last executing test programs: 1m3.629616327s ago: executing program 0 (id=117): r0 = inotify_init() close_range(r0, 0xffffffffffffffff, 0x2) inotify_rm_watch(r0, 0x0) 1m3.415648338s ago: executing program 0 (id=118): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="2e000000010001", 0x7) 1m3.219953829s ago: executing program 0 (id=123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xab}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) 1m3.08963366s ago: executing program 0 (id=125): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000440)='./file0\x00', 0x2000480, &(0x7f0000000480)=ANY=[], 0xfd, 0x62f4, &(0x7f00000006c0)="$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") mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1m1.777675288s ago: executing program 0 (id=140): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="6d932bbd7000000000000100"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1m0.705190084s ago: executing program 0 (id=155): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000006600)={0x2020}, 0x2020) pread64(r0, &(0x7f00000024c0)=""/209, 0xd1, 0x69a) 1m0.560605486s ago: executing program 32 (id=155): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000006600)={0x2020}, 0x2020) pread64(r0, &(0x7f00000024c0)=""/209, 0xd1, 0x69a) 1m0.067951708s ago: executing program 2 (id=161): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x20, 0x12, 0xa01, 0x70bd28, 0x25dfdbfd, {0x80, 0x0, 0x300}, [@typed={0x9, 0xf5, 0x0, 0x0, @binary="585878a177"}]}, 0x20}, 0x1, 0x0, 0x0, 0x8840}, 0x0) 59.78309932s ago: executing program 2 (id=164): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000140)={r1, r1, 0x0, 0x0, 0xffffffffffffffff}) 59.621218431s ago: executing program 2 (id=165): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 59.355338243s ago: executing program 2 (id=167): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000100)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@nodelalloc}, {@stripe={'stripe', 0x3d, 0x4000}}, {@noquota}, {@dioread_lock}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x9}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") syz_mount_image$exfat(0x0, &(0x7f00000000c0)='./bus\x00', 0x2105810, 0x0, 0x3, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 58.690107216s ago: executing program 2 (id=172): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000000, 0xfffffffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x8, 0x2004, @fd_index=0x2, 0x6, 0x9, 0x7fffffff, 0x18, 0x1, {0x1003}}) io_uring_enter(r0, 0x1808, 0x0, 0x0, 0x0, 0x0) 57.842457551s ago: executing program 2 (id=181): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x7, 0x0, r0, 0x0}]) 57.647191783s ago: executing program 33 (id=181): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x7, 0x0, r0, 0x0}]) 42.714906433s ago: executing program 6 (id=326): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x1) shutdown(r0, 0x1) 42.273071666s ago: executing program 6 (id=331): r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x17, &(0x7f0000000200)=r0, 0x21) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f00000000c0), 0x4) 42.106848357s ago: executing program 6 (id=334): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001000)=""/4111, 0x100f}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000000780)=""/18, 0x12}, {&(0x7f0000000480)=""/246, 0xf6}, {&(0x7f0000000280)=""/244, 0xf4}, {&(0x7f00000034c0)=""/211, 0xd3}, {&(0x7f00000001c0)=""/146, 0x92}], 0x8}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x2100, 0x0) 41.815833188s ago: executing program 6 (id=337): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f0000000a80)="$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") mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', &(0x7f0000000500), 0x82, 0x0) 41.44985266s ago: executing program 6 (id=342): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0, 0x60}, {&(0x7f0000001d40)="b1e3277cfbea29", 0x7}], 0x2}}], 0x1, 0x4400c800) 40.629752695s ago: executing program 6 (id=347): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff020}]}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010001fff2cad70000000000000000000", @ANYRES32=0x0, @ANYBLOB="c848010000010000200012800b000100697036746e6c000110000280050009002900000004001300080004"], 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x8080) 40.245017878s ago: executing program 34 (id=347): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff020}]}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010001fff2cad70000000000000000000", @ANYRES32=0x0, @ANYBLOB="c848010000010000200012800b000100697036746e6c000110000280050009002900000004001300080004"], 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x8080) 6.479592292s ago: executing program 4 (id=637): syz_mount_image$ocfs2(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x2a00403, &(0x7f00000003c0)=ANY=[@ANYBLOB="6c6f63616c616c6c6f633d31383434363734343037333730393535313630382c726573765f6c6576656c3d30303030303030303030303030303030303030322c6865617274626561743d6e6f6e652c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c6e6f696e74722c636f686572656e63793d66756c6c2c6e6f61636c2c636f686572656e63793d66756c6c2c646174613d6f7264657265642c00a6bbbf4f1c4504306b696ca03fb375edc4c5f0f579bf2195c3cc88165b8c279abaa84a848971253cb6e898fee96fa6", @ANYRES16, @ANYRESDEC=0x0], 0x8, 0x446f, &(0x7f0000004500)="$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") r0 = syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='.\x00', 0x108020, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4030582a, &(0x7f0000000680)={0x0, 0x3, 0x4714, 0x8000000000000001}) 4.724333902s ago: executing program 4 (id=649): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x40}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x78}, 0x0) 4.288233925s ago: executing program 4 (id=655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0xc800, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a808682b7fc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000023f0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.195581705s ago: executing program 4 (id=657): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xac, &(0x7f0000000080), &(0x7f0000000000)=0x4) 4.120875056s ago: executing program 4 (id=658): io_setup(0x6, &(0x7f00000000c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_print_times', 0x20001, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100)='9', 0x20000101}]) 3.764566908s ago: executing program 3 (id=663): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi4\x00', 0x100, 0x0) ioctl$COMEDI_LOCK(r0, 0x6405) ioctl$COMEDI_UNLOCK(r0, 0x6406) 3.630001469s ago: executing program 3 (id=665): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f00000003c0)="10", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e23, 0xa5f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x844c}}, 0x1, 0xf3a3}, &(0x7f0000000240)=0x90) 3.275364971s ago: executing program 1 (id=670): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @loopback, @loopback}}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 3.080153832s ago: executing program 1 (id=671): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8004}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4041, &(0x7f0000000000)=0xfc9) 2.966314463s ago: executing program 1 (id=673): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010", 0x25}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 2.699174964s ago: executing program 3 (id=676): r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x2, 0x0, 0x1, 0xffffffffffffffff}) 2.553392236s ago: executing program 3 (id=678): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x82c02) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x200, 0x76e6d370}) 2.544925265s ago: executing program 7 (id=679): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800500030002000000080001400000001708000240000000070900010073797a300000deff0900020073797a32"], 0x80}}, 0x0) 2.372569137s ago: executing program 7 (id=680): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2800080, &(0x7f0000000d40)={[{@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@numtail}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '861'}}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@uni_xlateno}, {@utf8no}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '861'}}, {@shortname_winnt}, {@uni_xlateno}, {@rodir}, {@utf8no}, {}]}, 0xfd, 0x2a8, &(0x7f0000000580)="$eJzs3c9qK1UcB/DfpGkSdZEsXInigC5cXW7vE6RIL1zMSslCXah4b0GaILRQ8A/GrgRXblz6BILQnS/hxjfwAQR3dlE4MslMk9Q07UDT+ufz2fT0nPOd8zuTaUsXOfnw5fHB0zz2T778LTqdLBr96MdZFr1oROXrWNL/LgCAf7OzlOKPNFMnl0VEZ3NlAQAbVPvv/+nGSwIANuydd997a3cw2Hs7zzvxePzN8bD4z774Ohvf3Y9PYhTP4mF04zwiXZi1H6eUJs280IvXx5PjYZEcf/BLef3d3yOm+Z3oRm/atZx/MtjbyWcW8pOijufL9ftF/lF048UV6z8Z7D1akY9hK954baH+B9GNXz+OT2MUT6dFzPNf7eT5m+n7P794vyivyGeT42F7Om8ubd3xSwMAAAAAAAAAAAAAAAAAAAAAwH/Yg/LsnHZMz+8pusrzd7bOi2+2I6/0ls/nmeWz6kKXzgeapPihOl/nYZ7nqZw4zzfjpWY072fXAAAAAAAAAAAAAAAAAAAA8M9y9NnnBx+NRs8Ob6VRnQZQva2//nVOp6n+Qs+rsT7Vnq/VKJtrloitak4WsbaeYhO3dFuuazx3Vc0//lT3gp3r52wXa3VucRfVy73QE1VPtvoeti8md6qH5OeqJ6WUWnHD1VtXDaVaj19r5VC39t1ovTBtTNbMieyqwr59Zf5zWQ5ll3fRWrrPS43tsrEQv/Rs1Hqe//67InNaBwAAAAAAAAAAAAAAAAAAbNT8Tb8rBk/WRhupvbGyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBOzT//v0ZjUoZvMLkVh0f3vEUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+B/4KAAD//+KpXP8=") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.idle_time\x00', 0x275a, 0x0) 2.344954626s ago: executing program 3 (id=681): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002a00)="8e1d5c610bfe415d01b31f79a031b5c018e0000060ffffffffff000000010000", 0x20) 2.186677578s ago: executing program 3 (id=683): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc12, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0xb1, [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x101, 0x2, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xc, 0x2, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x8, 0x20, {0x20, 0x5, "00f4387006c2836f285175715452948eb748ac84dee6ccbe85f9941a6beb"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.128539478s ago: executing program 1 (id=684): syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f00000001c0)={[{@eas_no}, {@chkdsk_no}, {@case_asis}, {@check_none}, {@timeshift={'timeshift', 0x3d, 0x1}}, {@umask={'umask', 0x3d, 0xfb}}]}, 0x1, 0x9e15, &(0x7f000000a040)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0xd8f) 1.524531151s ago: executing program 1 (id=688): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setresuid(0xee01, 0x0, 0x0) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.504889132s ago: executing program 5 (id=689): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f00000000c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b0dfd1ecda0fd0ed9a444b7fbb161860c18ff851923b530208f", 0x2e}], 0x4, 0x0, 0x0, 0x900}}], 0x2, 0x0) 1.372641102s ago: executing program 5 (id=690): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) 1.262165173s ago: executing program 5 (id=691): syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1600008, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x3, 0x67b, &(0x7f0000000280)="$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") mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) 642.867417ms ago: executing program 5 (id=692): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(r0, 0x80047437, 0xfffffffffffeffff) 623.130487ms ago: executing program 1 (id=693): syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000240)='./file0\x00', 0x5d8, &(0x7f0000000340)={[{@iocharset={'iocharset', 0x3d, 'cp936'}}, {@dmode={'dmode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0xff86}}, {@cruft}, {@mode={'mode', 0x3d, 0xffffffffffffffff}}, {@check_strict}, {@hide}, {@check_relaxed}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@cruft}, {}, {@dmode={'dmode', 0x3d, 0xfffffffffffffffe}}, {@check_strict}, {@cruft}, {@utf8}, {@map_acorn}], [{@pcr={'pcr', 0x3d, 0x200000002}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@obj_type={'obj_type', 0x3d, '\'.]\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00'}}, {@dont_appraise}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x62, 0x39, 0x31, 0x54, 0x32, 0x37, 0x30], 0x2d, [0x64, 0x35, 0x34, 0x62], 0x2d, [0x57, 0x62, 0x32, 0x63], 0x2d, [0x39, 0x0, 0x62, 0x31], 0x2d, [0x66, 0x32, 0x61, 0x39, 0x64, 0x35, 0x61, 0x32]}}}, {@dont_measure}, {@hash}]}, 0x1, 0x94e, &(0x7f0000003340)="$eJzs3U9vHGcZAPBn1l7iulWakrRx3ENXTYxMBM7uRkmIcsHxrp0tthfZjtSKi4G4KIpFEQUpVByChDgRwQFxgFuOnCJ66QnlU3Dgkg/AJeLkm9E7u06cZv/YluN1nN9Pmp2dmWfe53n9zs7IXu9O8Crb3NzMpz0u3/zHQRbL4XO99vjBw/tp+t29+EYMxaXsq4iRiChFDEfEWERxprbUXOjT0J2I1Yh4FJFFxLFozXdkNbI/xVvPlh9F9veUl5dvk9faoI8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4jLKZWrlcyWK+sXjz41J3+S3Ae2zfaq9ZSI+FZt+8EVmaYmRk61bfYyefbX43PXwYp1tLp/MbksdIfPHmeyeunRwubO3fo6Bdm4rYdXuf/+aLOz9eX1/75X4W8gqZqy82lpuNhem5eqmx3CxdvXy5fOHG7HJptjFfX/5keaW+UJpZqk+vNJdKkzPfLlWuXr1Yqk990ry5OFebnq9vrbzy3Wq5fLn00dQP69NLy83FCx9NLc/caMzPNxbn8pi0OcVcSQfiDxorpZX69EKp9Ont9bWL/YpMQZWdBFX7BVXL1WqlUq1WLl+6eulKuTz8wory18QLEft70PLq2fdzOOzVZvv6DwAAABxdWf439vT7fzH/O3wWs435ennQZQEAAAD7KH/n/3SaFSPijfZav/8DAADAUdL/M3Z9I7LvxJlWxJlbrfmtdsQ/j+URo7ON+frUTHP+WiW+9fTTfp1bK+b/fnA+xltR46Ot+Wg7qv3JwZEUVZm6Vonz8X4r4v3Js2l2drJDZLUV2f7kTalH5MUUCQBH3Yd9rsc7uf6fj4lWxMR4upjG8HiHK2vZlRUADoun32DzEp8Muo8AwPNcpQEAAAAAAAAAAAAAAAAAAAAAAAAAAGD/HcT3/x+CJ8WDTzoUEYei754c4SfpKHs5LXc7Y2QHe4ICAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjNZBFDndYXIo5FRDkiLhx8VS/PvUEXMGDZRmzE3Tg+6DoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI6a9vf/F6I1f7O1KoYLERMRsRoRPxp0jXvS8a4GERsHXcchs+37/9OYx2YWw61hj6w4U1tqLqThz+/9UHj84OH9NO0lT2ogZXhuGNoZuu/1Tr7XaG3t8zu/+uwXpdr1vMjrK7PztYW5pe8/C3wv+zKiFK1py1a9v53415879PzL1NOd5Z3N89ZezHu609698/Zye32tmjKt1D9e+fXPb9/dtumbMR5xdjJi8vlMP0tTl0zjUeyVLXuS/SE7Hn+N1Xz8008j28zSEL2d9/+NT2+vr0399LP1W11qOhFjEXErYmTnNY3l55OO8qOuUExZy3lQejjVp72etrVY6dKHd+JMRIzuqg9nuvch1+fn3q7oYpeKTsYHrZGOnVf0QZ+MHWVPsv9kN+Lf8ftt9/8opPGfiJ28OlNMHrntSOkaWWhF5j2v9myz66uSvSn02vjH+El87+n4F7ad/9tjdTDno20Z+74udpGxx+sivyKd+toVqX326bZPu85Tragudb4b5yKGx3d1RjnX54zy4v7Fnfazu+xJ9rdsMv4X99z/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOPyyiKFO6wsRExFxIiLeTsuliM39yFcYzeK/x/ejpb25N7jUh0K2ERtxNwY4AgAAAAAAAADsp+u1xw8e3k9TlhaH4lz2VcRI653+4Yg4kf2lOFNbai70aagYsRoRj/ZQQ9ov3nq2/Cgtje2hIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjqz/BwAA//8V5bJ0") r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) 501.792027ms ago: executing program 7 (id=694): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c1c, &(0x7f0000000580)={[{@fat=@debug}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@utf8no}, {@rodir}, {@utf8no}, {@shortname_lower}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@shortname_lower}, {@uni_xlateno}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0xe4}}, {@shortname_win95}]}, 0x89, 0x29b, &(0x7f0000000180)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 245.029199ms ago: executing program 7 (id=695): io_uring_setup(0x7bdc, &(0x7f0000000080)) r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000000b80)=[{{&(0x7f0000000080)=@phonet={0x23, 0x4, 0x0, 0xa}, 0x80, 0x0}}], 0x1, 0x44) 209.917879ms ago: executing program 5 (id=696): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x1c}}, 0x0) 158.284779ms ago: executing program 4 (id=697): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) syz_read_part_table(0x5ac, &(0x7f00000005c0)="$eJzs0r1LI2kYAPB3creEO1giy8IebLOwYavsLmSL3SIpRGJIY4J4YmEtWGghWFhIJFr78Q8ofoHYiHClpRhBFGIlKcX6QLFJNYdkrvE4joOL3h2/XzEz7/M8M8+8PG/gPy0Vfo3jOAohxOk/Zr/7i7d/3i8NVt7V+odHQojCeAih9lP45SETJRW/f/UwWVeTdSWdb22eDdzt952/v2xmt1PdcP3hshBCmLreyfwjG+R/7aB4kllcmikvzxUnr8rzN18mPpberpSm175uFeqjbwpjycE6ip+mf7b1bfcirt6uv/z0otnq5E+TulzUm/48r8fz33jdaDc6Qx/2Zj/nXrWP66vJ3O/NHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6LGD4klmcWmmvDxXnLwqz998mfhYertSml77ulWoj74pjKW6dUepp+mfbX3bvYirt+svP71otjr506QuF/WmP8/r8fw3Xjfajc7Qh73Zz7lX7eP6ajL3+yh833368Vn/FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD49ysNVt7V+odHQojCeAhhINW38xCP0918lNQdJvdqEq+k863Ns4G7/b7z95fN7HYtiR+lQlgIIUxd72T+rOcPvdwQf8tvAQAA///9K4jS") 151.60912ms ago: executing program 7 (id=698): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x1000003, 0x300102, 0x0, 'queue1\x00', 0xffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000cc0)) 43.075131ms ago: executing program 5 (id=699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) 0s ago: executing program 7 (id=700): unshare(0x2a020480) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) quotactl_fd$Q_SETQUOTA(r0, 0x3, 0x0, 0x0) kernel console output (not intermixed with test programs): 