last executing test programs: 11m12.165277404s ago: executing program 32 (id=1360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000003c0)={0x3c, r1, 0x1, 0x4, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xfffffffd}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x14, 0xe, [@ext_channel_switch={0x1c, 0x4, {0xfc, 0x0, 0x38}}, @peer_mgmt={0x75, 0x8, {0x0, 0x0, @val, @val, @void}}]}]}, 0x3c}}, 0x10) 11m9.839730826s ago: executing program 33 (id=1369): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010d21f076001000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "7b3351af"}]}}, 0x0}, 0x0) 9m8.5591901s ago: executing program 34 (id=2231): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private1={0xfc, 0x1, '\x00', 0xfd}, 0x8000000, 0x0, 0x3, 0x1, 0xfffc}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x3, 0x0, 0x0, 0x600}, 0x20) 8m48.664570752s ago: executing program 35 (id=2344): mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000080)={[{@dyn}, {@flock_strict}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) 8m24.370481736s ago: executing program 36 (id=2489): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001080)={0x2001}) 5m6.019624109s ago: executing program 37 (id=4107): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0xb68, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000008c0)={0x53, 0xfffffffffffffffb, 0x6, 0xc0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="474d1f2950ef", 0x0, 0x200005, 0x1, 0x3, 0x0}) 3m11.39852239s ago: executing program 38 (id=5034): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xe, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r0}, 0x38) 2m51.289572885s ago: executing program 6 (id=5150): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, 0x0) 2m50.640758155s ago: executing program 6 (id=5156): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) ioctl(r0, 0x8b32, &(0x7f0000000040)) 2m49.945833022s ago: executing program 6 (id=5160): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 2m49.462804137s ago: executing program 6 (id=5164): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x1000005, &(0x7f0000000e40)=ANY=[], 0x4, 0x1e3, &(0x7f0000000340)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 2m48.775897569s ago: executing program 6 (id=5170): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x800, 0x2) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendfile(r1, r0, 0x0, 0x4) 2m40.7337301s ago: executing program 6 (id=5218): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/47, 0x2f) 2m39.131108415s ago: executing program 39 (id=5218): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/47, 0x2f) 2m1.849923449s ago: executing program 4 (id=5453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a64000000060a0b040000000000000000020000003800048034000180090001007866726d000000002400028008000140000000140500030000000000080002400000000108000440000000050900010073797a30000000000900020073797a32"], 0xcb}, 0x1, 0x0, 0x0, 0x20040885}, 0x40000) 2m1.053887622s ago: executing program 4 (id=5460): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010100}}, 0x17f6089, 0x1ff, 0x0, 0x8, 0xa}, &(0x7f0000000000)=0x98) 1m59.760060337s ago: executing program 4 (id=5466): io_setup(0x9, &(0x7f0000000340)=0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) io_submit(r0, 0x1, &(0x7f0000000840)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5, 0x9, r1, 0x0}]) 1m59.092877544s ago: executing program 4 (id=5474): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) 1m58.538214482s ago: executing program 4 (id=5479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0xc05, 0x0, 0x0, {0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 1m57.099424s ago: executing program 4 (id=5481): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0xfc, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m55.795559247s ago: executing program 40 (id=5481): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0xfc, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m50.18091636s ago: executing program 8 (id=5513): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x7, 0x10001, 0x9, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1m49.580197399s ago: executing program 8 (id=5517): r0 = syz_open_dev$vbi(&(0x7f0000000400), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0x8000000000000000, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x2800, 0x1, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) 1m49.011835321s ago: executing program 8 (id=5522): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000900)={0x0, @bt={0x2d0, 0x190, 0x1, 0x1, 0xdd9f83, 0x1, 0x9, 0x1, 0x1002, 0x8, 0xfffffffd, 0x13, 0x9, 0x7f, 0x3f, 0x38, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) 1m48.481963154s ago: executing program 8 (id=5525): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES8], 0xfd, 0x4b1, &(0x7f0000001d00)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m47.464848189s ago: executing program 8 (id=5531): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 1m46.567062436s ago: executing program 8 (id=5536): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}, {@grpquota}]}, 0x5, 0x4dd, &(0x7f0000000c40)="$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") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) 1m44.843926793s ago: executing program 41 (id=5536): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}, {@grpquota}]}, 0x5, 0x4dd, &(0x7f0000000c40)="$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") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) 1m42.097321322s ago: executing program 0 (id=5549): r0 = socket$igmp6(0xa, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800042, &(0x7f0000000000), 0xfd, 0x577, &(0x7f0000000840)="$eJzs3V1rZGcdAPD/mczkZTeaqL2oQutiC7tFN9l0bRtEui2IdwWler2G7GwIO8ksyaTdhCJZ/ACCiBa80StvBD+AIPsRilCw92JFWXSrYC+0R85LNi87J2/NzODk94Mn55nz9v8/ZybnnDnnSU4A59aliHgtIkYi4oWImCrH18oS20XJ5vvo0TuLWUkiTd/8exJJOS6bLSlL5mK52Hgx2G+iGKxvbt1ZaLWaa+Xo2c7K3dn1za2ryysLS82l5ur163Mvz78y/9L8tTNpZ9auV7/1l5/9+NfffvX3X3v7Tzf/duWHWb6T5fSddpy1Yps0sm3xWD0i1noRbABGyvY0YudHV2MnGAsAQA9l5/ifj4iv5Of/UzGSn81VG91TT3qeHQAAAHAW0huT8Z8kIgUAAACGVi3vA5vUZsq+AJNRq83MFH14n4oLtVZ7vfPV2+2N1VtFX9npaNRuL7ea1/I+tWMR0Uiy13OPrygUr1/M581Ksq8P8E+nJvLpM4vt1q1BXPAAAACAc+jige///5oqvv8DAAAAQ2a6HF4YcB4AAABA70wPOgEAAACg507x/X+0F3kAAAAAPfGdN97ISrrz/Otbb21u3Gm/dfVWc/3OzMrG4sxie+3uzFK7vdRKxyJWjlpfq92++/VY3bg322mud2bXN7durrQ3Vjs3l/c9AhsAAADoo899+cEHSURsf2MiL7Fzb3+kYgF/KwBDo3bkHMlu9cPe5gL0V9VhHhh+9cMn6+YLQ6xRDJJB5wEMzlE7gPGqOd47VTjnFQAAMACXv/jggzR58v5/fffaADCkjr7/Dwyrivv/6VS/EwH6rvL+/xEdA4D/fw09AOHcO/r+f4X38kmvHR0hTY9cFwAA0FOTeUlqM+W9wMmofZwWYjoaye3lVvNaRHw2Iv441RjLXs/lSyb+aAAAAAAAAAAAAAAAAAAAAAAAAAAAjilNk0hPoX6qpQAAAIBBiKj9NSmf/3V56vnJg9cHRpOP80cBf5Km6du/ePPn9xY6nbW5bPw/8vGjEdF5Nxs/OojLFwAAAMAeO0/5z7+/v9gYcDYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADKuPHr2zuFP6Gffh6xEx3S1+Pcbz4Xg0IuLCP5Oo71kuiYiRM4i/fT8inu4WP8nSiukyi4PxaxExkWfR8/jPpGnaNf7FTx0dzrcHr5c7kid+/2pxKR92//2vF+XGp41fvf+rPd7/jRyMXy/2f585Zowvvf/b2T0vv79bHSum17vvf3biJxX73+e6Bas/OeoH39vaqsot/VXE5a7Hn2RfrNnOyt3Z9c2tq8srC0vNpebq9etzL8+/Mv/S/LXZ28utZvmza4yfPPO7T6riP7wUcaGMP7qTU3lgmS4G30wepzK6L6fns0qjas27/vv+vUdfKKp7587X+vB+xJXnur//T+fDrtv/l/9Oc/lxIJt+uTwmJNtFPaL8+EbEs7/5w7OV7b8/XtZO/v5fOazRe1r6wnd/9OdDNxAA0Ffrm1t3Flqt5lrPK++maXq8mbOz0uOvOYnYPjgpO4E741ZMRETFpP2xJsqtGsdd81OVqX44EXHSVLON14f39MZJZk7HTvRhS7b78oFUqaiM5h/IQe+ZAACAs7Z79n+qxWtnnhAAAAAAAAAAAAAAAAAAAACcQ/34v2IHY24PpqkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIf6XwAAAP//oXvNMQ==") setsockopt(r0, 0xff, 0x24, &(0x7f0000000900), 0x0) 1m40.517297391s ago: executing program 0 (id=5553): setitimer(0x2, &(0x7f0000000300)={{}, {0x0, 0x2710}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)) 1m39.665092236s ago: executing program 0 (id=5554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0xfffffc93, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 1m38.795227188s ago: executing program 0 (id=5557): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='iocharset=cp865,uid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c666d61736b3d30303030303030303030303030303030303030303031302c757466382c666d61736b3d30303030303030303030303030303030303030303030362c6572726f72733d636f6e74696e75652c7379735f747a2c616c6c6f775f7574696d653d30303030303030303030303030303030303134373036342c00968868822eaa4073da2a8bad3e75bf3fa58e5fe9023e2efe14b61e42154e792855b9c44517fcaf42990fa252a8fcc76df45041b88e383db02cc075636a6b415c49ee2ad1af7ecfc73f3809bce1541b2c780705cdd96cfb760a1f342582ee152abbe3f5828666937a5068d6170f62dc427b22ae7bd20a2fb9094ffaf7b7eda15af87283045448d6cabb51f8a411539d39a9d6db38d1"], 0x1, 0x1545, &(0x7f0000001a00)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2208c08, 0x0) 1m37.775114711s ago: executing program 0 (id=5561): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000240)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x34}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) 1m37.078510756s ago: executing program 0 (id=5564): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x3, 0x2, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5423, 0x0) 1m35.197492581s ago: executing program 42 (id=5564): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x3, 0x2, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5423, 0x0) 1m0.225221713s ago: executing program 2 (id=5714): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) 59.136048144s ago: executing program 2 (id=5717): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x40, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2f}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 58.31368519s ago: executing program 2 (id=5723): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x0) 57.892222311s ago: executing program 2 (id=5725): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000004c0)='./file0\x00', 0x3000046, &(0x7f0000000140), 0x1, 0x558, &(0x7f0000001600)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 56.707660658s ago: executing program 2 (id=5735): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00090000000000000000001c14000008"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 53.083163525s ago: executing program 2 (id=5753): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x1}, 0x8) 51.464415917s ago: executing program 43 (id=5753): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x1}, 0x8) 5.215574271s ago: executing program 5 (id=6055): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1010040, &(0x7f00000003c0)={[{@noquota}, {@debug}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@resgid}]}, 0x3, 0x4d7, &(0x7f0000001480)="$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") link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='.