.473742][T11811] netlink: 'syz.0.2279': attribute type 39 has an invalid length. [ 740.504123][T11811] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.571557][T11806] loop9: detected capacity change from 0 to 512 [ 740.639382][T11811] bridge_slave_0 (unregistering): left allmulticast mode [ 740.648583][T11811] bridge_slave_0 (unregistering): left promiscuous mode [ 740.656185][T11811] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.762745][T11806] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 741.114489][T11819] netlink: 'syz.5.2281': attribute type 4 has an invalid length. [ 741.150662][ T9214] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.340841][T11840] loop6: detected capacity change from 0 to 256 [ 742.427466][ T29] audit: type=1800 audit(1740159169.305:120): pid=11840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2289" name="file1" dev="loop6" ino=137 res=0 errno=0 [ 743.643138][ T9216] Bluetooth: hci3: command 0x0405 tx timeout [ 744.078191][T11865] loop0: detected capacity change from 0 to 2048 [ 744.186489][T11865] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 747.082495][T11897] loop5: detected capacity change from 0 to 1024 [ 747.098545][T11897] EXT4-fs: Ignoring removed bh option [ 747.790272][T11897] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 747.988320][T11897] EXT4-fs error (device loop5): ext4_xattr_inode_iget:440: comm syz.5.2315: inode #13617: comm syz.5.2315: iget: illegal inode # [ 747.998175][T11897] EXT4-fs (loop5): Remounting filesystem read-only [ 747.998283][T11897] EXT4-fs warning (device loop5): ext4_xattr_inode_inc_ref_all:1146: inode #18: comm syz.5.2315: cleanup dec ref error -5 [ 747.998480][T11897] EXT4-fs warning (device loop5): ext4_xattr_block_set:2198: inode #18: comm syz.5.2315: dec ref error=-5 [ 748.069328][T11908] netlink: 'syz.9.2318': attribute type 39 has an invalid length. [ 748.088926][T11908] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.179179][T11908] bridge_slave_0 (unregistering): left allmulticast mode [ 748.201350][T11908] bridge_slave_0 (unregistering): left promiscuous mode [ 748.201694][T11908] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.287935][ T9727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 749.122834][ T10] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 749.329137][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 749.368491][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.379175][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 749.391177][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 749.403724][ T10] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 749.414907][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 749.472047][ T10] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 749.481728][ T10] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 749.490338][ T10] usb 10-1: Manufacturer: syz [ 749.550923][ T10] usb 10-1: config 0 descriptor?? [ 750.112704][ T10] rc_core: IR keymap rc-hauppauge not found [ 750.118993][ T10] Registered IR keymap rc-empty [ 750.125635][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 750.174752][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 750.217127][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 750.231752][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input20 [ 750.313782][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 750.405476][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 750.433029][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 750.463542][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 750.502729][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 750.522919][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 750.548714][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 750.583293][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 750.674631][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 750.707067][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 750.741153][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 750.794304][ T10] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 750.804268][ T10] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 750.871993][ T10] usb 10-1: USB disconnect, device number 6 [ 751.713778][T11959] loop9: detected capacity change from 0 to 760 [ 752.115393][T11966] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2344'. [ 752.129758][T11967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2345'. [ 752.189011][T11959] loop9: detected capacity change from 0 to 1024 [ 752.198302][T11967] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2345'. [ 752.207929][T11967] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2345'. [ 752.218348][T11969] pim6reg: entered allmulticast mode [ 752.275826][T11969] pim6reg: left allmulticast mode [ 752.865891][T11977] loop8: detected capacity change from 0 to 64 [ 754.365553][T12002] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2361'. [ 754.416931][T12002] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2361'. [ 754.699366][T12009] loop5: detected capacity change from 0 to 256 [ 754.810409][T12010] loop8: detected capacity change from 0 to 2048 [ 754.886006][T12009] FAT-fs (loop5): Directory bread(block 64) failed [ 754.893348][T12009] FAT-fs (loop5): Directory bread(block 65) failed [ 754.900258][T12009] FAT-fs (loop5): Directory bread(block 66) failed [ 754.907213][T12009] FAT-fs (loop5): Directory bread(block 67) failed [ 754.914374][T12009] FAT-fs (loop5): Directory bread(block 68) failed [ 754.921125][T12009] FAT-fs (loop5): Directory bread(block 69) failed [ 754.930892][T12009] FAT-fs (loop5): Directory bread(block 70) failed [ 754.934806][T12010] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 754.938011][T12009] FAT-fs (loop5): Directory bread(block 71) failed [ 754.957812][T12009] FAT-fs (loop5): Directory bread(block 72) failed [ 754.964784][T12009] FAT-fs (loop5): Directory bread(block 73) failed [ 755.279604][ T7446] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.821037][ T9710] kernel write not supported for file /uhid (pid: 9710 comm: kworker/1:3) [ 756.277442][T12031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2374'. [ 757.057092][T12041] loop8: detected capacity change from 0 to 2048 [ 757.136838][T12041] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 757.183007][ T9710] kernel read not supported for file /dsp1 (pid: 9710 comm: kworker/1:3) [ 757.544065][T12048] netlink: 'syz.6.2382': attribute type 6 has an invalid length. [ 757.917568][T12052] loop0: detected capacity change from 0 to 64 [ 758.380503][ T9761] hfs: node 4:3 still has 1 user(s)! [ 759.013561][ T3660] af_packet: tpacket_rcv: packet too big, clamped from 66 to 4294967294. macoff=82 [ 759.486676][T12078] loop6: detected capacity change from 0 to 128 [ 759.503041][T12078] VFS: Found a Xenix FS (block size = 512) on device loop6 [ 759.510647][T12078] Bad inode number on dev loop6: 2 is out of range [ 759.517467][T12078] SysV FS: get root inode failed [ 759.523868][T12078] oldfs: cannot read superblock [ 762.004073][T12119] loop9: detected capacity change from 0 to 64 [ 762.824117][T12130] [U]  [ 762.827098][T12130] [U] K{ [ 762.830305][T12130] [U] t 1ŠFfˊ`GJgo/mC [ 762.837810][T12130] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 762.853843][T12130] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 762.865003][T12130] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 762.901965][T12130] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 762.928460][T12130] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 762.940744][T12130] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 762.953151][T12130] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 763.131349][T12130] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 763.141183][T12130] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 763.155691][T12130] [U] 22Ʃx?0;3u [ 763.160254][T12130] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 763.187018][T12130] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 763.196774][T12130] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 763.205668][T12130] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 763.212195][T12130] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 763.227308][T12130] [U] ec [ 763.230636][T12130] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 763.258004][T12129] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 763.611356][T12142] loop8: detected capacity change from 0 to 256 [ 763.638374][T12142] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 763.650266][T12142] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 763.679121][T12141] loop6: detected capacity change from 0 to 1024 [ 763.756163][T12141] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 763.786745][T12142] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 764.224372][ T4775] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 764.279715][ T4775] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 336 with error 28 [ 764.292783][ T4775] EXT4-fs (loop6): This should not happen!! Data will be lost [ 764.292783][ T4775] [ 764.302809][ T4775] EXT4-fs (loop6): Total free blocks count 0 [ 764.316624][ T4775] EXT4-fs (loop6): Free/Dirty block details [ 764.322935][ T4775] EXT4-fs (loop6): free_blocks=68451041280 [ 764.328998][ T4775] EXT4-fs (loop6): dirty_blocks=336 [ 764.334574][ T4775] EXT4-fs (loop6): Block reservation details [ 764.340760][ T4775] EXT4-fs (loop6): i_reserved_data_blocks=21 [ 764.442474][ T6607] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.172553][ T9710] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 765.349483][ T9710] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 765.360390][ T9710] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 765.374061][ T9710] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 765.387882][ T9710] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 765.397306][ T9710] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.441826][ T9710] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 765.450729][ T9710] usb 9-1: invalid MIDI out EP 0 [ 765.672498][ T10] kernel read not supported for file /dsp1 (pid: 10 comm: kworker/0:1) [ 765.707752][ T9710] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 765.793975][ T9710] usb 9-1: USB disconnect, device number 7 [ 766.073949][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 766.256983][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 766.277346][ T10] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 766.286125][ T10] usb 6-1: config 0 has no interface number 0 [ 766.337672][ T10] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 766.347545][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.355910][ T10] usb 6-1: Product: syz [ 766.360269][ T10] usb 6-1: Manufacturer: syz [ 766.365288][ T10] usb 6-1: SerialNumber: syz [ 766.433938][ T10] usb 6-1: config 0 descriptor?? [ 766.448699][ T10] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 766.715519][ T10] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 766.754675][ T10] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 766.877385][T12179] loop0: detected capacity change from 0 to 8192 [ 766.902461][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 