74.296087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.312597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.322141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.337087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.365851][ T4196] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.371588][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.379113][ T4196] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.392407][ T4196] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.393477][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.402340][ T4196] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.425158][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.435825][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.444868][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.504234][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.513404][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.522612][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.531288][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.537416][ T4243] Bluetooth: hci0: command 0x040f tx timeout [ 74.550868][ T4243] Bluetooth: hci2: command 0x040f tx timeout [ 74.573651][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.584492][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.594164][ T4188] device veth0_vlan entered promiscuous mode [ 74.609155][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.617634][ T2302] Bluetooth: hci3: command 0x040f tx timeout [ 74.620402][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.632133][ T2302] Bluetooth: hci4: command 0x040f tx timeout [ 74.651497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.659325][ T2302] Bluetooth: hci1: command 0x040f tx timeout [ 74.684499][ T4192] device veth0_vlan entered promiscuous mode [ 74.693976][ T4270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.696225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.711252][ T4270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.715642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.733697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.744551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.755578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.779478][ T4188] device veth1_vlan entered promiscuous mode [ 74.801999][ T4192] device veth1_vlan entered promiscuous mode [ 74.851935][ T410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.872815][ T410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.906411][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.919486][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.924536][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.930709][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.942280][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.951952][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.960660][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.969217][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.006059][ T4192] device veth0_macvtap entered promiscuous mode [ 75.038944][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.077406][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.103300][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.122688][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.138486][ T4188] device veth0_macvtap entered promiscuous mode [ 75.145109][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.155210][ T4192] device veth1_macvtap entered promiscuous mode [ 75.171742][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.183859][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.208984][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.230899][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.255907][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.268133][ T4188] device veth1_macvtap entered promiscuous mode [ 75.292631][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.303413][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.319518][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.334721][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.348619][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.365257][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.379597][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.405773][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.423696][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.435366][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.452188][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.462553][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.492912][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.507971][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.515484][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.528364][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.539332][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.548866][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.563875][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.595335][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.617256][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.626013][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.656824][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.703955][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.715643][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.726733][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.738829][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.749107][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.766115][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.795757][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.813675][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.826236][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.856948][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.860964][ T4305] loop2: detected capacity change from 0 to 32768 [ 75.868041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.883710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.921725][ T4313] loop1: detected capacity change from 0 to 512 [ 75.926433][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.942788][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.953040][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.961637][ T4305] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.8 (4305) [ 75.963995][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.986461][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.000405][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.019946][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.032125][ T4305] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 76.043259][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.055984][ T4305] BTRFS info (device loop2): using free space tree [ 76.064240][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.072298][ T4305] BTRFS info (device loop2): has skinny extents [ 76.084834][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.146271][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.179797][ T4313] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 76.220331][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.236258][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.259522][ T4313] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.266352][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.287932][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.407144][ T7] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 76.436835][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.444902][ T7] usb 1-1: Product: syz [ 76.466882][ T7] usb 1-1: Manufacturer: syz [ 76.469670][ T4305] BTRFS info (device loop2): enabling ssd optimizations [ 76.471663][ T7] usb 1-1: SerialNumber: syz [ 76.501329][ T7] usb 1-1: config 0 descriptor?? [ 76.550036][ T7] ch341 1-1:0.0: ch341-uart converter detected [ 76.573261][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.599631][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.627780][ T4258] Bluetooth: hci2: command 0x0419 tx timeout [ 76.636871][ T4258] Bluetooth: hci0: command 0x0419 tx timeout [ 76.645354][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.667590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.685932][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.709569][ T4243] Bluetooth: hci1: command 0x0419 tx timeout [ 76.717096][ T4243] Bluetooth: hci4: command 0x0419 tx timeout [ 76.722608][ T4305] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 76.736017][ T4243] Bluetooth: hci3: command 0x0419 tx timeout [ 76.764217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.792085][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.816545][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.832609][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.847689][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.850376][ T4305] CIFS mount error: No usable UNC path provided in device string! [ 76.850376][ T4305] [ 76.857850][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.896142][ T4305] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 76.898115][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.111255][ T4341] loop4: detected capacity change from 0 to 512 [ 77.232739][ T7] usb 1-1: failed to send control message: -71 [ 77.243121][ T7] ch341-uart: probe of ttyUSB0 failed with error -71 [ 77.306939][ T7] usb 1-1: USB disconnect, device number 2 [ 77.351750][ T4341] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 77.360415][ T7] ch341 1-1:0.0: device disconnected [ 77.494479][ T4341] UDF-fs: error (device loop4): udf_read_inode: (ino 19) failed ident=264 [ 77.597621][ T4243] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.690200][ T4363] loop4: detected capacity change from 0 to 128 [ 77.723533][ T4363] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 77.739690][ T4363] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 77.785591][ T4365] loop2: detected capacity change from 0 to 512 [ 77.837756][ T4365] ======================================================= [ 77.837756][ T4365] WARNING: The mand mount option has been deprecated and [ 77.837756][ T4365] and is ignored by this kernel. Remove the mand [ 77.837756][ T4365] option from the mount to silence this warning. [ 77.837756][ T4365] ======================================================= [ 77.845022][ T4367] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 77.881230][ T4243] usb 4-1: Using ep0 maxpacket: 16 [ 77.946341][ T4365] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2776: inode #11: comm syz.2.13: corrupted xattr block 95 [ 77.973347][ T4365] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2826: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 78.005239][ T4365] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.13: bg 0: block 7: invalid block bitmap [ 78.024126][ T4365] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 78.043545][ T4365] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2942: inode #11: comm syz.2.13: corrupted xattr block 95 [ 78.057836][ T4243] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.070139][ T4243] usb 4-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 78.079858][ T4243] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.079919][ T4365] EXT4-fs warning (device loop2): ext4_evict_inode:302: xattr delete (err -117) [ 78.092755][ T4243] usb 4-1: config 0 descriptor?? [ 78.113503][ T4374] loop4: detected capacity change from 0 to 128 [ 78.123614][ T4365] EXT4-fs (loop2): 1 orphan inode deleted [ 78.132621][ T4365] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.464063][ T4384] loop1: detected capacity change from 0 to 16 [ 78.549688][ T4384] erofs: (device loop1): mounted with root inode @ nid 36. [ 78.582858][ T4243] wacom 0003:056A:0317.0001: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 78.606642][ T4384] attempt to access beyond end of device [ 78.606642][ T4384] loop1: rw=524288, want=3145744, limit=16 [ 78.638014][ T4243] wacom 0003:056A:0317.0001: hidraw0: USB HID v0.00 Device [HID 056a:0317] on usb-dummy_hcd.3-1/input0 [ 78.673013][ T4384] attempt to access beyond end of device [ 78.673013][ T4384] loop1: rw=524288, want=524296, limit=16 [ 78.690056][ T4243] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0317.0001/input/input5 [ 78.728289][ T4384] attempt to access beyond end of device [ 78.728289][ T4384] loop1: rw=0, want=3145744, limit=16 [ 78.772020][ T26] audit: type=1800 audit(1762202808.166:2): pid=4384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.28" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 78.807446][ T4352] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 78.840940][ T4243] usb 4-1: USB disconnect, device number 2 [ 78.873674][ T4403] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 79.033507][ T4406] loop1: detected capacity change from 0 to 1024 [ 79.073665][ T4406] EXT4-fs (loop1): Ignoring removed orlov option [ 79.083301][ T4404] fido_id[4404]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 79.145235][ T4406] EXT4-fs (loop1): mounted filesystem without journal. Opts: acl,barrier,barrier=0x0000000000000000,sysvgroups,debug_want_extra_isize=0x0000000000000080,orlov,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 79.204235][ T4412] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 79.277155][ T4352] usb 3-1: unable to get BOS descriptor or descriptor too short [ 79.337768][ T4352] usb 3-1: not running at top speed; connect to a high speed hub [ 79.363583][ T4414] binder: 4413:4414 ioctl 4018620d 0 returned -22 [ 79.371416][ T4414] binder: 4413:4414 ioctl c0046209 0 returned -22 [ 79.427177][ T4352] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.448399][ T4352] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 79.478731][ T4352] usb 3-1: too many endpoints for config 1 interface 1 altsetting 23: 170, using maximum allowed: 30 [ 79.516063][ T4352] usb 3-1: config 1 interface 1 altsetting 23 has 0 endpoint descriptors, different from the interface descriptor's value: 170 [ 79.566408][ T4352] usb 3-1: config 1 interface 1 has no altsetting 0 [ 79.731039][ T4432] comedi comedi3: no devices specified [ 79.747098][ T4352] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.776602][ T4352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 79.818146][ T4352] usb 3-1: Product: syz [ 79.822364][ T4352] usb 3-1: Manufacturer: syz [ 79.847827][ T4352] usb 3-1: SerialNumber: syz [ 79.878140][ T4388] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 79.947452][ T4444] loop4: detected capacity change from 0 to 512 [ 80.007945][ T4444] EXT4-fs (loop4): Ignoring removed nobh option [ 80.014489][ T4444] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 80.064165][ T4452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.58'. [ 80.094511][ T4444] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.55: iget: bad i_size value: 38620345925642 [ 80.113343][ T4444] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.55: couldn't read orphan inode 15 (err -117) [ 80.144332][ T4444] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,jqfmt=vfsv0,data_err=ignore,,errors=continue. Quota mode: writeback. [ 80.187042][ T4352] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 80.210147][ T4352] usb 3-1: USB disconnect, device number 2 [ 80.283316][ T4444] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.55: invalid indirect mapped block 3973251072 (level 0) [ 80.414410][ T4460] loop0: detected capacity change from 0 to 128 [ 80.507540][ T4462] device macsec1 entered promiscuous mode [ 80.527787][ T4460] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 80.649036][ T4460] process 'syz.0.62' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 80.795209][ T4450] loop3: detected capacity change from 0 to 32768 [ 81.066393][ T4450] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 81.110059][ T4450] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 81.237046][ T4352] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.382687][ T4188] ocfs2: Unmounting device (7,3) on (node local) [ 81.397953][ T4464] loop4: detected capacity change from 0 to 32768 [ 81.421789][ T4464] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop4 scanned by syz.4.64 (4464) [ 81.448850][ T4464] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 81.449187][ T4464] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 81.449275][ T4464] BTRFS info (device loop4): use lzo compression, level 0 [ 81.449297][ T4464] BTRFS info (device loop4): using free space tree [ 81.449313][ T4464] BTRFS info (device loop4): has skinny extents [ 81.585421][ T4489] loop3: detected capacity change from 0 to 512 [ 81.597301][ T4352] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 81.597336][ T4352] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.599260][ T4352] usb 2-1: config 0 descriptor?? [ 81.645930][ T4352] cp210x 2-1:0.0: cp210x converter detected [ 81.667042][ T4489] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.702954][ T4464] BTRFS info (device loop4): enabling ssd optimizations [ 81.782394][ T4466] loop2: detected capacity change from 0 to 32768 [ 81.890156][ T4466] JBD2: Ignoring recovery information on journal [ 82.185016][ T4466] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 82.252601][ T4515] loop0: detected capacity change from 0 to 256 [ 82.273396][ T4198] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 9 /dev/loop4 scanned by udevd (4198) [ 82.296956][ T4352] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 82.341627][ T4352] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 82.392878][ T4352] usb 2-1: cp210x converter now attached to ttyUSB0 [ 82.412570][ T4352] usb 2-1: USB disconnect, device number 2 [ 82.475675][ T4352] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 82.503587][ T4352] cp210x 2-1:0.0: device disconnected [ 82.550561][ T4191] ocfs2: Unmounting device (7,2) on (node local) [ 82.644182][ T4528] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.78'. [ 82.687392][ T4528] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 82.862945][ T2302] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.037446][ T4540] loop0: detected capacity change from 0 to 256 [ 83.088859][ T4544] loop4: detected capacity change from 0 to 256 [ 83.108307][ T4539] loop2: detected capacity change from 0 to 2048 [ 83.146918][ T2302] usb 4-1: Using ep0 maxpacket: 32 [ 83.185691][ T4539] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.207344][ T4540] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 83.236116][ T4544] FAT-fs (loop4): Directory bread(block 64) failed [ 83.271949][ T4544] FAT-fs (loop4): Directory bread(block 65) failed [ 83.305233][ T4544] FAT-fs (loop4): Directory bread(block 66) failed [ 83.313433][ T2302] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 83.337077][ T4544] FAT-fs (loop4): Directory bread(block 67) failed [ 83.343791][ T2302] usb 4-1: config 0 interface 0 has no altsetting 0 [ 83.362630][ T4544] FAT-fs (loop4): Directory bread(block 68) failed [ 83.371275][ T2302] usb 4-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 83.401633][ T4544] FAT-fs (loop4): Directory bread(block 69) failed [ 83.433455][ T2302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.447394][ T4544] FAT-fs (loop4): Directory bread(block 70) failed [ 83.475267][ T2302] usb 4-1: config 0 descriptor?? [ 83.476579][ T4548] loop1: detected capacity change from 0 to 4096 [ 83.481053][ T4544] FAT-fs (loop4): Directory bread(block 71) failed [ 83.525974][ T4544] FAT-fs (loop4): Directory bread(block 72) failed [ 83.543943][ T4544] FAT-fs (loop4): Directory bread(block 73) failed [ 83.699280][ T4548] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 83.835847][ T26] audit: type=1800 audit(1762202813.236:3): pid=4548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.88" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 83.989167][ T2302] monterey 0003:0566:3004.0002: unknown main item tag 0x0 [ 84.011099][ T2302] monterey 0003:0566:3004.0002: unknown main item tag 0x0 [ 84.046639][ T2302] monterey 0003:0566:3004.0002: unknown main item tag 0x0 [ 84.078680][ T2302] monterey 0003:0566:3004.0002: unknown main item tag 0x0 [ 84.112575][ T2302] monterey 0003:0566:3004.0002: unknown main item tag 0x0 [ 84.159548][ T2302] monterey 0003:0566:3004.0002: hidraw0: USB HID v1.6c Device [HID 0566:3004] on usb-dummy_hcd.3-1/input0 [ 84.221308][ T2302] usb 4-1: USB disconnect, device number 3 [ 84.325104][ T4566] loop4: detected capacity change from 0 to 4096 [ 84.380732][ T4574] fido_id[4574]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 84.552699][ T4577] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.615071][ T26] audit: type=1800 audit(1762202814.016:4): pid=4566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.94" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 84.796370][ T4560] loop0: detected capacity change from 0 to 32768 [ 84.804916][ T4579] loop3: detected capacity change from 0 to 256 [ 84.905502][ T4579] FAT-fs (loop3): Directory bread(block 64) failed [ 84.947312][ T4579] FAT-fs (loop3): Directory bread(block 65) failed [ 84.989499][ T4579] FAT-fs (loop3): Directory bread(block 66) failed [ 85.021593][ T4579] FAT-fs (loop3): Directory bread(block 67) failed [ 85.050593][ T4579] FAT-fs (loop3): Directory bread(block 68) failed [ 85.076915][ T4579] FAT-fs (loop3): Directory bread(block 69) failed [ 85.087291][ T4579] FAT-fs (loop3): Directory bread(block 70) failed [ 85.124743][ T4579] FAT-fs (loop3): Directory bread(block 71) failed [ 85.147231][ T4579] FAT-fs (loop3): Directory bread(block 72) failed [ 85.153827][ T4579] FAT-fs (loop3): Directory bread(block 73) failed [ 85.170747][ T4584] loop2: detected capacity change from 0 to 1024 [ 85.427017][ T4576] loop1: detected capacity change from 0 to 32768 [ 85.435167][ T154] hfsplus: b-tree write err: -5, ino 4 [ 85.584568][ T4576] jfs_strtoUCS: char2uni returned -22. [ 85.611958][ T4588] loop2: detected capacity change from 0 to 16 [ 85.630622][ T4576] charset = utf8, char = 0xe9 [ 85.683379][ T4588] erofs: (device loop2): mounted with root inode @ nid 36. [ 85.950455][ T4582] loop4: detected capacity change from 0 to 32768 [ 86.125033][ T4582] XFS (loop4): Mounting V5 Filesystem [ 86.217741][ T4606] loop1: detected capacity change from 0 to 256 [ 86.326231][ T4582] XFS (loop4): Ending clean mount [ 86.360108][ T4606] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 86.439612][ T4589] loop3: detected capacity change from 0 to 40427 [ 86.543840][ T4589] F2FS-fs (loop3): invalid crc value [ 86.604606][ T4589] F2FS-fs (loop3): Found nat_bits in checkpoint [ 86.704985][ T4192] XFS (loop4): Unmounting Filesystem [ 86.771931][ T1108] cfg80211: failed to load regulatory.db [ 86.806728][ T4589] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 87.142567][ T4635] loop1: detected capacity change from 0 to 256 [ 87.272923][ T4635] FAT-fs (loop1): Directory bread(block 64) failed [ 87.327172][ T4635] FAT-fs (loop1): Directory bread(block 65) failed [ 87.333842][ T4635] FAT-fs (loop1): Directory bread(block 66) failed [ 87.371404][ T4635] FAT-fs (loop1): Directory bread(block 67) failed [ 87.396452][ T4635] FAT-fs (loop1): Directory bread(block 68) failed [ 87.432684][ T4635] FAT-fs (loop1): Directory bread(block 69) failed [ 87.440098][ T4635] FAT-fs (loop1): Directory bread(block 70) failed [ 87.446886][ T4635] FAT-fs (loop1): Directory bread(block 71) failed [ 87.453524][ T4635] FAT-fs (loop1): Directory bread(block 72) failed [ 87.461150][ T4635] FAT-fs (loop1): Directory bread(block 73) failed [ 87.588462][ T4644] loop4: detected capacity change from 0 to 512 [ 87.775801][ T4644] EXT4-fs (loop4): 1 orphan inode deleted [ 87.814773][ T4655] loop1: detected capacity change from 0 to 64 [ 87.864244][ T4644] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000004,noquota,init_itable,dax=never,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 87.980039][ T4644] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.142108][ T4662] loop1: detected capacity change from 0 to 256 [ 88.154483][ T4663] loop2: detected capacity change from 0 to 512 [ 88.172590][ T4662] exfat: Deprecated parameter 'namecase' [ 88.206256][ T4639] loop0: detected capacity change from 0 to 32768 [ 88.244467][ T4663] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 88.254331][ T4662] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8d1bf2bd, utbl_chksum : 0xe619d30d) [ 88.307426][ T4663] EXT4-fs (loop2): 1 truncate cleaned up [ 88.347970][ T4639] [ 88.347970][ T4639] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.347970][ T4639] [ 88.380111][ T4663] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 88.477803][ T4663] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.134: Logical block already allocated [ 88.515936][ T4184] non-latin1 character 0x3ff found in JFS file name [ 88.556574][ T4184] mount with iocharset=utf8 to access [ 88.595976][ T4184] ERROR: (device loop0): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 88.595976][ T4184] [ 88.616883][ T4663] EXT4-fs (loop2): Remounting filesystem read-only [ 88.691408][ T4184] ERROR: (device loop0): remounting filesystem as read-only [ 88.699539][ T4672] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.134: Logical block already allocated [ 88.757029][ T4184] ERROR: (device loop0): jfs_unlink: [ 88.757029][ T4184] [ 88.792397][ T4682] ALSA: mixer_oss: invalid OSS volume '' [ 88.817113][ T4672] EXT4-fs (loop2): Remounting filesystem read-only [ 89.073860][ T4692] netlink: 64 bytes leftover after parsing attributes in process `syz.2.147'. [ 89.116949][ T4522] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.128468][ T4694] loop3: detected capacity change from 0 to 128 [ 89.180783][ T4694] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 89.200290][ T4184] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 89.200290][ T4184] [ 89.252882][ T4694] sysv_count_free_blocks: >flc_size entries in free-list block [ 89.288679][ T4694] sysv_count_free_inodes: unable to read inode table [ 89.356924][ T4522] usb 2-1: Using ep0 maxpacket: 8 [ 89.372273][ T3055] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.429714][ T4188] sysv_free_block: flc_count > flc_size [ 89.435644][ T4188] sysv_free_block: flc_count > flc_size [ 89.462682][ T4188] sysv_free_block: flc_count > flc_size [ 89.472710][ T4188] sysv_free_block: flc_count > flc_size [ 89.473649][ T3055] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.489428][ T4522] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.497617][ T4188] sysv_free_block: flc_count > flc_size [ 89.523963][ T4522] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 89.547767][ T4188] sysv_free_block: flc_count > flc_size [ 89.553368][ T4188] sysv_free_block: flc_count > flc_size [ 89.554349][ T4522] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.570305][ T4184] syz-executor (4184) used greatest stack depth: 20128 bytes left [ 89.595279][ T4522] usb 2-1: config 0 descriptor?? [ 89.606959][ T4188] sysv_free_block: flc_count > flc_size [ 89.612562][ T4188] sysv_free_block: flc_count > flc_size [ 89.638386][ T3055] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.670996][ T4188] sysv_free_block: flc_count > flc_size [ 89.688678][ T4188] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 89.779029][ T3055] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.005458][ T4696] loop4: detected capacity change from 0 to 32768 [ 90.078898][ T4522] kye 0003:0458:4018.0003: unbalanced delimiter at end of report description [ 90.098866][ T4522] kye 0003:0458:4018.0003: parse failed [ 90.104500][ T4522] kye: probe of 0003:0458:4018.0003 failed with error -22 [ 90.334622][ T4243] usb 2-1: USB disconnect, device number 3 [ 90.439688][ T4719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.162'. [ 90.554939][ T4722] loop4: detected capacity change from 0 to 64 [ 90.908221][ T4710] loop3: detected capacity change from 0 to 40427 [ 91.020803][ T4710] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 91.037485][ T4737] loop2: detected capacity change from 0 to 512 [ 91.074623][ T4714] chnl_net:caif_netlink_parms(): no params data found [ 91.081753][ T4710] F2FS-fs (loop3): invalid crc value [ 91.092125][ T4743] loop1: detected capacity change from 0 to 64 [ 91.117077][ T4737] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 91.161658][ T4710] F2FS-fs (loop3): Found nat_bits in checkpoint [ 91.174052][ T4737] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 91.277682][ T4737] EXT4-fs (loop2): 1 truncate cleaned up [ 91.283816][ T4737] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,nodelalloc,stripe=0x0000000000004000,noquota,dioread_lock,barrier,init_itable=0x0000000000000009,,errors=continue. Quota mode: none. [ 91.386829][ T4710] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 91.559915][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.568609][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.591333][ T4714] device bridge_slave_0 entered promiscuous mode [ 91.645128][ T4191] EXT4-fs error (device loop2): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256) [ 91.729359][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.740394][ T4191] EXT4-fs error (device loop2): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256) [ 91.754700][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.768376][ T4188] attempt to access beyond end of device [ 91.768376][ T4188] loop3: rw=2049, want=45104, limit=40427 [ 91.809981][ T4714] device bridge_slave_1 entered promiscuous mode [ 91.961467][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.024551][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.191596][ T4714] team0: Port device team_slave_0 added [ 92.208728][ T4243] Bluetooth: hci0: command 0x0409 tx timeout [ 92.260803][ T4777] sp0: Synchronizing with TNC [ 92.262981][ T4714] team0: Port device team_slave_1 added [ 92.276919][ T4356] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 92.403706][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.439667][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.517975][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.568111][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.592175][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.645972][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.659152][ T4356] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 92.672132][ T4356] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 92.690995][ T4356] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 92.714673][ T4356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.767992][ T4773] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 92.951679][ T3055] device hsr_slave_0 left promiscuous mode [ 92.973401][ T3055] device hsr_slave_1 left promiscuous mode [ 93.013492][ T3055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.065080][ T3055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.105673][ T3055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.118583][ T3055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.126611][ T3055] device bridge_slave_1 left promiscuous mode [ 93.135275][ T3055] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.186183][ T3055] device bridge_slave_0 left promiscuous mode [ 93.198582][ T3055] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.240843][ T3055] device veth1_macvtap left promiscuous mode [ 93.249591][ T3055] device veth0_macvtap left promiscuous mode [ 93.255708][ T3055] device veth1_vlan left promiscuous mode [ 93.262759][ T3055] device veth0_vlan left promiscuous mode [ 93.502073][ T3055] team0 (unregistering): Port device team_slave_1 removed [ 93.520890][ T3055] team0 (unregistering): Port device team_slave_0 removed [ 93.538972][ T3055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.555863][ T3055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.633400][ T3055] bond0 (unregistering): Released all slaves [ 93.843878][ T4809] comedi: No check for data length of config insn id 131 is implemented [ 93.858093][ T4714] device hsr_slave_0 entered promiscuous mode [ 93.874790][ T4809] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 93.887626][ T4714] device hsr_slave_1 entered promiscuous mode [ 93.933271][ T4809] comedi: Assuming n=15 is correct [ 94.266525][ T1108] usb 2-1: USB disconnect, device number 4 [ 94.286952][ T4354] Bluetooth: hci0: command 0x041b tx timeout [ 94.287016][ T4243] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 94.410574][ T4799] chnl_net:caif_netlink_parms(): no params data found [ 94.561717][ T4714] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 94.606131][ T4714] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 94.646919][ T4840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.195'. [ 94.671740][ T4714] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 94.717323][ T4243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 94.748003][ T4243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.807604][ T4243] usb 5-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 94.835072][ T4243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.879026][ T4243] usb 5-1: config 0 descriptor?? [ 94.919885][ T4714] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 94.995451][ T4799] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.018891][ T4799] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.027481][ T4799] device bridge_slave_0 entered promiscuous mode [ 95.087305][ T4799] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.094956][ T4799] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.119457][ T4799] device bridge_slave_1 entered promiscuous mode [ 95.166997][ T4356] Bluetooth: hci3: command 0x0409 tx timeout [ 95.211204][ T4799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.251237][ T4799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.370148][ T4243] waltop 0003:172F:0032.0004: unknown main item tag 0x0 [ 95.384856][ T4799] team0: Port device team_slave_0 added [ 95.392260][ T4243] waltop 0003:172F:0032.0004: unknown main item tag 0x0 [ 95.409576][ T4799] team0: Port device team_slave_1 added [ 95.417146][ T4243] waltop 0003:172F:0032.0004: unknown main item tag 0x0 [ 95.424149][ T4243] waltop 0003:172F:0032.0004: unknown main item tag 0x0 [ 95.492098][ T4243] waltop 0003:172F:0032.0004: unknown main item tag 0x0 [ 95.520275][ T4243] waltop 0003:172F:0032.0004: hidraw0: USB HID v0.01 Device [HID 172f:0032] on usb-dummy_hcd.4-1/input0 [ 95.619927][ T7] usb 5-1: USB disconnect, device number 2 [ 95.629524][ T4799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.636512][ T4799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.662633][ C1] vkms_vblank_simulate: vblank timer overrun [ 95.744826][ T4868] fido_id[4868]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 95.763817][ T4799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.833127][ T4799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.853855][ T4799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.961403][ T4799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.165242][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.327758][ T4799] device hsr_slave_0 entered promiscuous mode [ 96.357085][ T4799] device hsr_slave_1 entered promiscuous mode [ 96.366950][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 96.405897][ T4799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.428900][ T4799] Cannot create hsr debugfs directory [ 96.445109][ T4714] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.468779][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.489229][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.601381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.647354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.671774][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.678947][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.705969][ T4911] capability: warning: `syz.1.218' uses deprecated v2 capabilities in a way that may be insecure [ 96.756111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.776524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.817239][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.824383][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.939296][ T4916] loop4: detected capacity change from 0 to 1024 [ 96.959621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.982596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.004491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.072220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.156551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.228606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.247422][ T4522] Bluetooth: hci3: command 0x041b tx timeout [ 97.355217][ T4337] hfsplus: b-tree write err: -5, ino 4 [ 97.410459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.470905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.507867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.528811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.559594][ T4714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.593595][ T4937] loop3: detected capacity change from 0 to 256 [ 97.606207][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.658660][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.678542][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.699823][ T4937] exFAT-fs (loop3): failed to load upcase table (idx : 0x00000c00, chksum : 0x08037f6a, utbl_chksum : 0xe619d30d) [ 97.797160][ T4243] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 97.814840][ T4942] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 97.925662][ T4799] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 97.981028][ T4799] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 98.029698][ T4799] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 98.068351][ T4952] tipc: Started in network mode [ 98.073632][ T4952] tipc: Node identity , cluster identity 4711 [ 98.077001][ T4243] usb 2-1: Using ep0 maxpacket: 32 [ 98.097029][ T4952] tipc: Failed to set node id, please configure manually [ 98.108091][ T4952] tipc: Enabling of bearer rejected, failed to enable media [ 98.121768][ T4799] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 98.217512][ T4243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.239098][ T4243] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 98.296660][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.304192][ T4243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.333629][ T4243] usb 2-1: config 0 descriptor?? [ 98.336319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.372547][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.446906][ T4356] Bluetooth: hci0: command 0x0419 tx timeout [ 98.555016][ T4799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.597971][ T4976] loop4: detected capacity change from 0 to 1024 [ 98.614342][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.636454][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.665014][ T4973] loop3: detected capacity change from 0 to 8192 [ 98.694504][ T4799] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.722905][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.737487][ T4976] hfsplus: bad catalog entry type [ 98.745497][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.764800][ T410] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.771996][ T410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.851560][ T4243] lenovo 0003:17EF:60A3.0005: unknown main item tag 0x1 [ 98.872362][ T4337] hfsplus: b-tree write err: -5, ino 4 [ 98.880336][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.890517][ T4243] lenovo 0003:17EF:60A3.0005: hidraw0: USB HID v0.80 Device [HID 17ef:60a3] on usb-dummy_hcd.1-1/input0 [ 98.908608][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.929117][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.940460][ T410] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.947702][ T410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.985763][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.050849][ T4987] capability: warning: `syz.4.239' uses 32-bit capabilities (legacy support in use) [ 99.084863][ T4354] usb 2-1: USB disconnect, device number 5 [ 99.155780][ T4922] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.182986][ T4984] fido_id[4984]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 99.267913][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.286637][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.300116][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.309971][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.319356][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.340017][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.383308][ T4355] Bluetooth: hci3: command 0x040f tx timeout [ 99.413110][ T4922] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.469829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.482911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.513874][ T4799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.538587][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.599394][ T4922] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.642582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.652321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.687562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.717677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.803167][ T4922] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.914610][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.947453][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.980726][ T4714] device veth0_vlan entered promiscuous mode [ 100.001794][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.037902][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.079513][ T4714] device veth1_vlan entered promiscuous mode [ 100.105058][ T5016] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.114980][ T5016] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.123965][ T5016] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.132857][ T5016] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.151149][ T5016] Zero length message leads to an empty skb [ 100.168765][ T5022] loop3: detected capacity change from 0 to 1024 [ 100.204990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 100.206396][ T5024] loop4: detected capacity change from 0 to 512 [ 100.230458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 100.268321][ T5022] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 100.269029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.321277][ T5024] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.254: inode #1: comm syz.4.254: iget: illegal inode # [ 100.337024][ T5022] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.355485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.372137][ T5024] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.254: error while reading EA inode 1 err=-117 [ 100.414449][ T5024] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.254: inode #1: comm syz.4.254: iget: illegal inode # [ 100.449114][ T5024] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.254: error while reading EA inode 1 err=-117 [ 100.465754][ T4799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.479190][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.489112][ T5024] EXT4-fs (loop4): 1 orphan inode deleted [ 100.505198][ T5024] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 100.544052][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.575042][ T4714] device veth0_macvtap entered promiscuous mode [ 100.622286][ T4714] device veth1_macvtap entered promiscuous mode [ 100.718134][ T4714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.764124][ T4714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.794727][ T4714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.819656][ T4714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.843600][ T4714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.883730][ T4714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.894049][ T4714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.911793][ T4714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.936146][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.947703][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.975816][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.037460][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.067169][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.112073][ T4714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.143208][ T4714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.189933][ T4714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.207035][ T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 101.233825][ T5061] nbd: must specify a size in bytes for the device [ 101.240566][ T4714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.266822][ T4714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.302109][ T4714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.342518][ T4714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.356918][ T5067] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.373038][ T4714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.397769][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.407063][ T4522] Bluetooth: hci3: command 0x0419 tx timeout [ 101.488374][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.527898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.569614][ T4714] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.597284][ T4714] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.616308][ T4714] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.640968][ T5075] loop3: detected capacity change from 0 to 256 [ 101.654265][ T4714] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.668459][ T23] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 193, using maximum allowed: 30 [ 101.696633][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 101.729551][ T5075] exfat: Deprecated parameter 'namecase' [ 101.746066][ T5075] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 101.786961][ T23] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 101.796297][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.815512][ T5075] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 101.819834][ T23] usb 2-1: config 0 descriptor?? [ 101.954996][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.964931][ T3055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.177409][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.194890][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.204131][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.227720][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.255550][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.268111][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.276224][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.285338][ T5095] loop3: detected capacity change from 0 to 1024 [ 102.305874][ T4799] device veth0_vlan entered promiscuous mode [ 102.340499][ T23] magicmouse 0003:05AC:0269.0006: collection stack underflow [ 102.354326][ T5098] loop4: detected capacity change from 0 to 256 [ 102.366728][ T5098] exfat: Deprecated parameter 'namecase' [ 102.377288][ T23] magicmouse 0003:05AC:0269.0006: item 0 0 0 12 parsing failed [ 102.394005][ T5098] exfat: Deprecated parameter 'utf8' [ 102.400174][ T23] magicmouse 0003:05AC:0269.0006: magicmouse hid parse failed [ 102.413884][ T23] magicmouse: probe of 0003:05AC:0269.0006 failed with error -22 [ 102.446149][ T5098] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012366, chksum : 0x6ab66362, utbl_chksum : 0xe619d30d) [ 102.469413][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.477150][ T4799] device veth1_vlan entered promiscuous mode [ 102.489211][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.490099][ T4270] hfsplus: b-tree write err: -5, ino 4 [ 102.533662][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 102.549374][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.629049][ T5101] loop3: detected capacity change from 0 to 8 [ 102.639409][ T4354] usb 2-1: USB disconnect, device number 6 [ 102.654928][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.678912][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.698872][ T5101] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 102.720147][ T4799] device veth0_macvtap entered promiscuous mode [ 102.739862][ T4762] udevd[4762]: incorrect cramfs checksum on /dev/loop3 [ 102.761044][ T4799] device veth1_macvtap entered promiscuous mode [ 102.773648][ T5101] cramfs: Error -3 while decompressing! [ 102.807350][ T5101] cramfs: ffffffff961ed0a8(26)->ffff88805f20e000(4096) [ 102.822827][ T4762] udevd[4762]: incorrect cramfs checksum on /dev/loop3 [ 102.835255][ T5101] cramfs: Error -3 while decompressing! [ 102.848111][ T5101] cramfs: ffffffff961ed0c2(26)->ffff88805e723000(4096) [ 102.855258][ T5101] cramfs: Error -3 while decompressing! [ 102.869931][ T5101] cramfs: ffffffff961ed0dc(16)->ffff88805e74d000(4096) [ 102.894982][ T5101] cramfs: Error -3 while decompressing! [ 102.905140][ T5101] cramfs: ffffffff961ed0a8(26)->ffff88805f20e000(4096) [ 102.916347][ T26] audit: type=1800 audit(1762202832.316:5): pid=5101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.277" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 102.954409][ T4799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.972082][ T4198] udevd[4198]: incorrect cramfs checksum on /dev/loop3 [ 103.011833][ T4799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.058555][ T4799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.077422][ T4799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.099175][ T4799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.130915][ T4799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.141358][ T4799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.195337][ T4799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.246063][ T4799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.268301][ T4799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.280120][ T4799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.308491][ T5123] netlink: 'syz.1.284': attribute type 1 has an invalid length. [ 103.334209][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.366162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.397993][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.427934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.456703][ T4799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.488349][ T4799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.526402][ T4799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.582689][ T4799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.618693][ T4799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.636528][ T4799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.654058][ T4799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.684161][ T4799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.703625][ T4799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.725689][ T4799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.751014][ T4799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.810854][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.842512][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.925728][ T4799] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.955859][ T4799] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.966660][ T4799] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.976063][ T7] Bluetooth: hci2: command 0x0811 tx timeout [ 103.997508][ T4799] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.037969][ T4922] device hsr_slave_0 left promiscuous mode [ 104.051145][ T5152] netlink: 108 bytes leftover after parsing attributes in process `syz.5.292'. [ 104.064328][ T4922] device hsr_slave_1 left promiscuous mode [ 104.080070][ T4922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.083946][ T5152] netlink: 40 bytes leftover after parsing attributes in process `syz.5.292'. [ 104.096937][ T4922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.105145][ T4922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.113868][ T4922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.148952][ T4922] device bridge_slave_1 left promiscuous mode [ 104.155239][ T4922] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.190414][ T4922] device bridge_slave_0 left promiscuous mode [ 104.196681][ T4922] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.206010][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 104.241197][ T4922] device veth1_macvtap left promiscuous mode [ 104.251713][ T4922] device veth0_macvtap left promiscuous mode [ 104.262643][ T4922] device veth1_vlan left promiscuous mode [ 104.272819][ T4922] device veth0_vlan left promiscuous mode [ 104.283202][ T5138] loop3: detected capacity change from 0 to 32768 [ 104.343141][ T5138] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.287 (5138) [ 104.388943][ T5138] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 104.402870][ T5138] BTRFS info (device loop3): force zlib compression, level 3 [ 104.421212][ T5138] BTRFS info (device loop3): force clearing of disk cache [ 104.437052][ T5138] BTRFS info (device loop3): setting nodatasum [ 104.453679][ T5138] BTRFS info (device loop3): allowing degraded mounts [ 104.470402][ T5138] BTRFS info (device loop3): enabling disk space caching [ 104.487413][ T5138] BTRFS info (device loop3): disk space caching is enabled [ 104.502869][ T5138] BTRFS info (device loop3): has skinny extents [ 104.506859][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 104.572174][ T5138] BTRFS info (device loop3): clearing free space tree [ 104.583337][ T5138] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 104.600014][ T5138] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 104.660970][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 104.682841][ T23] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 104.698614][ T23] usb 5-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 104.707940][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.720365][ T23] usb 5-1: config 0 descriptor?? [ 104.819030][ T5138] BTRFS info (device loop3): balance: start -susage=8589934594,drange=134283264..74766790688768,vrange=18225..4294967295,limit=3..129 [ 104.838377][ T5138] BTRFS info (device loop3): balance: ended with status: 0 [ 104.843250][ T4922] team0 (unregistering): Port device team_slave_1 removed [ 104.874591][ T4922] team0 (unregistering): Port device team_slave_0 removed [ 104.890341][ T4922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.912309][ T4922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.202226][ T23] uclogic 0003:28BD:0075.0007: No inputs registered, leaving [ 105.229578][ T23] uclogic 0003:28BD:0075.0007: hidraw0: USB HID v0.00 Device [HID 28bd:0075] on usb-dummy_hcd.4-1/input0 [ 105.254814][ T4922] bond0 (unregistering): Released all slaves [ 105.412620][ T5155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.293'. [ 105.437835][ T5155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.293'. [ 105.446673][ T5155] netlink: 'syz.5.293': attribute type 6 has an invalid length. [ 105.469438][ T4235] usb 5-1: USB disconnect, device number 3 [ 105.627060][ T4988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.635196][ T4988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.688953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.776484][ T3055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.844493][ T3055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.894515][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.106183][ T5203] netlink: 20 bytes leftover after parsing attributes in process `syz.5.304'. [ 106.475324][ T5228] loop5: detected capacity change from 0 to 512 [ 106.521975][ T5230] loop3: detected capacity change from 0 to 64 [ 106.618017][ T5228] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 106.896395][ T5241] loop6: detected capacity change from 0 to 512 [ 106.933875][ T5244] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 106.963534][ T5244] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 107.019725][ T5241] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 107.159104][ T5241] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 107.189137][ T5251] loop4: detected capacity change from 0 to 256 [ 107.190842][ T5241] EXT4-fs (loop6): 1 truncate cleaned up [ 107.201533][ T5252] mmap: syz.5.320 (5252) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 107.268990][ T5241] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,resuid=0x0000000000000000,debug_want_extra_isize=0x000000000000002e,lazytime,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 107.302753][ T5251] FAT-fs (loop4): Directory bread(block 64) failed [ 107.342215][ T5251] FAT-fs (loop4): Directory bread(block 65) failed [ 107.367931][ T5251] FAT-fs (loop4): Directory bread(block 66) failed [ 107.374714][ T5251] FAT-fs (loop4): Directory bread(block 67) failed [ 107.471184][ T5251] FAT-fs (loop4): Directory bread(block 68) failed [ 107.506334][ T5214] loop1: detected capacity change from 0 to 32768 [ 107.522509][ T5251] FAT-fs (loop4): Directory bread(block 69) failed [ 107.582450][ T5251] FAT-fs (loop4): Directory bread(block 70) failed [ 107.625138][ T5251] FAT-fs (loop4): Directory bread(block 71) failed [ 107.640490][ T5251] FAT-fs (loop4): Directory bread(block 72) failed [ 107.686826][ T5251] FAT-fs (loop4): Directory bread(block 73) failed [ 107.735466][ T26] audit: type=1800 audit(1762202837.136:6): pid=5214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.307" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 108.477019][ T4235] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 108.552456][ T5296] loop6: detected capacity change from 0 to 256 [ 108.842049][ T4799] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 108.877241][ T4235] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 108.888404][ T4799] FAT-fs (loop6): Filesystem has been set read-only [ 108.900245][ T5307] loop1: detected capacity change from 0 to 764 [ 108.920514][ T4799] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 108.929036][ T4235] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.954597][ T5309] netlink: 16 bytes leftover after parsing attributes in process `syz.4.343'. [ 108.984604][ T4235] usb 6-1: config 0 interface 0 has no altsetting 0 [ 108.991771][ T4235] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 109.001217][ T5309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.343'. [ 109.023358][ T4235] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.032899][ T5309] netlink: 108 bytes leftover after parsing attributes in process `syz.4.343'. [ 109.066095][ T4235] usb 6-1: config 0 descriptor?? [ 109.074463][ T5309] netlink: 16 bytes leftover after parsing attributes in process `syz.4.343'. [ 109.102366][ T5309] netlink: 16 bytes leftover after parsing attributes in process `syz.4.343'. [ 109.353058][ T5313] loop4: detected capacity change from 0 to 512 [ 109.382156][ T5271] loop3: detected capacity change from 0 to 32768 [ 109.483823][ T5313] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 109.528319][ T5313] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 109.579410][ T4235] ryos 0003:1E7D:3138.0008: unknown main item tag 0x0 [ 109.591045][ T4235] ryos 0003:1E7D:3138.0008: item fetching failed at offset 3/5 [ 109.601138][ T5313] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 109.617758][ T4235] ryos 0003:1E7D:3138.0008: parse failed [ 109.623469][ T4235] ryos: probe of 0003:1E7D:3138.0008 failed with error -22 [ 109.648917][ T5327] loop1: detected capacity change from 0 to 128 [ 109.685128][ T5271] XFS (loop3): Mounting V5 Filesystem [ 109.704299][ T5313] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 109.723220][ T5313] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000] [ 109.762826][ T5327] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,max_dir_size_kb=0x0000000000000006,,errors=continue. Quota mode: none. [ 109.780253][ T5313] EXT4-fs (loop4): orphan cleanup on readonly fs [ 109.793395][ T4235] usb 6-1: USB disconnect, device number 2 [ 109.867340][ T5327] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.884529][ T5313] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.344: bg 0: block 34: padding at end of block bitmap is not set [ 109.974072][ T5313] Quota error (device loop4): write_blk: dquota write failed [ 110.014635][ T5313] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 110.037072][ T5271] XFS (loop3): Ending clean mount [ 110.075635][ T5271] XFS (loop3): Quotacheck needed: Please wait. [ 110.087044][ T5313] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.344: Failed to acquire dquot type 1 [ 110.179053][ T5313] EXT4-fs (loop4): 1 truncate cleaned up [ 110.296076][ T5313] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x000000000000000a,mb_optimize_scan=0x0000000000000001,acl,noblock_validity,,errors=continue. Quota mode: writeback. [ 110.313518][ T5271] XFS (loop3): Quotacheck: Done. [ 110.516967][ T4235] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 110.731973][ T4188] XFS (loop3): Unmounting Filesystem [ 110.746631][ T23] kernel write not supported for file /input/event0 (pid: 23 comm: kworker/1:1) [ 110.866911][ T4509] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 110.920549][ T4235] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 110.941691][ T5348] chnl_net:caif_netlink_parms(): no params data found [ 110.973535][ T4235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.004219][ T4235] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 196 [ 111.035711][ T4235] usb 2-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 111.051898][ T4235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.074576][ T4235] usb 2-1: config 0 descriptor?? [ 111.136908][ T4509] usb 6-1: Using ep0 maxpacket: 32 [ 111.150326][ T5365] loop4: detected capacity change from 0 to 64 [ 111.252456][ T5365] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 111.277414][ T4509] usb 6-1: config 4 has an invalid interface number: 128 but max is 0 [ 111.285806][ T4509] usb 6-1: config 4 has no interface number 0 [ 111.343391][ T4509] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.375468][ T4509] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.411616][ T4509] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 111.434643][ T4509] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.499059][ T4509] hub 6-1:4.128: USB hub found [ 111.510824][ T5348] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.519892][ T5348] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.546126][ T5348] device bridge_slave_0 entered promiscuous mode [ 111.573282][ T4922] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.597439][ T4235] viewsonic 0003:2133:0018.0009: hidraw0: USB HID v10.00 Device [HID 2133:0018] on usb-dummy_hcd.1-1/input0 [ 111.614518][ T5377] loop4: detected capacity change from 0 to 512 [ 111.630863][ T5348] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.644325][ T5348] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.679982][ T5377] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.356: invalid indirect mapped block 4294967295 (level 1) [ 111.715700][ T5348] device bridge_slave_1 entered promiscuous mode [ 111.757283][ T4509] hub 6-1:4.128: 9 ports detected [ 111.762503][ T4509] hub 6-1:4.128: Using single TT (err -22) [ 111.773422][ T5377] EXT4-fs (loop4): Remounting filesystem read-only [ 111.784466][ T5377] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.356: invalid indirect mapped block 4294967295 (level 1) [ 111.812000][ T4235] usb 2-1: USB disconnect, device number 7 [ 111.840480][ T5377] EXT4-fs (loop4): Remounting filesystem read-only [ 111.850635][ T5377] EXT4-fs (loop4): 2 truncates cleaned up [ 111.864914][ T4509] hub 6-1:4.128: insufficient power available to use all downstream ports [ 111.866698][ T5377] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,barrier=0x0000000000000004,. Quota mode: writeback. [ 111.967017][ T4509] hub 6-1:4.128: hub_hub_status failed (err = -71) [ 111.976528][ T4922] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.998495][ T4509] hub 6-1:4.128: config failed, can't get hub status (err -71) [ 112.008899][ T5388] netlink: 14 bytes leftover after parsing attributes in process `syz.3.358'. [ 112.034519][ T5386] fido_id[5386]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 112.073327][ T5348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.096011][ T5348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.106847][ T4509] usb 6-1: USB disconnect, device number 3 [ 112.187123][ T4922] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.293464][ T5348] team0: Port device team_slave_0 added [ 112.331731][ T4922] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.404944][ T5348] team0: Port device team_slave_1 added [ 112.542696][ T5348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.629115][ T5348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.713122][ T5348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.767018][ T4509] Bluetooth: hci3: command 0x0409 tx timeout [ 112.797342][ T5348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.833538][ T5348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.933529][ T5425] loop4: detected capacity change from 0 to 64 [ 112.947021][ T5348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.963587][ T5426] loop3: detected capacity change from 0 to 128 [ 113.070522][ T5426] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.130176][ T5426] ext4 filesystem being mounted at /84/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 113.147457][ T5430] loop5: detected capacity change from 0 to 512 [ 113.225665][ T5348] device hsr_slave_0 entered promiscuous mode [ 113.263214][ T5348] device hsr_slave_1 entered promiscuous mode [ 113.272470][ T5348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.314629][ T5348] Cannot create hsr debugfs directory [ 113.336501][ T5403] loop1: detected capacity change from 0 to 32768 [ 113.354162][ T5430] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 113.362550][ T5430] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 113.371361][ T5430] System zones: 0-1, 15-15, 18-18, 34-34 [ 113.436446][ T5436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.374'. [ 113.449662][ T5438] loop4: detected capacity change from 0 to 256 [ 113.462907][ T5430] EXT4-fs (loop5): orphan cleanup on readonly fs [ 113.477567][ T5438] exfat: Deprecated