\x02\x00') 4.14111556s ago: executing program 5 (id=6063): syz_mount_image$exfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000005c0)={[{@namecase}, {@gid}, {@utf8}, {@gid}, {@errors_continue}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@time_offset={'time_offset', 0x3d, 0xc}}, {@errors_continue}, {@errors_remount}]}, 0x1, 0x152a, &(0x7f00000037c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x189800, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0)) 3.955681675s ago: executing program 7 (id=6065): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) 3.374315862s ago: executing program 7 (id=6068): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x2, 0x4b5, 0x405}) fcntl$lock(r0, 0x7, &(0x7f0000000240)={0x2, 0x0, 0x5, 0xffffffff}) 3.333051971s ago: executing program 9 (id=6069): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1d}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0xf}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 3.230226734s ago: executing program 3 (id=6070): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000140)='T', 0x1, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x50) 3.216758806s ago: executing program 5 (id=6071): syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000240)={[{@uid={'uid', 0x3d, 0xee01}}, {@barrier}, {@nodecompose}, {@uid}, {@barrier}, {@part={'part', 0x3d, 0x2}}, {@gid}, {@type={'type', 0x3d, "0da5b329"}}, {@nobarrier}, {@nodecompose}]}, 0x20, 0x6fe, &(0x7f0000000c00)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 2.92181909s ago: executing program 1 (id=6072): syz_mount_image$romfs(&(0x7f000000bc00), &(0x7f000000bd40)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xfd, 0x194, &(0x7f000000be40)="$eJzs2j9P8kAcB/Af/x4Cz/A8sxMJJP5JoAX8M7ibmDj5AowEWmhsU0JNTFlE34DGoY6OTiZuRjdfArOvQF+B25lrr9BwqBA1aPx+lv7o3X3vrgk3XbFjW2XdKRIt9s62H+Md28qtVtfqelmvUWCTiHK86DN2XiLJ7qC9z3olqUP+TjwXmt7WrW6YWkXOAAAAAAAAAAAAAAAAAAAAAAD4JfJPosi2PPtSN0ytHGl13O5ezTS1jhO+KZC4o0NLF/Y67189IqJnxhh/GR+ONbyNY96uit+pYHyYNN/y7NjofMq+1VYct1s0rFpTC8OWVXWlovhZSjTRzzsVa6I+u2nL94kK18P7RA+qfJ+IssEjOWd4Jwd+Ovsnmg6JKNz/4EO4Mb/IkCs3TV9EP7EoUu+Mov9Ek0zRm6BPUuz0g7sYLTIi9tU+f98cngyL2GcvbIqCJWYw6c8rrnZGT4oxRYKIJghMj8354/8H+RzfZMtuuJ7o+UGNdDV/z8+PUt02G8E7vu8vX450ogHMyEsAAAD//w9hJIQ=") truncate(&(0x7f0000000140)='./file2\x00', 0x6400) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) 2.87344202s ago: executing program 9 (id=6073): io_setup(0xeb0, &(0x7f0000000140)=0x0) io_cancel(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100000000}, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) 2.761280157s ago: executing program 3 (id=6074): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat64(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 2.758514133s ago: executing program 7 (id=6075): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) 2.469873375s ago: executing program 5 (id=6076): open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x3ff1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r0, r0, r0}, 0x0, 0x0, 0x0) 2.12457308s ago: executing program 1 (id=6077): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x14, r1, 0x1, 0xffffffff, 0x0, {0x37}}, 0x14}}, 0x40000) 2.076113898s ago: executing program 3 (id=6078): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x81, 0x870, 0x1, 0x2, 0xd59f80, 0x19f2, 0x3f, 0x19f2, 0x3, 0x5, 0x2800, 0x9, 0x2, 0xba2, 0xc, 0x30, {0x8, 0x1}, 0xd0, 0x9}}) 1.846568458s ago: executing program 9 (id=6079): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xffffffff}, @TCA_TBF_PBURST={0x8, 0x7, 0xa0b}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x0, 0x10, 0x6, 0x81, 0x4}, {0xb5, 0x2, 0x986, 0x0, 0xf7, 0x7a}, 0xfffffffd, 0x5, 0x1318}}]}}]}, 0x68}}, 0x44080) 1.59278055s ago: executing program 7 (id=6080): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}}, 0x0) 1.520057801s ago: executing program 5 (id=6081): r0 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, &(0x7f00000003c0), 0x40000000, &(0x7f0000000400)) syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)="46914b75") 1.477942498s ago: executing program 1 (id=6082): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') pread64(r0, &(0x7f0000000040)=""/211, 0xd3, 0x76) 1.408913182s ago: executing program 3 (id=6083): unshare(0x20000400) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x222101, 0x0) getdents(r0, 0x0, 0x0) 1.308075404s ago: executing program 9 (id=6084): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x8) 950.573906ms ago: executing program 7 (id=6085): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 898.839604ms ago: executing program 1 (id=6086): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000280)='.\x00', 0x2a0180, 0x20) fcntl$notify(r0, 0x402, 0x5) 837.195738ms ago: executing program 3 (id=6087): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000c80), 0x2001, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000015c0)={0x8, 0x120, 0xfa00, {0x1, {0x80, 0x7fffffff, "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", 0xfa, 0x6, 0xf, 0x81, 0x6, 0x2, 0x80, 0x1}}}, 0x128) 769.314609ms ago: executing program 9 (id=6088): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x20004040) 514.373103ms ago: executing program 5 (id=6089): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303030342c756e695f786c6174653d312c636f6465706167653d3933362c757466383d302c696f636861727365743d757466382c636865636b3d72656c617865642c6e6f6e756d7461696c3d302c757466383d302c757466383d302c696f636861727365743d63703835302c726f6469722c00f7589df4827903b797bd0d41cd1096622f6861b99e643ac4a56749057e9086753fe532edff5327468e2d93feca7e33d47dd56aa048d0856d41769b48b721da9b"], 0x2a, 0x354, &(0x7f00000002c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x3f, 0x90) 514.232715ms ago: executing program 7 (id=6090): syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) 462.554283ms ago: executing program 1 (id=6091): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@local, 0x200000, 0x1, 0x0, 0x0, 0x8000, 0x3}, 0x20) 139.920879ms ago: executing program 9 (id=6092): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 38.923292ms