14 [ 767.115089][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 767.117985][ T9710] usb 6-1: USB disconnect, device number 8 [ 767.183100][ T9710] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 767.232039][ T9710] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 767.247150][ T9710] quatech2 6-1:0.51: device disconnected [ 768.318778][T12200] loop5: detected capacity change from 0 to 512 [ 768.380957][T12200] EXT4-fs: Ignoring removed orlov option [ 768.387189][T12200] EXT4-fs: Ignoring removed nomblk_io_submit option [ 768.496169][ T29] audit: type=1326 audit(1740159195.375:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.0.2451" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x0 [ 768.525736][T12200] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 768.534061][T12200] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e118, mo2=0002] [ 768.562870][T12200] System zones: 0-1, 15-15, 18-18, 34-34 [ 768.569908][T12200] EXT4-fs (loop5): orphan cleanup on readonly fs [ 768.576807][T12200] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 768.589470][T12200] EXT4-fs warning (device loop5): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 768.604400][T12200] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 768.620379][T12202] loop9: detected capacity change from 0 to 2048 [ 768.743354][T12202] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 768.759866][T12202] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 768.819635][T12200] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2448: bg 0: block 40: padding at end of block bitmap is not set [ 768.865889][T12200] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 768.876251][T12216] loop6: detected capacity change from 0 to 16 [ 768.884918][T12200] EXT4-fs (loop5): 1 truncate cleaned up [ 768.892042][T12216] erofs (device loop6): mounted with root inode @ nid 36. [ 768.895883][T12200] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 769.210549][ T9214] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.303365][ T9727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.293736][T12231] bridge0: entered promiscuous mode [ 770.300032][T12231] macvlan2: entered promiscuous mode [ 770.311637][T12230] loop8: detected capacity change from 0 to 512 [ 770.411743][T12230] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 770.425231][T12230] ext4 filesystem being mounted at /381/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 770.584308][T12238] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2462'. [ 770.681302][T12241] loop5: detected capacity change from 0 to 256 [ 770.820770][T12241] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 770.826403][ T7446] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.377737][T12249] mac80211_hwsim hwsim20 wlan1: entered promiscuous mode [ 771.466343][T12249] mac80211_hwsim hwsim20 wlan1: left promiscuous mode [ 772.235664][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 772.242689][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 772.627455][ T9710] kernel write not supported for file bpf-map (pid: 9710 comm: kworker/1:3) [ 772.767619][T12271] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2478'. [ 772.860296][T12274] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2475'. [ 773.441056][T12284] loop6: detected capacity change from 0 to 1024 [ 773.875703][T12288] team0: No ports can be present during mode change [ 775.500196][T12311] loop0: detected capacity change from 0 to 2048 [ 775.669314][T12311] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 776.047459][ T9761] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.896065][T12339] block nbd5: shutting down sockets [ 777.642958][T12350] mkiss: ax0: crc mode is auto. [ 777.744589][T12352] loop8: detected capacity change from 0 to 1024 [ 777.830943][T12352] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 778.398612][T12362] loop5: detected capacity change from 0 to 256 [ 778.442501][ T4202] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 778.511390][ T4202] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 424 with error 28 [ 778.524345][ T4202] EXT4-fs (loop8): This should not happen!! Data will be lost [ 778.524345][ T4202] [ 778.534624][ T4202] EXT4-fs (loop8): Total free blocks count 0 [ 778.540884][ T4202] EXT4-fs (loop8): Free/Dirty block details [ 778.547166][ T4202] EXT4-fs (loop8): free_blocks=68451041280 [ 778.553255][ T4202] EXT4-fs (loop8): dirty_blocks=432 [ 778.558699][ T4202] EXT4-fs (loop8): Block reservation details [ 778.565132][ T4202] EXT4-fs (loop8): i_reserved_data_blocks=27 [ 778.911561][ T7446] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.361462][T12376] dummy0: entered promiscuous mode [ 779.367176][T12376] macsec2: entered allmulticast mode [ 779.372774][T12376] dummy0: entered allmulticast mode [ 779.488942][T12376] dummy0: left allmulticast mode [ 779.496614][T12376] dummy0: left promiscuous mode [ 780.916835][ C1] sd 0:0:1:0: [sda] tag#7556 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 780.927829][ C1] sd 0:0:1:0: [sda] tag#7556 CDB: Write(6) 0a 08 10 00 ff ff ff ff 00 00 00 00 [ 781.419002][T12404] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2531'. [ 782.471928][T12423] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2538'. [ 782.735083][ T10] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 782.913189][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 782.947438][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 782.959203][ T10] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 782.969379][ T10] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 