parameter 'utf8' [ 113.483404][ T5403] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 113.491829][ T5430] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 113.532091][ T5430] EXT4-fs warning (device loop5): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 113.543954][ T5438] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe649ead, utbl_chksum : 0xe619d30d) [ 113.559156][ T5430] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 113.581261][ T5430] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.372: bg 0: block 40: padding at end of block bitmap is not set [ 113.581948][ T5403] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 113.612348][ T5430] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 113.667078][ T5430] EXT4-fs (loop5): 1 truncate cleaned up [ 113.683054][ T5430] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 113.801953][ T5449] loop3: detected capacity change from 0 to 1024 [ 113.835855][ T5452] loop4: detected capacity change from 0 to 1024 [ 113.883448][ T5449] Quota error (device loop3): find_tree_dqentry: Getting block too big (64 >= 6) [ 113.931306][ T5449] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 113.942249][ T5449] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.378: Failed to acquire dquot type 0 [ 113.959099][ T5449] EXT4-fs error (device loop3): mb_free_blocks:1860: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 113.995910][ T5449] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #13: comm syz.3.378: corrupted inode contents [ 114.041671][ T4196] ocfs2: Unmounting device (7,1) on (node local) [ 114.057055][ T5449] EXT4-fs error (device loop3): ext4_dirty_inode:6054: inode #13: comm syz.3.378: mark_inode_dirty error [ 114.072334][ T5449] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #13: comm syz.3.378: corrupted inode contents [ 114.153141][ T5449] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #13: comm syz.3.378: mark_inode_dirty error [ 114.193205][ T5348] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 114.207609][ T5449] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #13: comm syz.3.378: corrupted inode contents [ 114.297291][ T5449] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 114.332891][ T3055] hfsplus: b-tree write err: -5, ino 8 [ 114.339284][ T5449] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #13: comm syz.3.378: corrupted inode contents [ 114.354952][ T5348] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 114.400269][ T5449] EXT4-fs error (device loop3): ext4_truncate:4279: inode #13: comm syz.3.378: mark_inode_dirty error [ 114.404285][ T5348] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 114.520850][ T5449] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 114.549924][ T5348] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 114.570963][ T5449] EXT4-fs (loop3): 1 truncate cleaned up [ 114.607080][ T5449] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 114.847064][ T4354] Bluetooth: hci3: command 0x041b tx timeout [ 114.926008][ T5449] Quota error (device loop3): find_tree_dqentry: Getting block too big (64 >= 6) [ 115.017410][ T5449] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 115.067237][ T5449] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.378: Failed to acquire dquot type 0 [ 115.211375][ T5348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.297341][ T4922] device hsr_slave_0 left promiscuous mode [ 115.308288][ T4922] device hsr_slave_1 left promiscuous mode [ 115.331664][ T5493] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 115.342956][ T5493] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 115.361494][ T5493] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 115.378399][ T4922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.385881][ T4922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.424836][ T5493] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 115.438362][ T4922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.446221][ T4922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.467093][ T5493] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 115.485175][ T5493] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 115.513777][ T4922] device bridge_slave_1 left promiscuous mode [ 115.520347][ T5493] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 115.556974][ T4922] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.565890][ T4922] device bridge_slave_0 left promiscuous mode [ 115.574386][ T5493] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 115.596450][ T4922] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.604495][ T5493] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 115.637029][ T5493] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 115.659963][ T5493] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 115.696879][ T5493] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 115.704070][ T5493] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 115.724484][ T5493] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 115.759954][ T4922] device veth1_macvtap left promiscuous mode [ 115.766068][ T4922] device veth0_macvtap left promiscuous mode [ 115.775413][ T5493] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 115.787942][ T5493] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 115.794912][ T4922] device veth1_vlan left promiscuous mode [ 115.813580][ T5493] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 115.823020][ T4922] device veth0_vlan left promiscuous mode [ 115.846892][ T5493] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 115.853519][ T5493] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 115.876644][ T5493] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 115.895662][ T5493] comedi comedi3: 8255: I/O port conflict (0x8000000,4) [ 115.926081][ T5493] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4) [ 116.013334][ T5469] loop1: detected capacity change from 0 to 32768 [ 116.073439][ T5469] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.383 (5469) [ 116.170429][ T5469] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 116.224321][ T5469] BTRFS info (device loop1): using free space tree [ 116.264280][ T5469] BTRFS info (device loop1): has skinny extents [ 116.592106][ T5469] BTRFS info (device loop1): enabling ssd optimizations [ 116.648457][ T5505] loop3: detected capacity change from 0 to 32768 [ 116.739798][ T5505] JBD2: Ignoring recovery information on journal [ 116.789205][ T5505] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 116.809174][ T5550] loop4: detected capacity change from 0 to 764 [ 116.875820][ T4188] ocfs2: Unmounting device (7,3) on (node local) [ 116.949093][ T5550] rock: directory entry would overflow storage [ 116.963925][ T4522] Bluetooth: hci3: command 0x040f tx timeout [ 116.983189][ T5550] rock: sig=0x4654, size=5, remaining=4 [ 117.671025][ T5576] loop1: detected capacity change from 0 to 256 [ 117.684498][ T4922] team0 (unregistering): Port device team_slave_1 removed [ 117.728211][ T4922] team0 (unregistering): Port device team_slave_0 removed [ 117.798601][ T4922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.871903][ T4922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.991714][ T5584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.409'. [ 118.014576][ T5586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.410'. [ 118.060936][ T5586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'. [ 118.127774][ T5586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'. [ 118.173556][ T4922] bond0 (unregistering): Released all slaves [ 118.315452][ T5348] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.360105][ T5594] loop4: detected capacity change from 0 to 256 [ 118.432686][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.441943][ T5594] FAT-fs (loop4): Directory bread(block 64) failed [ 118.460430][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.468288][ T5594] FAT-fs (loop4): Directory bread(block 65) failed [ 118.474932][ T5594] FAT-fs (loop4): Directory bread(block 66) failed [ 118.497106][ T5583] netlink: 'syz.1.408': attribute type 1 has an invalid length. [ 118.502709][ T5594] FAT-fs (loop4): Directory bread(block 67) failed [ 118.517285][ T5594] FAT-fs (loop4): Directory bread(block 68) failed [ 118.571577][ T5594] FAT-fs (loop4): Directory bread(block 69) failed [ 118.580051][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.587207][ T5594] FAT-fs (loop4): Directory bread(block 70) failed [ 118.598071][ T5594] FAT-fs (loop4): Directory bread(block 71) failed [ 118.604716][ T5594] FAT-fs (loop4): Directory bread(block 72) failed [ 118.647466][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.666131][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.673326][ T4270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.692950][ T5594] FAT-fs (loop4): Directory bread(block 73) failed [ 118.739844][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.756533][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.778458][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.816384][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.823620][ T4270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.887477][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.916029][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.953018][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.980397][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.007103][ T4509] Bluetooth: hci3: command 0x0419 tx timeout [ 119.033639][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.096139][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.147113][ T5348] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 119.186221][ T5348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.225398][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.252018][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.269469][ T5610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.420'. [ 119.301877][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.349485][ T5614] loop4: detected capacity change from 0 to 128 [ 119.352949][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.397727][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.430116][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.464446][ T5592] loop3: detected capacity change from 0 to 32768 [ 119.544965][ T5592] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.412 (5592) [ 119.653419][ T5592] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 119.716826][ T5592] BTRFS info (device loop3): turning off barriers [ 119.723334][ T5592] BTRFS info (device loop3): enabling ssd optimizations [ 119.836473][ T5592] BTRFS info (device loop3): using spread ssd allocation scheme [ 119.865406][ T5592] BTRFS info (device loop3): not using ssd optimizations [ 119.878916][ T5634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.427'. [ 119.897339][ T5592] BTRFS info (device loop3): not using spread ssd allocation scheme [ 119.905858][ T5592] BTRFS info (device loop3): enabling all of the rescue options [ 119.925899][ T5634] netlink: 24 bytes leftover after parsing attributes in process `syz.1.427'. [ 119.969225][ T5592] BTRFS info (device loop3): ignoring data csums [ 120.008696][ T5592] BTRFS info (device loop3): ignoring bad roots [ 120.056881][ T5592] BTRFS info (device loop3): disabling log replay at mount time [ 120.064623][ T5592] BTRFS info (device loop3): force zlib compression, level 3 [ 120.137396][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.144953][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.156873][ T5592] BTRFS info (device loop3): enabling ssd optimizations [ 120.163866][ T5592] BTRFS info (device loop3): using spread ssd allocation scheme [ 120.212342][ T5348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.220259][ T5592] BTRFS info (device loop3): using free space tree [ 120.246955][ T5592] BTRFS info (device loop3): has skinny extents [ 120.476979][ T4243] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 120.602349][ T5665] loop4: detected capacity change from 0 to 2048 [ 120.692660][ T5665] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 120.747235][ T4243] usb 2-1: Using ep0 maxpacket: 16 [ 120.776994][ T5681] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.802946][ T4762] udevd[4762]: incorrect nilfs2 checksum on /dev/loop4 [ 120.878250][ T4243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.937387][ T4243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.986941][ T4243] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 121.039260][ T4243] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 121.063077][ T4243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.104382][ T4243] usb 2-1: config 0 descriptor?? [ 121.136213][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 121.188159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 121.235121][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 121.304640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 121.334400][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 121.373948][ T5694] loop4: detected capacity change from 0 to 256 [ 121.397612][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 121.430414][ T5348] device veth0_vlan entered promiscuous mode [ 121.463532][ T5348] device veth1_vlan entered promiscuous mode [ 121.504352][ T5694] exfat: Deprecated parameter 'namecase' [ 121.574143][ T5694] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x2eaaf3db, utbl_chksum : 0xe619d30d) [ 121.625222][ T4243] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000A/input/input8 [ 121.680151][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 121.700126][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 121.725573][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 121.740285][ T4243] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 121.800995][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.869022][ T4243] usb 2-1: USB disconnect, device number 8 [ 121.877516][ T5348] device veth0_macvtap entered promiscuous mode [ 121.913376][ T5348] device veth1_macvtap entered promiscuous mode [ 122.082402][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.114096][ T5711] loop4: detected capacity change from 0 to 256 [ 122.128506][ T5706] fido_id[5706]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 122.152754][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.222044][ T5711] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x0b0ca5f0, utbl_chksum : 0xe619d30d) [ 122.235695][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.295751][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.355930][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.418121][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.466934][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.491836][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.524029][ T5348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.591582][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 122.604912][ T5720] loop4: detected capacity change from 0 to 16 [ 122.623798][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 122.656039][ T5720] erofs: (device loop4): mounted with root inode @ nid 36. [ 122.695586][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.725155][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.805926][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.833046][ T5725] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.447'. [ 122.854328][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.888337][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.925269][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.974084][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.994386][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.040315][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.066914][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.118931][ T5348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.137734][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 123.159796][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 123.204948][ T5348] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.247551][ T5348] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.293012][ T5348] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.320237][ T5348] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.402072][ T5704] loop3: detected capacity change from 0 to 40427 [ 123.553804][ T5704] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 123.609185][ T5704] F2FS-fs (loop3): invalid crc value [ 123.649785][ T5704] F2FS-fs (loop3): Found nat_bits in checkpoint [ 