ago: executing program 1 (id=6093): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000001280)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000001300)=[{&(0x7f0000001480)="27050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162f", 0x26}], 0x1}, 0x800) 0s ago: executing program 3 (id=6094): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)={0x40, 0xd, 0x75, {0x75, 0xe, "e1bcdef3a2b7726791ea62d036417934c1fd9e13c61883a10ce4e8788f7bf6d4a09f9936ac12d636d6f255a0b9103e541c8d1006c61ff9cae95117e1d4fd54437140ba17720cc717798327c2e5e8a10eb71cf83f2451bce23a8cbc7638434729e78d1ba28f62ef1959dc50ead83511538c449c"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43f}}, &(0x7f0000000280)={0x0, 0xf, 0x54, {0x5, 0xf, 0x54, 0x1, [@generic={0x4f, 0x10, 0x2, "c88e49a49b5bbf23b7b7214e4b232e0a87d48005e72564f91325afd672563c7a8fbd6c5a1478e0687917b7ece9ddf8bea0a4546b6ac07cc93f43f530d4e02ade7a80f605e486031b9225ff5a"}]}}, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): ge_slave_1: entered allmulticast mode [ 892.041443][T17760] bridge_slave_1: entered promiscuous mode [ 892.142666][T17816] loop8: detected capacity change from 0 to 256 [ 892.199315][T17816] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 892.359146][ T42] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 892.369649][T17760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.423420][T17760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.557458][ T42] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 892.568601][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.617254][ T5805] Bluetooth: hci4: command tx timeout [ 892.671710][T17760] team0: Port device team_slave_0 added [ 892.693194][T17760] team0: Port device team_slave_1 added [ 892.917467][ T42] usb 2-1: config 0 descriptor?? [ 892.950860][ T42] gspca_main: spca508-2.14.0 probing 8086:0110 [ 893.063111][T17760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 893.071724][T17760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 893.098873][T17760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 893.186526][ T42] gspca_spca508: reg_read err -32 [ 893.194426][T17760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.202223][T17760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 893.229053][T17760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.466378][ T42] gspca_spca508: reg_read err -71 [ 893.477114][ T42] gspca_spca508: reg_read err -71 [ 893.487819][ T42] gspca_spca508: reg_read err -71 [ 893.518779][ T42] gspca_spca508: reg write: error -71 [ 893.524626][ T42] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 893.578672][ T42] usb 2-1: USB disconnect, device number 23 [ 893.721326][T17760] hsr_slave_0: entered promiscuous mode [ 893.731978][T17760] hsr_slave_1: entered promiscuous mode [ 893.744536][T17760] debugfs: 'hsr0' already exists in 'hsr' [ 893.750923][T17760] Cannot create hsr debugfs directory [ 894.226992][T17832] loop3: detected capacity change from 0 to 16 [ 894.280963][T17832] erofs (device loop3): mounted with root inode @ nid 36. [ 894.313475][T17834] sp0: Synchronizing with TNC [ 894.348578][T17832] syz.3.5256: attempt to access beyond end of device [ 894.348578][T17832] loop3: rw=524288, sector=524984, nr_sectors = 8 limit=16 [ 894.363217][T17832] syz.3.5256: attempt to access beyond end of device [ 894.363217][T17832] loop3: rw=524288, sector=368, nr_sectors = 8 limit=16 [ 894.381530][T17832] syz.3.5256: attempt to access beyond end of device [ 894.381530][T17832] loop3: rw=524288, sector=33822867456, nr_sectors = 8 limit=16 [ 894.397714][T17832] syz.3.5256: attempt to access beyond end of device [ 894.397714][T17832] loop3: rw=524288, sector=524280, nr_sectors = 8 limit=16 [ 894.411980][T17832] syz.3.5256: attempt to access beyond end of device [ 894.411980][T17832] loop3: rw=524288, sector=525096, nr_sectors = 8 limit=16 [ 894.426644][T17832] syz.3.5256: attempt to access beyond end of device [ 894.426644][T17832] loop3: rw=524288, sector=712, nr_sectors = 8 limit=16 [ 894.442014][T17832] syz.3.5256: attempt to access beyond end of device [ 894.442014][T17832] loop3: rw=0, sector=524984, nr_sectors = 8 limit=16 [ 894.456357][T17832] erofs (device loop3): failed to readdir of logical block 0 of nid 36 [ 894.682515][ T5805] Bluetooth: hci4: command tx timeout [ 895.391055][ T5805] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 895.408539][T17760] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 895.442547][T17760] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 895.488977][T17760] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 895.551679][T17760] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 896.017779][T17861] loop3: detected capacity change from 0 to 64 [ 896.161205][T17861] syz.3.5267: attempt to access beyond end of device [ 896.161205][T17861] loop3: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 896.404798][T17760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.575076][T17760] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.619160][T17865] loop8: detected capacity change from 0 to 512 [ 896.671174][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.678760][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.741021][T17865] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 896.758729][ T5805] Bluetooth: hci4: command tx timeout [ 896.779159][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.786665][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.874959][ T42] IPVS: starting estimator thread 0... [ 896.875869][T17865] EXT4-fs (loop8): 1 truncate cleaned up [ 