782.983194][ T9710] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 783.036306][ T10] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 783.046355][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 783.054852][ T10] usb 10-1: SerialNumber: syz [ 783.087284][T12415] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 783.124803][T12430] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2542'. [ 783.134287][T12430] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2542'. [ 783.187406][ T9710] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 783.198025][ T9710] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 783.257434][ T9710] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 783.267165][ T9710] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 783.275543][ T9710] usb 6-1: SerialNumber: syz [ 783.344953][ T10] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 783.403532][ T10] usb 10-1: USB disconnect, device number 7 [ 783.550378][ T9710] usb 6-1: 0:2 : does not exist [ 783.648331][ T9710] usb 6-1: USB disconnect, device number 9 [ 783.704121][T12436] vxcan1: entered allmulticast mode [ 783.719234][T12436] vxcan1: left allmulticast mode [ 784.230628][T12442] netem: incorrect ge model size [ 784.236456][T12442] netem: change failed [ 785.170786][T12454] loop6: detected capacity change from 0 to 2048 [ 785.317046][T12454] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 785.890456][ T6607] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.904443][T12472] loop0: detected capacity change from 0 to 8 [ 786.453141][ T5798] Bluetooth: hci0: adv larger than maximum supported [ 786.453258][ T5798] Bluetooth: hci0: Malformed LE Event: 0x0d [ 786.809638][T12484] mkiss: ax0: crc mode is auto. [ 787.681868][T12498] loop5: detected capacity change from 0 to 256 [ 787.722087][T12498] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 787.752701][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 787.929266][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 787.951103][ T10] usb 1-1: config 0 has no interfaces? [ 787.991737][ T10] usb 1-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 788.003659][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.012753][ T10] usb 1-1: Product: syz [ 788.017142][ T10] usb 1-1: Manufacturer: syz [ 788.021961][ T10] usb 1-1: SerialNumber: syz [ 788.063289][ T10] usb 1-1: config 0 descriptor?? [ 788.350305][T12506] netlink: 'syz.8.2572': attribute type 4 has an invalid length. [ 788.458482][ T10] usb 1-1: USB disconnect, device number 7 [ 788.873443][T12514] netlink: 'syz.8.2576': attribute type 3 has an invalid length. [ 788.881562][T12514] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.2576'. [ 789.206377][T12516] loop9: detected capacity change from 0 to 512 [ 789.392033][T12516] EXT4-fs error (device loop9): ext4_orphan_get:1389: inode #17: comm syz.9.2577: iget: bogus i_mode (0) [ 789.441180][T12516] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.2577: couldn't read orphan inode 17 (err -117) [ 789.472775][T12521] sp0: Synchronizing with TNC [ 789.518975][T12516] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 789.966184][ T9214] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.627820][T12540] loop8: detected capacity change from 0 to 256 [ 790.667540][T12540] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 791.509832][T12550] loop0: detected capacity change from 0 to 256 [ 793.235663][T12572] dummy0: entered promiscuous mode [ 793.241158][T12572] macsec2: entered allmulticast mode [ 793.246887][T12572] dummy0: entered allmulticast mode [ 793.327940][T12572] dummy0: left allmulticast mode [ 793.333446][T12572] dummy0: left promiscuous mode [ 793.665947][T12580] loop8: detected capacity change from 0 to 64 [ 794.134405][T12586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2609'. [ 794.175981][T12586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2609'. [ 794.219525][T12587] vxcan1: entered allmulticast mode [ 794.248441][T12587] vxcan1: left allmulticast mode [ 794.429908][T12583] loop9: detected capacity change from 0 to 2048 [ 794.600203][T12583] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 794.776337][T12591] loop0: detected capacity change from 0 to 1024 [ 795.775659][T12605] loop8: detected capacity change from 0 to 256 [ 795.848971][T12605] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 795.860316][T12605] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 796.045352][T12605] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 796.385636][T12613] dummy0: entered promiscuous mode [ 796.803116][ T10] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 797.014959][ T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 797.025764][ T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 797.074304][ T10] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 797.086849][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 797.095299][ T10] usb 10-1: SerialNumber: syz [ 797.394254][ T10] usb 10-1: 0:2 : does not exist [ 797.627027][ T10] usb 10-1: USB disconnect, device number 8 [ 798.348766][T12635] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2632'. [ 798.407670][T12635] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2632'. [ 798.417335][T12635] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2632'. [ 798.510194][T12638] loop9: detected capacity change from 0 to 1024 [ 798.535249][T12638] EXT4-fs: Ignoring removed nomblk_io_submit option [ 798.705749][T12638] EXT4-fs (loop9): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 798.878695][ T29] audit: type=1800 audit(1740159225.755:122): pid=12638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2633" name="bus" dev="loop9" ino=18 