123.715490][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.772166][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.805893][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.856974][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.880562][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 123.910164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 123.960344][ T5704] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 124.164575][ T5756] netlink: 'syz.1.455': attribute type 3 has an invalid length. [ 124.194851][ T5756] netlink: 16 bytes leftover after parsing attributes in process `syz.1.455'. [ 124.449190][ T5767] loop1: detected capacity change from 0 to 64 [ 124.676980][ T5767] attempt to access beyond end of device [ 124.676980][ T5767] loop1: rw=2049, want=268435470, limit=64 [ 124.701168][ T5774] loop7: detected capacity change from 0 to 512 [ 124.736217][ T5767] Buffer I/O error on dev loop1, logical block 134217734, lost async page write [ 124.754629][ T5775] loop5: detected capacity change from 0 to 512 [ 124.899865][ T5744] loop4: detected capacity change from 0 to 32768 [ 124.966056][ T5774] EXT4-fs error (device loop7): ext4_do_update_inode:5218: inode #16: comm syz.7.461: corrupted inode contents [ 124.999060][ T5744] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.453 (5744) [ 125.056486][ T5774] EXT4-fs error (device loop7): ext4_dirty_inode:6054: inode #16: comm syz.7.461: mark_inode_dirty error [ 125.126690][ T5744] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 125.178132][ T5775] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 125.186172][ T5775] System zones: 1-12 [ 125.198503][ T5774] EXT4-fs error (device loop7): ext4_do_update_inode:5218: inode #16: comm syz.7.461: corrupted inode contents [ 125.237755][ T5744] BTRFS info (device loop4): using free space tree [ 125.244326][ T5744] BTRFS info (device loop4): has skinny extents [ 125.282943][ T5774] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #16: comm syz.7.461: mark_inode_dirty error [ 125.313486][ T5775] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.460: Directory hole found for htree index block 0 [ 125.348720][ T5774] EXT4-fs error (device loop7): ext4_do_update_inode:5218: inode #16: comm syz.7.461: corrupted inode contents [ 125.423282][ T5775] EXT4-fs (loop5): Remounting filesystem read-only [ 125.443255][ T5774] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 125.447044][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 125.468479][ T5775] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 125.479230][ T5775] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.460: Directory hole found for htree index block 0 [ 125.485057][ T5774] EXT4-fs error (device loop7): ext4_do_update_inode:5218: inode #16: comm syz.7.461: corrupted inode contents [ 125.503445][ T5775] EXT4-fs (loop5): Remounting filesystem read-only [ 125.503552][ T5775] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 125.503577][ T5775] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 125.539380][ T5774] EXT4-fs error (device loop7): ext4_truncate:4279: inode #16: comm syz.7.461: mark_inode_dirty error [ 125.562376][ T5774] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 125.573169][ T5774] EXT4-fs (loop7): 1 truncate cleaned up [ 125.582608][ T5774] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 125.614522][ T5774] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.708500][ T5744] BTRFS info (device loop4): enabling ssd optimizations [ 125.726660][ T5774] EXT4-fs (loop7): re-mounted. Opts: (null). Quota mode: writeback. [ 125.765956][ T5775] EXT4-fs (loop5): Can't set test_dummy_encryption on remount [ 126.057144][ T23] usb 4-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 126.083783][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.147760][ T23] usb 4-1: Product: syz [ 126.151999][ T23] usb 4-1: Manufacturer: syz [ 126.212196][ T4762] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop4 scanned by udevd (4762) [ 126.225383][ T23] usb 4-1: SerialNumber: syz [ 126.382908][ T5841] netlink: 128 bytes leftover after parsing attributes in process `syz.7.474'. [ 126.407128][ T5841] netlink: 8 bytes leftover after parsing attributes in process `syz.7.474'. [ 126.623681][ T23] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 126.683302][ T23] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 126.731646][ T23] usb 4-1: USB disconnect, device number 4 [ 127.650547][ T5891] loop7: detected capacity change from 0 to 64 [ 127.711688][ T5836] loop5: detected capacity change from 0 to 32768 [ 127.734199][ T5885] loop3: detected capacity change from 0 to 4096 [ 127.788557][ T5836] XFS (loop5): Invalid device [./file0], error=-16 [ 127.836809][ T5701] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 127.859015][ T26] audit: type=1800 audit(1762202857.266:7): pid=5891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.492" name="bus" dev="loop7" ino=21 res=0 errno=0 [ 128.174306][ T5906] loop1: detected capacity change from 0 to 1024 [ 128.414679][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.458350][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.491397][ T5701] usb 5-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00 [ 128.502109][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.537790][ T5701] usb 5-1: config 0 descriptor?? [ 129.046945][ T4235] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 129.060274][ T5701] hid (null): report_id 0 is invalid [ 129.068101][ T5701] itetech 0003:06CB:2968.000B: report_id 0 is invalid [ 129.074960][ T5701] itetech 0003:06CB:2968.000B: item 0 0 1 8 parsing failed [ 129.110299][ T5701] itetech: probe of 0003:06CB:2968.000B failed with error -22 [ 129.306211][ T4235] usb 6-1: Using ep0 maxpacket: 8 [ 129.317890][ T5921] loop7: detected capacity change from 0 to 32768 [ 129.319317][ T5701] usb 5-1: USB disconnect, device number 4 [ 129.436423][ T5906] hfsplus: failed to load root directory [ 129.447175][ T4235] usb 6-1: config 0 has an invalid interface number: 65 but max is 5 [ 129.464848][ T4235] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 6 [ 129.484262][ T4235] usb 6-1: config 0 has no interface number 0 [ 129.515888][ T4235] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 129.551681][ T4235] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 129.582065][ T4235] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 129.594908][ T4235] usb 6-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 129.610164][ T4235] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 129.630254][ T4235] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.649386][ T4235] usb 6-1: config 0 descriptor?? [ 129.717216][ T5921] XFS (loop7): Mounting V5 Filesystem [ 129.984602][ T4235] usb 6-1: USB disconnect, device number 4 [ 130.046107][ T5958] loop3: detected capacity change from 0 to 4096 [ 130.112648][ T5921] XFS (loop7): Ending clean mount [ 130.141703][ T5958] ntfs3: loop3: ino=3, Correct links count -> 2. [ 130.223788][ T5959] loop4: detected capacity change from 0 to 8192 [ 130.261049][ T5348] XFS (loop7): Unmounting Filesystem [ 130.397733][ T5959] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 130.481397][ T5959] REISERFS (device loop4): using journaled data mode [ 130.511613][ T5959] reiserfs: using flush barriers [ 130.603902][ T5959] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 130.674012][ T5959] REISERFS (device loop4): checking transaction log (loop4) [ 130.781527][ T5959] REISERFS (device loop4): Using r5 hash to sort names [ 130.830807][ T5959] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 130.956419][ T5959] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 131.005533][ T5959] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 131.638865][ T5986] loop7: detected capacity change from 0 to 1024 [ 131.815424][ T5986] hfsplus: bad catalog entry type [ 132.026708][ T4922] hfsplus: b-tree write err: -5, ino 4 [ 132.275655][ T5973] loop5: detected capacity change from 0 to 32768 [ 132.521239][ T5973] XFS (loop5): Mounting V5 Filesystem [ 132.672553][ T6028] loop4: detected capacity change from 0 to 128 [ 132.860765][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.866819][ T5973] XFS (loop5): Ending clean mount [ 132.867163][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.944726][ T4714] XFS (loop5): Unmounting Filesystem [ 133.045011][ T6042] syz.3.531 uses obsolete (PF_INET,SOCK_PACKET) [ 133.251695][ T6048] loop3: detected capacity change from 0 to 2048 [ 133.326798][ T6048] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 133.388183][ T6048] attempt to access beyond end of device [ 133.388183][ T6048] loop3: rw=524288, want=33554432, limit=2048 [ 133.400663][ T6051] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 133.704692][ T6062] loop5: detected capacity change from 0 to 1024 [ 133.758730][ T6065] netlink: 'syz.3.536': attribute type 28 has an invalid length. [ 134.494388][ T6028] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 134.560080][ T6028] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.610533][ T6094] netlink: 'syz.5.543': attribute type 1 has an invalid length. [ 135.285298][ T6109] loop5: detected capacity change from 0 to 512 [ 135.409528][ T6109] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,noblock_validity,,errors=continue. Quota mode: writeback. [ 135.455433][ T6109] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.525185][ T6117] loop1: detected capacity change from 0 to 32768 [ 136.669963][ T6154] sg_write: data in/out 327680/1 bytes for SCSI command 0xf0-- guessing data in; [ 136.669963][ T6154] program syz.7.562 not setting count and/or reply_len properly [ 136.875306][ T6165] netlink: 'syz.5.565': attribute type 2 has an invalid length. [ 136.895883][ T6165] netlink: 'syz.5.565': attribute type 2 has an invalid length. [ 136.927543][ T6165] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.565'. [ 137.621232][ T6195] loop3: detected capacity change from 0 to 256 [ 137.815477][ T6205] loop7: detected capacity change from 0 to 512 [ 138.027015][ T4243] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 138.063398][ T6117] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.550 (6117) [ 138.143510][ T6117] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 138.167019][ T6117] BTRFS info (device loop1): turning off barriers [ 138.180709][ T6117] BTRFS info (device loop1): enabling ssd optimizations [ 138.219570][ T6117] BTRFS info (device loop1): using spread ssd allocation scheme [ 138.233427][ T6117] BTRFS info (device loop1): not using ssd optimizations [ 138.247680][ T6117] BTRFS info (device loop1): not using spread ssd allocation scheme [ 138.276850][ T6117] BTRFS info (device loop1): enabling all of the rescue options [ 138.302147][ T6117] BTRFS info (device loop1): ignoring data csums [ 138.319069][ T6117] BTRFS info (device loop1): ignoring bad roots [ 138.339403][ T6117] BTRFS info (device loop1): disabling log replay at mount time [ 138.363790][ T6187] loop5: detected capacity change from 0 to 32768 [ 138.373037][ T6117] BTRFS info (device loop1): force zlib compression, level 3 [ 138.391375][ T6117] BTRFS info (device loop1): enabling ssd optimizations [ 138.406895][ T6117] BTRFS info (device loop1): using spread ssd allocation scheme [ 138.417282][ T4243] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 138.427359][ T6187] XFS: attr2 mount option is deprecated. [ 138.435749][ T4243] usb 5-1: config 0 has no interface number 0 [ 138.455657][ T6117] BTRFS info (device loop1): using free space tree [ 138.472748][ T4243] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 138.478547][ T6117] BTRFS info (device loop1): has skinny extents [ 138.482529][ T4243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.500628][ T4243] usb 5-1: config 0 descriptor?? [ 138.542229][ T4243] usb 5-1: selecting invalid altsetting 1 [ 138.626014][ T4243] dvb_ttusb_budget: ttusb_init_controller: error [ 138.653021][ T4243] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 138.894982][ T4243] DVB: Unable to find symbol cx22700_attach() [ 138.902820][ T6187] XFS (loop5): Mounting V5 Filesystem [ 138.980594][ T4243] DVB: Unable to find symbol tda10046_attach() [ 138.987333][ T4243] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 139.003340][ T4243] usb 5-1: USB disconnect, device number 5 [ 139.074834][ T6187] XFS (loop5): Ending clean mount [ 139.129123][ T6187] XFS (loop5): Quotacheck needed: Please wait. [ 139.215238][ T6187] XFS (loop5): Quotacheck: Done. [ 139.323577][ T4714] XFS (loop5): Unmounting Filesystem [ 139.742485][ T6205] EXT4-fs (loop7): orphan cleanup on readonly fs [ 139.778385][ T6275] loop4: detected capacity change from 0 to 2048 [ 139.858639][ T6205] EXT4-fs warning (device loop7): ext4_xattr_inode_get:509: inode #11: comm syz.7.580: EA inode hash validation failed [ 139.881732][ T6205] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 139.895387][ T6205] EXT4-fs error (device loop7): ext4_xattr_inode_update_ref:1001: inode #11: comm syz.7.580: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 139.957872][ T6205] EXT4-fs warning (device loop7): ext4_xattr_inode_dec_ref_all:1190: inode #11: comm syz.7.580: ea_inode dec ref err=-117 [ 139.980559][ T6205] EXT4-fs (loop7): 1 orphan inode deleted [ 139.986361][ T6205] EXT4-fs (loop7): mounted filesystem without journal. Opts: stripe=0x0000000000000003,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 140.011563][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.098514][ T6287] loop5: detected capacity change from 0 to 128 [ 140.175376][ T6291] CIFS mount error: No usable UNC path provided in device string! [ 140.175376][ T6291] [ 140.208689][ T6291] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 140.589107][ T6117] BTRFS error (device loop1): open_ctree failed: -12 [ 140.925031][ T6320] netlink: 20 bytes leftover after parsing attributes in process `syz.1.600'. [ 141.129780][ T6327] loop1: detected capacity change from 0 to 512 [ 141.327824][ T6327] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 141.388411][ T6327] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.403465][ T6330] loop3: detected capacity change from 0 to 4096 [ 141.496424][ T6330] ntfs3: loop3: ino=3, Correct links count -> 2. [ 141.542421][ T6287] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 141.550946][ T6342] loop4: detected capacity change from 0 to 1024 [ 141.560537][ T6287] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 141.814141][ T26] audit: type=1800 audit(1762202871.216:8): pid=6330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.608" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 142.135197][ T6358] loop5: detected capacity change from 0 to 2048 [ 142.257258][ T6370] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.530763][ T6385] loop1: detected capacity change from 0 to 128 [ 142.654825][ T6392] netlink: 52 bytes leftover after parsing attributes in process `syz.7.631'. [ 142.882725][ T4235] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 143.182713][ T6408] sp0: Synchronizing with TNC [ 143.250888][ T6407] [U] è [ 143.304158][ T4235] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 143.336034][ T4235] usb 6-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 143.353363][ T4235] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.367857][ T4235] usb 6-1: config 0 descriptor?? [ 143.611500][ T6418] loop4: detected capacity change from 0 to 4096 [ 143.681536][ T6418] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 143.754786][ T6418] ntfs3: loop4: failed to convert "076c" to iso8859-1 [ 143.853037][ T4235] logitech 0003:046D:C626.000C: unbalanced collection at end of report description [ 143.873336][ T4235] logitech 0003:046D:C626.000C: parse failed [ 143.913394][ T4235] logitech: probe of 0003:046D:C626.000C failed with error -22 [ 144.054333][ T4235] usb 6-1: USB disconnect, device number 5 [ 144.591273][ T6385] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 144.640188][ T6385] ext4 filesystem being mounted at /128/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 144.663660][ T6443] loop5: detected capacity change from 0 to 1024 [ 144.910724][ T6427] loop4: detected capacity change from 0 to 32768 [ 145.204230][ T6463] loop7: detected capacity change from 0 to 128 [ 145.250393][ T6427] JBD2: Ignoring recovery information on journal [ 145.412921][ T6427] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 145.604847][ T4192] ocfs2: Unmounting device (7,4) on (node local) [ 145.848555][ T6485] loop5: detected capacity change from 0 to 16 [ 145.882287][ T6486] loop7: detected capacity change from 0 to 1024 [ 145.964667][ T6486] hfsplus: extend alloc