896.888708][T17865] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 897.008954][T17874] IPVS: using max 240 ests per chain, 12000 per kthread [ 898.012499][T17865] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 898.204586][T11341] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.427048][T17760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 898.626218][T17899] usb usb3: selecting invalid altsetting 5 [ 898.947077][T17904] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5284'. [ 899.416978][T17912] loop0: detected capacity change from 0 to 256 [ 899.479556][ T5805] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 899.480964][T17912] exfat: Deprecated parameter 'utf8' [ 899.490936][ T5805] Bluetooth: hci3: Injecting HCI hardware error event [ 899.498808][T17912] exfat: Deprecated parameter 'utf8' [ 899.506923][T17912] exfat: Deprecated parameter 'utf8' [ 899.511572][ T5798] Bluetooth: hci3: hardware error 0x00 [ 899.514735][T17912] exfat: Deprecated parameter 'utf8' [ 899.749826][T17912] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xac5c0b1f, utbl_chksum : 0xe619d30d) [ 900.150717][T17760] veth0_vlan: entered promiscuous mode [ 900.267124][T17760] veth1_vlan: entered promiscuous mode [ 900.389118][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 900.590657][T17760] veth0_macvtap: entered promiscuous mode [ 900.667063][T17760] veth1_macvtap: entered promiscuous mode [ 900.841028][T17760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 900.915382][T17760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 901.006391][T11519] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.056525][ T4047] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.114533][ T4047] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.152711][ T4047] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.292614][T17936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5297'. [ 901.303081][T17936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5297'. [ 901.313541][T17936] netlink: 'syz.0.5297': attribute type 6 has an invalid length. [ 901.325821][T17936] netlink: 'syz.0.5297': attribute type 5 has an invalid length. [ 901.559308][ T5798] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 903.038473][T11117] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 903.234342][T11117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.246304][T11117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.257083][T11117] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 903.266552][T11117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.305020][T17963] loop0: detected capacity change from 0 to 512 [ 903.343883][T11117] usb 4-1: config 0 descriptor?? [ 903.355992][T17963] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 903.788457][T11117] samsung 0003:0419:0600.0035: unknown main item tag 0x3 [ 903.835978][T17969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5308'. [ 903.873136][T11117] samsung 0003:0419:0600.0035: hidraw0: USB HID v0.80 Device [HID 0419:0600] on usb-dummy_hcd.3-1/input0 [ 904.022683][ T9] usb 4-1: USB disconnect, device number 10 [ 904.023505][T17972] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5309'. [ 904.039972][T17972] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5309'. [ 904.926932][T17982] loop1: detected capacity change from 0 to 2048 [ 904.963128][T17982] ext2: Unknown parameter 'smackfsroot' [ 905.110807][T17987] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 905.117599][T17987] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 905.129282][T17987] vhci_hcd vhci_hcd.0: Device attached [ 905.319863][ T9] vhci_hcd: vhci_device speed not set [ 905.399549][ T9] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 905.499708][ T5852] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 905.506599][T17993] xt_bpf: check failed: parse error [ 905.659633][ T5852] usb 4-1: Using ep0 maxpacket: 8 [ 905.684916][ T5852] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 905.697791][ T5852] usb 4-1: config 0 has no interfaces? [ 905.771102][ T5852] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 905.781339][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.789836][ T5852] usb 4-1: Product: syz [ 905.794403][ T5852] usb 4-1: Manufacturer: syz [ 905.800457][ T5852] usb 4-1: SerialNumber: syz [ 905.823085][ T5852] usb 4-1: config 0 descriptor?? [ 906.070742][T17988] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 906.074306][T11117] usb 4-1: USB disconnect, device number 11 [ 906.086544][T11519] vhci_hcd: stop threads [ 906.091483][T11519] vhci_hcd: release socket [ 906.096241][T11519] vhci_hcd: disconnect device [ 906.426062][ T4047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 906.434506][ T4047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.587643][ T4047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 906.596234][ T4047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 907.266833][T18024] program syz.1.5327 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 907.646844][T18026] loop3: detected capacity change from 0 to 512 [ 907.821780][T18026] FAT-fs (loop3): error, clusters badly computed (1 != 0) [ 908.291548][T18040] syz_tun: entered promiscuous mode [ 908.305186][T18040] macsec2: entered allmulticast mode [ 908.311055][T18040] syz_tun: entered allmulticast mode [ 908.389278][T18040] syz_tun: left allmulticast mode [ 908.394694][T18040] syz_tun: left promiscuous mode [ 909.137559][T18051] netlink: 'syz.3.5341': attribute type 1 has an invalid length. [ 909.146203][T18051] nbd: error processing sock list [ 909.264818][T18056] loop4: detected capacity change