res=0 errno=0 [ 799.151610][T12650] netlink: 'syz.8.2637': attribute type 9 has an invalid length. [ 799.163195][T12650] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2637'. [ 799.194222][ T9214] EXT4-fs (loop9): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 799.601869][T12655] loop0: detected capacity change from 0 to 64 [ 800.456263][T12667] loop0: detected capacity change from 0 to 1024 [ 800.527044][T12667] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 800.628636][T12671] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2646'. [ 800.716810][T12667] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2644: Invalid block bitmap block 0 in block_group 0 [ 800.786703][T12667] Quota error (device loop0): write_blk: dquota write failed [ 800.794748][T12667] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 800.809280][T12667] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.2644: Failed to acquire dquot type 0 [ 800.875443][T12667] EXT4-fs error (device loop0): ext4_free_blocks:6589: comm syz.0.2644: Freeing blocks not in datazone - block = 0, count = 4096 [ 800.940960][T12667] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.2644: Invalid inode bitmap blk 0 in block_group 0 [ 800.963269][ T52] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 800.973412][ T52] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 0 [ 801.015447][T12667] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 801.033733][T12667] EXT4-fs (loop0): 1 orphan inode deleted [ 801.045286][T12667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 801.167736][T12667] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 16: comm syz.0.2644: path /245/file2: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 801.336785][T12684] pim6reg: entered allmulticast mode [ 801.401280][T12684] pim6reg: left allmulticast mode [ 801.532852][ T9761] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.794572][T12688] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2656'. [ 803.123231][T12709] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2664'. [ 804.703114][T12739] netlink: 'syz.5.2676': attribute type 3 has an invalid length. [ 804.711494][T12739] netlink: 'syz.5.2676': attribute type 3 has an invalid length. [ 805.429584][T12752] loop8: detected capacity change from 0 to 512 [ 805.451437][T12752] EXT4-fs: Ignoring removed nobh option [ 805.457424][T12752] EXT4-fs: Ignoring removed mblk_io_submit option [ 805.634585][T12752] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 805.831173][T12752] fs-verity: sha512 using implementation "sha512-generic" [ 805.839145][T12752] EXT4-fs warning (device loop8): ext4_begin_enable_verity:135: inode #13: comm syz.8.2682: verity is only allowed on extent-based files [ 806.268332][ T7446] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.285148][T12766] serio: Serial port ttyS3 [ 806.938590][T12775] loop8: detected capacity change from 0 to 2048 [ 807.006293][T12780] loop5: detected capacity change from 0 to 256 [ 807.079749][T12775] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 807.207585][T12775] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 807.232953][T12775] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 28 [ 807.237771][T12787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2695'. [ 807.245665][T12775] EXT4-fs (loop8): This should not happen!! Data will be lost [ 807.245665][T12775] [ 807.245757][T12775] EXT4-fs (loop8): Total free blocks count 0 [ 807.275344][T12775] EXT4-fs (loop8): Free/Dirty block details [ 807.281447][T12775] EXT4-fs (loop8): free_blocks=2415919104 [ 807.287628][T12775] EXT4-fs (loop8): dirty_blocks=16 [ 807.293095][T12775] EXT4-fs (loop8): Block reservation details [ 807.299287][T12775] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 807.341757][T12787] netlink: 173 bytes leftover after parsing attributes in process `syz.0.2695'. [ 807.404425][T12789] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 9 with error 28 [ 807.462618][T12780] FAT-fs (loop5): Directory bread(block 64) failed [ 807.469451][T12780] FAT-fs (loop5): Directory bread(block 65) failed [ 807.476632][T12780] FAT-fs (loop5): Directory bread(block 66) failed [ 807.483942][T12780] FAT-fs (loop5): Directory bread(block 67) failed [ 807.490892][T12780] FAT-fs (loop5): Directory bread(block 68) failed [ 807.497922][T12780] FAT-fs (loop5): Directory bread(block 69) failed [ 807.504984][T12780] FAT-fs (loop5): Directory bread(block 70) failed [ 807.511744][T12780] FAT-fs (loop5): Directory bread(block 71) failed [ 807.518945][T12780] FAT-fs (loop5): Directory bread(block 72) failed [ 807.525871][T12780] FAT-fs (loop5): Directory bread(block 73) failed [ 807.861442][T12793] loop0: detected capacity change from 0 to 764 [ 807.943407][T12793] rock: directory entry would overflow storage [ 807.949948][T12793] rock: sig=0x4654, size=5, remaining=4 [ 808.237569][T12798] loop8: detected capacity change from 0 to 512 [ 808.325719][T12798] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 808.494862][T12798] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 808.508547][T12798] ext4 filesystem being mounted at /427/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 808.780005][T12805] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 809.166509][ T7446] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.130892][T12828] loop9: detected capacity change from 0 to 256 [ 810.188561][T12828] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xb107716d, utbl_chksum : 0xe619d30d) [ 810.533654][T12832] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2715'. [ 