file! (16384,256,150995124) [ 145.980452][ T6486] hfsplus: failed to extend attributes file [ 146.002059][ T6486] hfsplus: extend alloc file! (16384,256,150995124) [ 146.019450][ T6486] hfsplus: failed to extend attributes file [ 146.047148][ T6490] netlink: 19 bytes leftover after parsing attributes in process `syz.4.655'. [ 146.344774][ T6498] loop7: detected capacity change from 0 to 4096 [ 146.411814][ T6498] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512) [ 146.582078][ T6498] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 146.929278][ T6523] loop7: detected capacity change from 0 to 8 [ 147.026560][ T6523] SQUASHFS error: lzo decompression failed, data probably corrupt [ 147.040378][ T6523] SQUASHFS error: Failed to read block 0x0: -5 [ 147.057521][ T6523] SQUASHFS error: Unable to read data cache entry [0] [ 147.077918][ T6523] SQUASHFS error: Unable to read page, block 0, size ff [ 147.095460][ T6485] erofs: (device loop5): mounted with root inode @ nid 36. [ 147.122297][ T6523] SQUASHFS error: Unable to read data cache entry [0] [ 147.137517][ T26] audit: type=1800 audit(1762202876.546:9): pid=6485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.654" name="file1" dev="loop5" ino=86 res=0 errno=0 [ 147.176181][ T6523] SQUASHFS error: Unable to read page, block 0, size ff [ 147.239186][ T6523] SQUASHFS error: lzo decompression failed, data probably corrupt [ 147.264511][ T6523] SQUASHFS error: Failed to read block 0x0: -5 [ 147.280677][ T6523] SQUASHFS error: lzo decompression failed, data probably corrupt [ 147.293804][ T6523] SQUASHFS error: Failed to read block 0x0: -5 [ 147.342037][ T26] audit: type=1800 audit(1762202876.746:10): pid=6523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.669" name="file2" dev="loop7" ino=3 res=0 errno=0 [ 147.460985][ T6537] netlink: 'syz.1.673': attribute type 10 has an invalid length. [ 147.613747][ T6537] device veth0_vlan left promiscuous mode [ 147.735057][ T6537] device veth0_vlan entered promiscuous mode [ 147.794469][ T6537] team0: Device veth0_vlan failed to register rx_handler [ 147.813316][ T6551] autofs4:pid:6551:autofs_fill_super: called with bogus options [ 147.996071][ T6558] loop7: detected capacity change from 0 to 256 [ 148.048018][ T6563] loop5: detected capacity change from 0 to 1024 [ 148.228392][ T6563] hfsplus: bad catalog entry type [ 148.242033][ T6569] loop1: detected capacity change from 0 to 128 [ 148.290010][ T4922] hfsplus: b-tree write err: -5, ino 4 [ 148.343573][ T6569] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 148.417161][ T6569] hpfs: filesystem error: improperly stopped [ 148.447399][ T6569] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 148.486782][ T6569] hpfs: You really don't want any checks? You are crazy... [ 148.512936][ T6569] hpfs: hpfs_map_sector(): read error [ 148.542358][ T6569] hpfs: code page support is disabled [ 148.554184][ T4295] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 148.570995][ T6569] hpfs: hpfs_map_4sectors(): unaligned read [ 148.592306][ T6569] hpfs: hpfs_map_4sectors(): unaligned read [ 148.635917][ T6569] hpfs: filesystem error: unable to find root dir [ 149.137912][ T6595] loop5: detected capacity change from 0 to 1024 [ 149.141707][ T4295] usb 4-1: config 0 interface 0 has no altsetting 0 [ 149.164013][ T4295] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 149.238878][ T4295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.265382][ T4295] usb 4-1: config 0 descriptor?? [ 149.789527][ T4295] zeroplus 0003:0C12:0005.000D: unknown main item tag 0x2 [ 149.870391][ T4295] zeroplus 0003:0C12:0005.000D: hidraw0: USB HID v1.01 Device [HID 0c12:0005] on usb-dummy_hcd.3-1/input0 [ 149.906706][ T6607] loop1: detected capacity change from 0 to 2364 [ 149.939338][ T4295] zeroplus 0003:0C12:0005.000D: no inputs found [ 150.014778][ T4235] usb 4-1: USB disconnect, device number 5 [ 150.265573][ T6624] loop4: detected capacity change from 0 to 2048 [ 150.324867][ C0] ================================================================== [ 150.333646][ C0] BUG: KASAN: use-after-free in __nft_trace_packet+0x135/0x150 [ 150.341349][ C0] Read of size 2 at addr ffff888022ca21c0 by task ksoftirqd/0/14 [ 150.349102][ C0] [ 150.351455][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 150.358773][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 150.368983][ C0] Call Trace: [ 150.372294][ C0] [ 150.375333][ C0] dump_stack_lvl+0x168/0x230 [ 150.380064][ C0] ? show_regs_print_info+0x20/0x20 [ 150.385414][ C0] ? _printk+0xcc/0x110 [ 150.389612][ C0] ? __nft_trace_packet+0x135/0x150 [ 150.394852][ C0] ? load_image+0x3b0/0x3b0 [ 150.399398][ C0] ? nft_synproxy_do_eval+0x341/0x570 [ 150.404896][ C0] print_address_description+0x60/0x2d0 [ 150.410480][ C0] ? __nft_trace_packet+0x135/0x150 [ 150.415705][ C0] kasan_report+0xdf/0x130 [ 150.420155][ C0] ? __nft_trace_packet+0x135/0x150 [ 150.425482][ C0] __nft_trace_packet+0x135/0x150 [ 150.430537][ C0] nft_do_chain+0x120e/0x1420 [ 150.435261][ C0] ? mark_lock+0x94/0x320 [ 150.439631][ C0] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 150.445559][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 150.451625][ C0] ? nf_nat_inet_fn+0x84e/0xa90 [ 150.456532][ C0] ? nf_nat_packet+0xf0/0xf0 [ 150.461173][ C0] nft_do_chain_inet+0x22b/0x300 [ 150.466143][ C0] ? nft_do_chain_arp+0xe0/0xe0 [ 150.471037][ C0] ? nf_nat_ipv4_local_in+0x209/0x5b0 [ 150.476454][ C0] ? nft_do_chain_arp+0xe0/0xe0 [ 150.481339][ C0] nf_hook_slow+0xb9/0x200 [ 150.485791][ C0] ? NF_HOOK+0x360/0x360 [ 150.490066][ C0] NF_HOOK+0x1cb/0x360 [ 150.494171][ C0] ? NF_HOOK+0x360/0x360 [ 150.498441][ C0] ? ip_local_deliver+0x1a0/0x1a0 [ 150.503495][ C0] ? ip_rcv_finish_core+0xd8b/0x1bc0 [ 150.508822][ C0] ? NF_HOOK+0x360/0x360 [ 150.513106][ C0] ? ip_local_deliver+0x11e/0x1a0 [ 150.518167][ C0] ? ip_rcv_core+0xb60/0xb60 [ 150.522789][ C0] NF_HOOK+0x2d6/0x360 [ 150.526891][ C0] ? ip_rcv_core+0xb60/0xb60 [ 150.531608][ C0] ? ip_local_deliver+0x1a0/0x1a0 [ 150.536671][ C0] ? ip_rcv_core+0xb60/0xb60 [ 150.541296][ C0] ? ip_local_deliver_finish+0x320/0x320 [ 150.546963][ C0] ? ip_local_deliver_finish+0x320/0x320 [ 150.552626][ C0] __netif_receive_skb+0xcc/0x290 [ 150.557709][ C0] process_backlog+0x364/0x780 [ 150.562531][ C0] ? rps_trigger_softirq+0x210/0x210 [ 150.567851][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 150.574022][ C0] ? lock_chain_count+0x20/0x20 [ 150.578935][ C0] __napi_poll+0xc0/0x430 [ 150.583306][ C0] ? net_rx_action+0x2db/0x9c0 [ 150.588105][ C0] net_rx_action+0x4a8/0x9c0 [ 150.592733][ C0] ? lockdep_softirqs_on+0x570/0x570 [ 150.598061][ C0] ? net_tx_action+0x870/0x870 [ 150.602869][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 150.608906][ C0] ? lock_chain_count+0x20/0x20 [ 150.613806][ C0] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 150.619841][ C0] handle_softirqs+0x328/0x820 [ 150.624671][ C0] ? run_ksoftirqd+0x98/0xf0 [ 150.629312][ C0] ? do_softirq+0x200/0x200 [ 150.633857][ C0] ? run_ksoftirqd+0x75/0xf0 [ 150.638479][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 150.643710][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 150.649040][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 150.654281][ C0] run_ksoftirqd+0x98/0xf0 [ 150.658740][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 150.663976][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 150.669397][ C0] smpboot_thread_fn+0x4f6/0x970 [ 150.674395][ C0] kthread+0x436/0x520 [ 150.678499][ C0] ? cpu_report_death+0x180/0x180 [ 150.683559][ C0] ? kthread_blkcg+0xd0/0xd0 [ 150.688181][ C0] ret_from_fork+0x1f/0x30 [ 150.692643][ C0] [ 150.695686][ C0] [ 150.698032][ C0] Allocated by task 14: [ 150.702204][ C0] __kasan_slab_alloc+0x9c/0xd0 [ 150.707085][ C0] slab_post_alloc_hook+0x4c/0x380 [ 150.712223][ C0] kmem_cache_alloc_node+0x12d/0x2d0 [ 150.717533][ C0] __alloc_skb+0xf4/0x750 [ 150.721899][ C0] synproxy_send_client_synack+0x169/0xdd0 [ 150.727736][ C0] nft_synproxy_eval_v4+0x36b/0x560 [ 150.732955][ C0] nft_synproxy_do_eval+0x341/0x570 [ 150.738172][ C0] nft_do_chain+0x3fc/0x1420 [ 150.742790][ C0] nft_do_chain_inet+0x22b/0x300 [ 150.747754][ C0] nf_hook_slow+0xb9/0x200 [ 150.752200][ C0] NF_HOOK+0x1cb/0x360 [ 150.756298][ C0] NF_HOOK+0x2d6/0x360 [ 150.760401][ C0] __netif_receive_skb+0xcc/0x290 [ 150.765465][ C0] process_backlog+0x364/0x780 [ 150.770279][ C0] __napi_poll+0xc0/0x430 [ 150.774643][ C0] net_rx_action+0x4a8/0x9c0 [ 150.779270][ C0] handle_softirqs+0x328/0x820 [ 150.784064][ C0] run_ksoftirqd+0x98/0xf0 [ 150.788509][ C0] smpboot_thread_fn+0x4f6/0x970 [ 150.793485][ C0] kthread+0x436/0x520 [ 150.797590][ C0] ret_from_fork+0x1f/0x30 [ 150.802088][ C0] [ 150.804438][ C0] Freed by task 14: [ 150.808264][ C0] kasan_set_track+0x4b/0x70 [ 150.812907][ C0] kasan_set_free_info+0x1f/0x40 [ 150.817916][ C0] ____kasan_slab_free+0xd5/0x110 [ 150.822981][ C0] slab_free_freelist_hook+0xea/0x170 [ 150.828394][ C0] kmem_cache_free+0x8f/0x210 [ 150.833108][ C0] nft_synproxy_eval_v4+0x373/0x560 [ 150.838344][ C0] nft_synproxy_do_eval+0x341/0x570 [ 150.843575][ C0] nft_do_chain+0x3fc/0x1420 [ 150.848201][ C0] nft_do_chain_inet+0x22b/0x300 [ 150.853189][ C0] nf_hook_slow+0xb9/0x200 [ 150.857684][ C0] NF_HOOK+0x1cb/0x360 [ 150.861789][ C0] NF_HOOK+0x2d6/0x360 [ 150.866077][ C0] __netif_receive_skb+0xcc/0x290 [ 150.871142][ C0] process_backlog+0x364/0x780 [ 150.875950][ C0] __napi_poll+0xc0/0x430 [ 150.880315][ C0] net_rx_action+0x4a8/0x9c0 [ 150.884939][ C0] handle_softirqs+0x328/0x820 [ 150.889721][ C0] run_ksoftirqd+0x98/0xf0 [ 150.894165][ C0] smpboot_thread_fn+0x4f6/0x970 [ 150.899136][ C0] kthread+0x436/0x520 [ 150.903234][ C0] ret_from_fork+0x1f/0x30 [ 150.907684][ C0] [ 150.910031][ C0] The buggy address belongs to the object at ffff888022ca2140 [ 150.910031][ C0] which belongs to the cache skbuff_head_cache of size 232 [ 150.924631][ C0] The buggy address is located 128 bytes inside of [ 150.924631][ C0] 232-byte region [ffff888022ca2140, ffff888022ca2228) [ 150.937938][ C0] The buggy address belongs to the page: [ 150.943603][ C0] page:ffffea00008b2880 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22ca2 [ 150.953790][ C0] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 150.961485][ C0] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff88801b7e4140 [ 150.970105][ C0] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 150.978722][ C0] page dumped because: kasan: bad access detected [ 150.985170][ C0] page_owner tracks the page as allocated [ 150.990917][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 14, ts 150324292926, free_ts 149573047333 [ 151.008403][ C0] get_page_from_freelist+0x1b77/0x1c60 [ 151.013988][ C0] __alloc_pages+0x1e1/0x470 [ 151.018614][ C0] new_slab+0xc0/0x4b0 [ 151.022715][ C0] ___slab_alloc+0x81e/0xdf0 [ 151.027336][ C0] kmem_cache_alloc_node+0x1c3/0x2d0 [ 151.032657][ C0] __alloc_skb+0xf4/0x750 [ 151.037011][ C0] synproxy_send_client_synack+0x169/0xdd0 [ 151.042846][ C0] nft_synproxy_eval_v4+0x36b/0x560 [ 151.048083][ C0] nft_synproxy_do_eval+0x341/0x570 [ 151.053317][ C0] nft_do_chain+0x3fc/0x1420 [ 151.057942][ C0] nft_do_chain_inet+0x22b/0x300 [ 151.062910][ C0] nf_hook_slow+0xb9/0x200 [ 151.067360][ C0] NF_HOOK+0x1cb/0x360 [ 151.071461][ C0] NF_HOOK+0x2d6/0x360 [ 151.075565][ C0] __netif_receive_skb+0xcc/0x290 [ 151.080622][ C0] process_backlog+0x364/0x780 [ 151.085414][ C0] page last free stack trace: [ 151.090101][ C0] free_unref_page_prepare+0x637/0x6c0 [ 151.095592][ C0] free_unref_page_list+0x122/0x7e0 [ 151.100824][ C0] release_pages+0x184b/0x1bb0 [ 151.105624][ C0] tlb_finish_mmu+0x164/0x2e0 [ 151.110340][ C0] exit_mmap+0x3a6/0x5f0 [ 151.114626][ C0] __mmput+0x115/0x3b0 [ 151.118824][ C0] exit_mm+0x567/0x6c0 [ 151.122935][ C0] do_exit+0x5a1/0x20a0 [ 151.127122][ C0] do_group_exit+0x12e/0x300 [ 151.131754][ C0] get_signal+0x6ca/0x12c0 [ 151.136204][ C0] arch_do_signal_or_restart+0xc1/0x1300 [ 151.141862][ C0] exit_to_user_mode_loop+0x9e/0x130 [ 151.147194][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 151.152780][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 151.158279][ C0] do_syscall_64+0x58/0xa0 [ 151.162731][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.168673][ C0] [ 151.171019][ C0] Memory state around the buggy address: [ 151.176671][ C0] ffff888022ca2080: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 151.184762][ C0] ffff888022ca2100: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 151.192850][ C0] >ffff888022ca2180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 151.200944][ C0] ^ [ 151.207126][ C0] ffff888022ca2200: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 151.215222][ C0] ffff888022ca2280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 151.223394][ C0] ================================================================== [ 151.231479][ C0] Disabling lock debugging due to kernel taint [ 151.237796][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 151.245025][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Tainted: G B syzkaller #0 [ 151.253720][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 151.263801][ C0] Call Trace: [ 151.267106][ C0] [ 151.270059][ C0] dump_stack_lvl+0x168/0x230 [ 151.274777][ C0] ? show_regs_print_info+0x20/0x20 [ 151.280013][ C0] ? load_image+0x3b0/0x3b0 [ 151.284556][ C0] panic+0x2c9/0x7f0 [ 151.288480][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 151.293019][ C0] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 151.298939][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 151.304869][ C0] ? _raw_spin_unlock+0x40/0x40 [ 151.309767][ C0] ? print_memory_metadata+0x314/0x400 [ 151.315261][ C0] ? __nft_trace_packet+0x135/0x150 [ 151.320482][ C0] check_panic_on_warn+0x80/0xa0 [ 151.325451][ C0] ? __nft_trace_packet+0x135/0x150 [ 151.330681][ C0] end_report+0x6d/0xf0 [ 151.334867][ C0] kasan_report+0x102/0x130 [ 151.339403][ C0] ? __nft_trace_packet+0x135/0x150 [ 151.344629][ C0] __nft_trace_packet+0x135/0x150 [ 151.349685][ C0] nft_do_chain+0x120e/0x1420 [ 151.354394][ C0] ? mark_lock+0x94/0x320 [ 151.358753][ C0] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 151.364670][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 151.370702][ C0] ? nf_nat_inet_fn+0x84e/0xa90 [ 151.375598][ C0] ? nf_nat_packet+0xf0/0xf0 [ 151.380221][ C0] nft_do_chain_inet+0x22b/0x300 [ 151.385198][ C0] ? nft_do_chain_arp+0xe0/0xe0 [ 151.390083][ C0] ? nf_nat_ipv4_local_in+0x209/0x5b0 [ 151.395503][ C0] ? nft_do_chain_arp+0xe0/0xe0 [ 151.400387][ C0] nf_hook_slow+0xb9/0x200 [ 151.404922][ C0] ? NF_HOOK+0x360/0x360 [ 151.409226][ C0] NF_HOOK+0x1cb/0x360 [ 151.413327][ C0] ? NF_HOOK+0x360/0x360 [ 151.417608][ C0] ? ip_local_deliver+0x1a0/0x1a0 [ 151.422668][ C0] ? ip_rcv_finish_core+0xd8b/0x1bc0 [ 151.427986][ C0] ? NF_HOOK+0x360/0x360 [ 151.432265][ C0] ? ip_local_deliver+0x11e/0x1a0 [ 151.437323][ C0] ? ip_rcv_core+0xb60/0xb60 [ 151.441952][ C0] NF_HOOK+0x2d6/0x360 [ 151.446053][ C0] ? ip_rcv_core+0xb60/0xb60 [ 151.450673][ C0] ? ip_local_deliver+0x1a0/0x1a0 [ 151.455733][ C0] ? ip_rcv_core+0xb60/0xb60 [ 151.460356][ C0] ? ip_local_deliver_finish+0x320/0x320 [ 151.466025][ C0] ? ip_local_deliver_finish+0x320/0x320 [ 151.471696][ C0] __netif_receive_skb+0xcc/0x290 [ 151.476769][ C0] process_backlog+0x364/0x780 [ 151.481588][ C0] ? rps_trigger_softirq+0x210/0x210 [ 151.486916][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 151.492943][ C0] ? lock_chain_count+0x20/0x20 [ 151.497834][ C0] __napi_poll+0xc0/0x430 [ 151.502203][ C0] ? net_rx_action+0x2db/0x9c0 [ 151.507000][ C0] net_rx_action+0x4a8/0x9c0 [ 151.511628][ C0] ? lockdep_softirqs_on+0x570/0x570 [ 151.516953][ C0] ? net_tx_action+0x870/0x870 [ 151.521753][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 151.527773][ C0] ? lock_chain_count+0x20/0x20 [ 151.532658][ C0] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 151.538682][ C0] handle_softirqs+0x328/0x820 [ 151.543504][ C0] ? run_ksoftirqd+0x98/0xf0 [ 151.548135][ C0] ? do_softirq+0x200/0x200 [ 151.552673][ C0] ? run_ksoftirqd+0x75/0xf0 [ 151.557293][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 151.562591][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 151.567908][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 151.573134][ C0] run_ksoftirqd+0x98/0xf0 [ 151.577582][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 151.582809][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 151.588218][ C0] smpboot_thread_fn+0x4f6/0x970 [ 151.593200][ C0] kthread+0x436/0x520 [ 151.597336][ C0] ? cpu_report_death+0x180/0x180 [ 151.602397][ C0] ? kthread_blkcg+0xd0/0xd0 [ 151.607017][ C0] ret_from_fork+0x1f/0x30 [ 151.611468][ C0] [ 151.614735][ C0] Kernel Offset: disabled [ 151.619081][ C0] Rebooting in 86400 seconds..