from 0 to 256 [ 909.281316][T18056] exfat: Invalid uid '0x00000000ffffffff' [ 909.499702][T18053] loop1: detected capacity change from 0 to 4096 [ 910.079242][T18060] loop3: detected capacity change from 0 to 4096 [ 910.132671][T18060] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 910.508872][ T9] vhci_hcd: vhci_device speed not set [ 911.106101][T18085] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5357'. [ 911.509901][T18089] loop0: detected capacity change from 0 to 128 [ 911.540924][T18089] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 911.610409][T18095] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 911.617876][T18095] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 911.627425][T18095] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 911.634580][T18095] comedi comedi3: 8255: I/O port conflict (0xf0000,4) [ 911.644795][T18095] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 911.651852][T18095] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 911.658749][T18095] comedi comedi3: 8255: I/O port conflict (0x5c95238c,4) [ 911.666061][T18095] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 911.672961][T18095] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 911.685513][T18095] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 911.694207][T18095] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 911.704353][T18095] comedi comedi3: 8255: I/O port conflict (0x400e1c8,4) [ 911.712125][T18095] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 911.721089][T18095] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 911.727863][T18095] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 911.909999][T18089] FAT-fs (loop0): FAT read failed (blocknr 128) [ 912.519593][T18108] loop0: detected capacity change from 0 to 512 [ 912.559062][T18108] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 912.573284][T18110] loop3: detected capacity change from 0 to 256 [ 912.680402][T18108] EXT4-fs (loop0): 1 truncate cleaned up [ 912.688555][T18108] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 912.910805][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 912.910882][ T30] audit: type=1800 audit(1760230996.987:962): pid=18108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5367" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 913.355673][T17324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.618978][T18118] loop3: detected capacity change from 0 to 4096 [ 914.013350][T18133] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5379'. [ 915.808358][T11117] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 915.988796][T11117] usb 2-1: Using ep0 maxpacket: 16 [ 916.001846][T11117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 916.013541][T11117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 916.028359][T11117] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 916.037671][T11117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.065232][T11117] usb 2-1: config 0 descriptor?? [ 916.149675][T18172] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5398'. [ 916.178639][ T42] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 916.264960][T18175] loop3: detected capacity change from 0 to 16 [ 916.280187][T18175] erofs (device loop3): mounted with root inode @ nid 36. [ 916.359615][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 916.371091][ T42] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 916.384593][ T42] usb 5-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 916.399339][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.448455][ T30] audit: type=1800 audit(1760231000.497:963): pid=18175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5399" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 916.541658][ T42] usb 5-1: config 0 descriptor?? [ 916.549875][T18170] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 916.619881][T11117] hid-picolcd 0003:04D8:F002.0036: unknown main item tag 0x0 [ 916.627794][T11117] hid-picolcd 0003:04D8:F002.0036: unknown main item tag 0x0 [ 916.636560][T11117] hid-picolcd 0003:04D8:F002.0036: unknown main item tag 0x0 [ 916.646652][T11117] hid-picolcd 0003:04D8:F002.0036: unknown main item tag 0x0 [ 916.654648][T11117] hid-picolcd 0003:04D8:F002.0036: unknown main item tag 0x0 [ 916.662860][T11117] hid-picolcd 0003:04D8:F002.0036: unknown main item tag 0x0 [ 916.670955][T11117] hid-picolcd 0003:04D8:F002.0036: unknown main item tag 0x0 [ 916.678964][T11117] hid-picolcd 0003:04D8:F002.0036: unknown main item tag 0x0 [ 916.686810][T11117] hid-picolcd 0003:04D8:F002.0036: unknown main item tag 0x0 [ 916.703202][T11117] hid-picolcd 0003:04D8:F002.0036: unknown main item tag 0x0 [ 916.819892][T11117] hid-picolcd 0003:04D8:F002.0036: No report with id 0xf3 found [ 916.828415][T11117] hid-picolcd 0003:04D8:F002.0036: No report with id 0xf4 found [ 916.907565][T11117] usb 2-1: USB disconnect, device number 24 [ 917.011252][ T42] dragonrise 0003:0079:0011.0037: item fetching failed at offset 3/5 [ 917.037008][ T42] dragonrise 0003:0079:0011.0037: parse failed [ 917.043991][ T42] dragonrise 0003:0079:0011.0037: probe with driver dragonrise failed with error -22 [ 917.239283][T11117] usb 5-1: USB disconnect, device number 14 [ 917.441477][T18187] loop0: detected capacity change from 0 to 512 [ 917.494573][T18187] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.5406: casefold flag without casefold feature [ 917.509217][T18187] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.5406: couldn't read orphan inode 15 (err -117) [ 917.536843][T18187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 