810.543661][T12832] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2715'. [ 810.763463][ T9710] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 810.905914][T12836] loop0: detected capacity change from 0 to 2048 [ 810.992652][ T9710] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 811.002353][ T9710] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.024493][ T9710] usb 6-1: config 0 descriptor?? [ 811.049963][ T9710] cp210x 6-1:0.0: cp210x converter detected [ 811.060744][T12836] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 811.532574][ T9710] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 811.562074][T12846] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2721'. [ 811.620736][ T9710] usb 6-1: cp210x converter now attached to ttyUSB0 [ 811.812858][ T10] usb 6-1: USB disconnect, device number 10 [ 811.844233][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 811.883636][ T10] cp210x 6-1:0.0: device disconnected [ 812.601915][T12854] loop9: detected capacity change from 0 to 2048 [ 812.700333][T12854] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 812.930600][T12865] loop5: detected capacity change from 0 to 64 [ 813.256839][ T9214] UDF-fs: warning (device loop9): udf_evict_inode: Inode 1416 (mode 100004) has inode size 9000 different from extent length 9216. Filesystem need not be standards compliant. [ 813.763906][T12874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2733'. [ 813.911530][T12880] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2735'. [ 813.935841][T12877] loop9: detected capacity change from 0 to 2048 [ 814.054612][T12882] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 814.114336][ T29] audit: type=1800 audit(1740159241.005:123): pid=12877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2731" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 814.160221][T12883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2736'. [ 815.618752][ T9710] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 815.812377][ T9710] usb 10-1: Using ep0 maxpacket: 16 [ 815.824340][ T9710] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.836490][ T9710] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.846724][ T9710] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 815.862666][ T9710] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 815.872067][ T9710] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.041779][ T9710] usb 10-1: config 0 descriptor?? [ 816.550168][ T9710] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0009/input/input21 [ 816.700671][ T9710] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 816.775541][ T9710] usb 10-1: USB disconnect, device number 9 [ 816.907489][T12918] loop8: detected capacity change from 0 to 1024 [ 816.958378][T12918] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 816.996734][T12922] loop0: detected capacity change from 0 to 128 [ 817.025563][T12922] EXT4-fs: Ignoring removed nobh option [ 817.053405][T12918] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.2752: Invalid block bitmap block 0 in block_group 0 [ 817.062911][T12922] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 817.082606][T12918] Quota error (device loop8): write_blk: dquota write failed [ 817.090394][T12918] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 817.100961][T12918] EXT4-fs error (device loop8): ext4_acquire_dquot:6927: comm syz.8.2752: Failed to acquire dquot type 0 [ 817.121417][T12922] ext4 filesystem being mounted at /265/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 817.154391][T12918] EXT4-fs error (device loop8): ext4_free_blocks:6589: comm syz.8.2752: Freeing blocks not in datazone - block = 0, count = 4096 [ 817.220266][T12918] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.2752: Invalid inode bitmap blk 0 in block_group 0 [ 817.322058][ T7295] Quota error (device loop8): do_check_range: Getting block 0 out of range 1-8 [ 817.332336][ T7295] EXT4-fs error (device loop8): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 0 [ 817.352788][T12918] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 817.377474][T12918] EXT4-fs (loop8): 1 orphan inode deleted [ 817.385315][T12918] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 817.522911][T12918] EXT4-fs error (device loop8): ext4_readdir:261: inode #2: block 16: comm syz.8.2752: path /439/file2: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 817.725858][ T9761] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 817.836874][T12933] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2757'. [ 817.860214][ T7446] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.360079][T12941] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2762'. [ 818.362985][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 818.501560][T12943] loop9: detected capacity change from 0 to 256 [ 818.600357][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 818.610907][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 818.625376][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 818.681301][T12943] exFAT-fs (loop9): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 818.749016][ T10] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 818.758593][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.767109][ T10] usb 1-1: Product: syz [ 818.771502][ T10] usb 1-1: Manufacturer: syz [ 818.776446][ T10] usb 1-1: SerialNumber: syz [ 818.812553][ T10] usb 1-1: config 0 descriptor?? [ 818.825244][T12937] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 818.863298][T12937] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 818.873846][ T10] usb 1-1: ucan: probing device on interface #0 [ 819.773379][ T10] ucan 1-1:0.0: probe with driver ucan failed with error -71 [ 819.834625][ T10] usb 1-1: USB disconnect, device number 8 [ 820.235979][T12956] loop9: detected capacity change from 0 to 128 [ 820.294358][T12956] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 820.365110][T12956] ext4 filesystem being mounted at /300/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 820.440637][T12963] loop6: detected capacity change from 0 to 1024 [ 820.475360][T12963] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 820.525355][T12963] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2771: Invalid block bitmap block 0 in block_group 0 [ 820.557720][T12962] tap0: tun_chr_ioctl cmd 1074025680 [ 820.594427][T12963] Quota error (device loop6): write_blk: dquota write failed [ 820.602578][T12963] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 820.613097][T12963] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.2771: Failed to acquire dquot type 0 [ 820.702678][T12963] EXT4-fs error (device loop6): ext4_free_blocks:6589: comm syz.6.2771: Freeing blocks not in datazone - block = 0, count = 4096 [ 820.763837][T12963] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.2771: Invalid inode bitmap blk 0 in block_group 0 [ 820.800662][ T4775] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-8 [ 820.810324][ T4775] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:23: Failed to release dquot type 0 [ 820.828307][T12963] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 820.855651][T12963] EXT4-fs (loop6): 1 orphan inode deleted [ 820.864436][T12963] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 820.938217][ T9214] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 821.015798][T12968] input: syz0 as /devices/virtual/input/input22 [ 821.068747][T12963] EXT4-fs error (device loop6): ext4_readdir:261: inode #2: block 16: comm syz.6.2771: path /512/file2: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 821.361973][ T6607] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 822.602047][T12990] loop6: detected capacity change from 0 to 2048 [ 822.665022][T12990] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 822.719174][T12998] bridge0: entered promiscuous mode [ 822.725730][T12998] macvlan2: entered promiscuous mode [ 822.804939][T12999] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 823.170092][T12999] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 823.170225][T12999] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 823.177503][T12999] Remounting filesystem read-only [ 823.212527][ T6607] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 824.009426][T13017] loop0: detected capacity change from 0 to 512 [ 824.092827][T13017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 824.559056][ T9761] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.542867][ T9710] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 825.759804][ T9710] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 825.770602][ T9710] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 825.821124][ T9710] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 825.831180][ T9710] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 825.839580][ T9710] usb 9-1: SerialNumber: syz [ 826.001376][T13011] loop6: detected capacity change from 0 to 32768 [ 826.150488][ T9710] usb 9-1: 0:2 : does not exist [ 826.254307][ T9710] usb 9-1: USB disconnect, device number 8 [ 826.274462][T13011] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_delay=2013266920,journal_reclaim_delay=10,nojournal_transaction_names [ 826.299042][T13011] bcachefs (loop6): initializing new filesystem [ 826.313628][T13011] bcachefs (loop6): going read-write [ 826.339592][T13011] bcachefs (loop6): marking superblocks [ 826.375672][ T7295] ===================================================== [ 826.383375][ T7295] BUG: KMSAN: uninit-value in bch2_alloc_v4_validate+0x73f/0x1c10 [ 826.391375][ T7295] bch2_alloc_v4_validate+0x73f/0x1c10 [ 826.397108][ T7295] bch2_bkey_val_validate+0x357/0x530 [ 826.406184][ T7295] validate_bset_keys+0x20e3/0x2350 [ 826.411570][ T7295] validate_bset_for_write+0x2b3/0x410 [ 826.417504][ T7295] __bch2_btree_node_write+0x5436/0x6870 [ 826.423494][ T7295] bch2_btree_node_write_trans+0x2fd/0x890 [ 826.429479][ T7295] btree_interior_update_work+0x3eac/0x4830 [ 826.435678][ T7295] process_scheduled_works+0xc1a/0x1e80 [ 826.441462][ T7295] worker_thread+0xea7/0x14f0 [ 826.446439][ T7295] kthread+0x6b9/0xef0 [ 826.450669][ T7295] ret_from_fork+0x6d/0x90 [ 826.455350][ T7295] ret_from_fork_asm+0x1a/0x30 [ 826.460292][ T7295] [ 826.462804][ T7295] Uninit was stored to memory at: [ 826.468077][ T7295] bch2_alloc_v4_validate+0x215/0x1c10 [ 826.473945][ T7295] bch2_bkey_val_validate+0x357/0x530 [ 826.479495][ T7295] validate_bset_keys+0x20e3/0x2350 [ 826.484966][ T7295] validate_bset_for_write+0x2b3/0x410 [ 826.490605][ T7295] __bch2_btree_node_write+0x5436/0x6870 [ 826.496519][ T7295] bch2_btree_node_write_trans+0x2fd/0x890 [ 826.505238][ T7295] btree_interior_update_work+0x3eac/0x4830 [ 826.511341][ T7295] process_scheduled_works+0xc1a/0x1e80 [ 826.518055][ T7295] worker_thread+0xea7/0x14f0 [ 826.523103][ T7295] kthread+0x6b9/0xef0 [ 826.527344][ T7295] ret_from_fork+0x6d/0x90 [ 826.531987][ T7295] ret_from_fork_asm+0x1a/0x30 [ 826.537116][ T7295] [ 826.539529][ T7295] Uninit was stored to memory at: [ 826.544861][ T7295] bch2_sort_keys_keep_unwritten_whiteouts+0x14ab/0x1840 [ 826.552230][ T7295] __bch2_btree_node_write+0x3b3f/0x6870 [ 826.558045][ T7295] bch2_btree_node_write_trans+0x2fd/0x890 [ 826.564199][ T7295] btree_interior_update_work+0x3eac/0x4830 [ 826.570291][ T7295] process_scheduled_works+0xc1a/0x1e80 [ 826.576174][ T7295] worker_thread+0xea7/0x14f0 [ 826.581008][ T7295] kthread+0x6b9/0xef0 [ 826.585360][ T7295] ret_from_fork+0x6d/0x90 [ 826.589955][ T7295] ret_from_fork_asm+0x1a/0x30 [ 826.595528][ T7295] [ 826.597956][ T7295] Uninit was created at: [ 826.605083][ T7295] ___kmalloc_large_node+0x22c/0x370 [ 826.610550][ T7295] __kmalloc_large_node_noprof+0x3f/0x1e0 [ 826.617401][ T7295] __kmalloc_node_noprof+0xc96/0x1250 [ 826.623165][ T7295] __kvmalloc_node_noprof+0xc0/0x2d0 [ 826.628659][ T7295] __bch2_btree_node_mem_alloc+0x2be/0xa80 [ 826.634752][ T7295] bch2_fs_btree_cache_init+0x4f0/0xb60 [ 826.640516][ T7295] bch2_fs_open+0x4d84/0x5ba0 [ 826.645526][ T7295] bch2_fs_get_tree+0x98a/0x24e0 [ 826.650655][ T7295] vfs_get_tree+0xb1/0x5a0 [ 826.655363][ T7295] do_new_mount+0x71f/0x15e0 [ 826.660143][ T7295] path_mount+0x742/0x1f10 [ 826.664842][ T7295] __se_sys_mount+0x71f/0x800 [ 826.669730][ T7295] __ia32_sys_mount+0xe3/0x150 [ 826.674782][ T7295] ia32_sys_call+0x260e/0x4180 [ 826.679730][ T7295] __do_fast_syscall_32+0xb0/0x110 [ 826.685556][ T7295] do_fast_syscall_32+0x38/0x80 [ 826.690606][ T7295] do_SYSENTER_32+0x1f/0x30 [ 826.695418][ T7295] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 826.701980][ T7295] [ 826.707036][ T7295] CPU: 0 UID: 0 PID: 7295 Comm: kworker/u8:0 Not tainted 6.14.0-rc3-syzkaller-00166-g334426094588 #0 [ 826.718958][ T7295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 826.729369][ T7295] Workqueue: btree_update btree_interior_update_work [ 826.736381][ T7295] ===================================================== [ 826.743491][ T7295] Disabling lock debugging due to kernel taint [ 826.749782][ T7295] Kernel panic - not syncing: kmsan.panic set ... [ 826.756335][ T7295] CPU: 0 UID: 0 PID: 7295 Comm: kworker/u8:0 Tainted: G B 6.14.0-rc3-syzkaller-00166-g334426094588 #0 [ 826.770434][ T7295] Tainted: [B]=BAD_PAGE [ 826.774692][ T7295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 826.784894][ T7295] Workqueue: btree_update btree_interior_update_work [ 826.791810][ T7295] Call Trace: [ 826.795197][ T7295] [ 826.798227][ T7295] dump_stack_lvl+0x216/0x2d0 [ 826.803072][ T7295] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 826.809105][ T7295] dump_stack+0x1e/0x24 [ 826.813428][ T7295] panic+0x4e2/0xcf0 [ 826.817538][ T7295] ? kmsan_get_metadata+0xe1/0x1c0 [ 826.822855][ T7295] kmsan_report+0x2c7/0x2d0 [ 826.827538][ T7295] ? __msan_memcpy+0x108/0x1c0 [ 826.832483][ T7295] ? btree_interior_update_work+0x3eac/0x4830 [ 826.838746][ T7295] ? ret_from_fork+0x6d/0x90 [ 826.843515][ T7295] ? ret_from_fork_asm+0x1a/0x30 [ 826.848612][ T7295] ? get_page_from_freelist+0x157f/0x1600 [ 826.854556][ T7295] ? __msan_warning+0x95/0x120 [ 826.859491][ T7295] ? bch2_alloc_v4_validate+0x73f/0x1c10 [ 826.865287][ T7295] ? bch2_bkey_val_validate+0x357/0x530 [ 826.870998][ T7295] ? validate_bset_keys+0x20e3/0x2350 [ 826.876549][ T7295] ? validate_bset_for_write+0x2b3/0x410 [ 826.882352][ T7295] ? __bch2_btree_node_write+0x5436/0x6870 [ 826.888330][ T7295] ? bch2_btree_node_write_trans+0x2fd/0x890 [ 826.894477][ T7295] ? btree_interior_update_work+0x3eac/0x4830 [ 826.900736][ T7295] ? process_scheduled_works+0xc1a/0x1e80 [ 826.906660][ T7295] ? worker_thread+0xea7/0x14f0 [ 826.911677][ T7295] ? kthread+0x6b9/0xef0 [ 826.916078][ T7295] ? ret_from_fork+0x6d/0x90 [ 826.920841][ T7295] ? ret_from_fork_asm+0x1a/0x30 [ 826.925946][ T7295] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 826.931960][ T7295] ? kmsan_get_metadata+0x13e/0x1c0 [ 826.937356][ T7295] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 826.943876][ T7295] ? kmsan_get_metadata+0x13e/0x1c0 [ 826.949262][ T7295] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 826.955267][ T7295] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 826.961284][ T7295] ? kmsan_get_metadata+0x13e/0x1c0 [ 826.966667][ T7295] ? kmsan_internal_memmove_metadata+0x17b/0x230 [ 826.973197][ T7295] ? kmsan_get_metadata+0x13e/0x1c0 [ 826.978584][ T7295] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 826.984585][ T7295] __msan_warning+0x95/0x120 [ 826.989352][ T7295] bch2_alloc_v4_validate+0x73f/0x1c10 [ 826.994992][ T7295] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 827.001008][ T7295] ? __pfx_bch2_alloc_v4_validate+0x10/0x10 [ 827.007074][ T7295] bch2_bkey_val_validate+0x357/0x530 [ 827.012640][ T7295] validate_bset_keys+0x20e3/0x2350 [ 827.018067][ T7295] validate_bset_for_write+0x2b3/0x410 [ 827.023723][ T7295] __bch2_btree_node_write+0x5436/0x6870 [ 827.029542][ T7295] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 827.035550][ T7295] ? kmsan_get_metadata+0x13e/0x1c0 [ 827.040950][ T7295] ? kmsan_get_metadata+0x13e/0x1c0 [ 827.046388][ T7295] bch2_btree_node_write_trans+0x2fd/0x890 [ 827.052381][ T7295] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 827.058387][ T7295] btree_interior_update_work+0x3eac/0x4830 [ 827.064518][ T7295] ? btree_interior_update_work+0x3c6f/0x4830 [ 827.070787][ T7295] ? __pfx_btree_interior_update_work+0x10/0x10 [ 827.077227][ T7295] process_scheduled_works+0xc1a/0x1e80 [ 827.083021][ T7295] worker_thread+0xea7/0x14f0 [ 827.087858][ T7295] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 827.093876][ T7295] kthread+0x6b9/0xef0 [ 827.098103][ T7295] ? __pfx_worker_thread+0x10/0x10 [ 827.103382][ T7295] ? __pfx_kthread+0x10/0x10 [ 827.108151][ T7295] ret_from_fork+0x6d/0x90 [ 827.112735][ T7295] ? __pfx_kthread+0x10/0x10 [ 827.117486][ T7295] ret_from_fork_asm+0x1a/0x30 [ 827.122434][ T7295] [ 827.125827][ T7295] Kernel Offset: disabled [ 827.130217][ T7295] Rebooting in 86400 seconds..