917.893659][T17324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 919.375050][T18210] loop4: detected capacity change from 0 to 2048 [ 919.489206][T18210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 919.507940][T18214] loop3: detected capacity change from 0 to 764 [ 919.629330][T18210] EXT4-fs error (device loop4): ext4_ext_precache:649: inode #2: comm syz.4.5414: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 919.749030][T18210] EXT4-fs (loop4): Remounting filesystem read-only [ 919.826521][T18222] loop8: detected capacity change from 0 to 2048 [ 919.934683][T18222] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 919.953270][T17760] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.150669][T11341] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.343082][T18246] loop8: detected capacity change from 0 to 1024 [ 921.382485][T18246] EXT4-fs: Ignoring removed nomblk_io_submit option [ 921.496868][T18250] loop4: detected capacity change from 0 to 256 [ 921.603708][T18246] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 921.700558][T18250] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 921.777951][T11341] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.560584][T18268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5439'. [ 923.538900][T11117] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 923.608389][T18288] loop4: detected capacity change from 0 to 4096 [ 923.754069][T11117] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 923.767917][T11117] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 923.779415][T11117] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 923.788531][T18288] ntfs3(loop4): ino=1a, mi_enum_attr [ 923.790019][T11117] usb 9-1: config 220 has no interface number 2 [ 923.801799][T11117] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 923.815504][T11117] usb 9-1: config 220 interface 0 has no altsetting 0 [ 923.822646][T11117] usb 9-1: config 220 interface 76 has no altsetting 0 [ 923.830422][T11117] usb 9-1: config 220 interface 1 has no altsetting 0 [ 923.910863][T18290] loop3: detected capacity change from 0 to 64 [ 924.025966][T11117] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 924.035801][T11117] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.045419][T11117] usb 9-1: Product: syz [ 924.050065][T11117] usb 9-1: Manufacturer: syz [ 924.054911][T11117] usb 9-1: SerialNumber: syz [ 924.382136][T11117] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 924.391439][T11117] uvcvideo 9-1:220.0: No valid video chain found. [ 924.398456][T11117] usb 9-1: selecting invalid altsetting 0 [ 924.457973][T11117] usb 9-1: selecting invalid altsetting 0 [ 924.465649][T11117] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 924.502257][T11117] usb 9-1: USB disconnect, device number 12 [ 925.126803][T11701] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 925.227613][T18309] loop0: detected capacity change from 0 to 64 [ 925.269651][T18313] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5462'. [ 925.304857][ T30] audit: type=1800 audit(1760231009.377:964): pid=18309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5459" name="file1" dev="loop0" ino=22 res=0 errno=0 [ 925.350903][T11701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 925.362617][T11701] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 925.372217][T11701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.422782][T11701] usb 4-1: config 0 descriptor?? [ 925.430791][T18306] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 925.586293][T18317] veth1_macvtap: vlans aren't supported yet for dev_uc|mc_add() [ 925.888026][T11701] hid_parser_main: 2 callbacks suppressed [ 925.894391][T11701] hid-udraw 0003:20D6:CB17.0038: unknown main item tag 0x0 [ 925.902718][T11701] hid-udraw 0003:20D6:CB17.0038: unknown main item tag 0x0 [ 925.919322][T11701] hid-udraw 0003:20D6:CB17.0038: item fetching failed at offset 3/5 [ 925.946840][T18319] loop0: detected capacity change from 0 to 2048 [ 925.956745][T18319] EXT4-fs: Ignoring removed bh option [ 925.984371][T11701] hid-udraw 0003:20D6:CB17.0038: parse failed [ 925.991273][T11701] hid-udraw 0003:20D6:CB17.0038: probe with driver hid-udraw failed with error -22 [ 926.070859][T18319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 926.095321][T11117] usb 4-1: USB disconnect, device number 12 [ 926.351135][T17324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.110180][T18342] netlink: 'syz.3.5473': attribute type 2 has an invalid length. [ 927.399447][ T5798] Bluetooth: hci4: command tx timeout [ 927.503345][T18346] loop8: detected capacity change from 0 to 2048 [ 927.608843][T18349] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 927.698702][T18346] CPU: 0 UID: 0 PID: 18346 Comm: syz.8.5475 Not tainted syzkaller #0 PREEMPT(none) [ 927.698847][T18346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 927.698933][T18346] Call Trace: [ 927.698992][T18346] [ 927.699042][T18346] __dump_stack+0x26/0x30 [ 927.699204][T18346] dump_stack_lvl+0x1df/0x270 [ 927.699368][T18346] dump_stack+0x1e/0x25 [ 927.699512][T18346] nilfs_btree_do_lookup+0x1638/0x18b0 [ 927.699730][T18346] nilfs_btree_lookup_contig+0x112/0x13f0 [ 927.699874][T18346] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 927.700024][T18346] ? kmsan_get_metadata+0xfb/0x160 [ 927.700159][T18346] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 927.700370][T18346] ? kmsan_get_metadata+0xfb/0x160 [ 927.700528][T18346] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 927.700680][T18346] ? __pfx_nilfs_btree_lookup_contig+0x10/0x10 [ 927.700826][T18346] nilfs_bmap_lookup_contig+0x83/0x240 [ 927.700970][T18346] nilfs_get_block+0x1bb/0xc40 [ 927.701089][T18346] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 927.701260][T18346] ? __pfx_nilfs_get_block+0x10/0x10 [ 927.701398][T18346] do_mpage_readpage+0xb30/0x2a00 [ 927.701644][T18346] mpage_readahead+0x442/0x840 [ 927.701817][T18346] ? __pfx_nilfs_get_block+0x10/0x10 [ 927.701965][T18346] ? __pfx_nilfs_readahead+0x10/0x10 [ 927.702086][T18346] nilfs_readahead+0x25/0x30 [ 927.702200][T18346] read_pages+0x15c/0xe30 [ 927.702355][T18346] ? kmsan_get_metadata+0xfb/0x160 [ 927.702494][T18346] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 927.702649][T18346] page_cache_ra_unbounded+0xc76/0xfb0 [ 927.702842][T18346] page_cache_ra_order+0x13ec/0x1650 [ 927.702975][T18346] ? trace_raw_output_file_check_and_advance_wb_err+0x3f1/0x410 [ 927.703163][T18346] ? filter_irq_stacks+0x49/0x190 [ 927.703378][T18346] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 927.703550][T18346] page_cache_sync_ra+0x10a2/0x1610 [ 927.703722][T18346] filemap_get_pages+0xcb3/0x3ce0 [ 927.703912][T18346] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 927.704117][T18346] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 927.704268][T18346] filemap_read+0x5d2/0x2300 [ 927.704411][T18346] ? g4x_hdmi_init+0xad0/0x1420 [ 927.704558][T18346] ? kmsan_get_metadata+0xfb/0x160 [ 927.704695][T18346] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 927.704844][T18346] ? blk_mq_request_issue_directly+0x8e3/0x9e0 [ 927.705008][T18346] ? kmsan_get_metadata+0xfb/0x160 [ 927.705151][T18346] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 927.705313][T18346] ? blk_mq_issue_direct+0xb40/0x1110 [ 927.705476][T18346] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 927.705638][T18346] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 927.705792][T18346] ? kmsan_get_metadata+0xfb/0x160 [ 927.705943][T18346] generic_file_read_iter+0x10c/0xae0 [ 927.706091][T18346] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 927.706291][T18346] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 927.706439][T18346] ? kmsan_get_metadata+0xfb/0x160 [ 927.706580][T18346] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 927.706715][T18346] ? __pfx_generic_file_read_iter+0x10/0x10 [ 927.706856][T18346] __kernel_read+0x7e1/0xe20 [ 927.707070][T18346] integrity_kernel_read+0x77/0x90 [ 927.707212][T18346] ima_calc_file_hash+0x17cb/0x4050 [ 927.707390][T18346] ? is_module_text_address+0x1f4/0x240 [ 927.707703][T18346] ? __do_fast_syscall_32+0xe1/0x150 [ 927.707916][T18346] ? filter_irq_stacks+0x49/0x190 [ 927.708119][T18346] ? kmsan_get_metadata+0xfb/0x160 [ 927.708272][T18346] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 927.708480][T18346] ? kmsan_get_metadata+0xfb/0x160 [ 927.708652][T18346] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 927.708802][T18346] ? generic_fillattr+0x5e2/0x8d0 [ 927.708952][T18346] ? kmsan_get_metadata+0xfb/0x160 [ 927.709087][T18346] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 927.709224][T18346] ? kmsan_get_metadata+0xfb/0x160 [ 927.709359][T18346] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 927.709585][T18346] ? kmsan_get_metadata+0xfb/0x160 [ 927.709722][T18346] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 927.709873][T18346] ima_collect_measurement+0x45d/0xe50 [ 927.710073][T18346] ? is_bad_inode+0x2d/0x80 [ 927.710235][T18346] ? vfs_getxattr_alloc+0x1b0/0xc10 [ 927.710460][T18346] process_measurement+0x2d1a/0x40e0 [ 927.710690][T18346] ? security_file_post_open+0xbf/0x530 [ 927.710870][T18346] ? __msan_warning+0x1b/0x30 [ 927.710989][T18346] ? filter_irq_stacks+0x13f/0x190 [ 927.711178][T18346] ? stack_depot_save_flags+0x35/0x7b0 [ 927.711322][T18346] ? kmsan_get_metadata+0xfb/0x160 [ 927.711463][T18346] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 927.711625][T18346] ? kmsan_get_metadata+0xfb/0x160 [ 927.711766][T18346] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 927.711919][T18346] ima_file_check+0x8e/0xd0 [ 927.712072][T18346] security_file_post_open+0xbf/0x530 [ 927.712278][T18346] path_openat+0x5ac3/0x6760 [ 927.712553][T18346] do_filp_open+0x280/0x660 [ 927.712777][T18346] do_sys_openat2+0x1bb/0x2f0 [ 927.712953][T18346] __ia32_compat_sys_openat+0x238/0x300 [ 927.713145][T18346] ia32_sys_call+0x3210/0x4310 [ 927.713320][T18346] __do_fast_syscall_32+0xb0/0x150 [ 927.713527][T18346] ? irqentry_exit_to_user_mode+0x7f/0xa0 [ 927.713710][T18346] do_fast_syscall_32+0x38/0x80 [ 927.713890][T18346] do_SYSENTER_32+0x1f/0x30 [ 927.714059][T18346] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 927.714234][T18346] RIP: 0023:0xf7f54539 [ 927.714355][T18346] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 927.714468][T18346] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 927.714605][T18346] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000180 [ 927.714697][T18346] RDX: 000000000014b442 RSI: 0000000000000000 RDI: 0000000000000000 [ 927.714782][T18346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 927.714859][T18346] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 927.714942][T18346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 927.715056][T18346] [ 928.320384][T18346] NILFS (loop8): btree level mismatch (ino=16): 1 != 3 [ 928.327604][T18346] NILFS error (device loop8): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 928.374187][T18351] loop3: detected capacity change from 0 to 1024 [ 928.466802][T18348] loop1: detected capacity change from 0 to 4096 [ 928.499343][T18351] hfsplus: invalid length 32517 has been corrected to 255 [ 928.525152][T18346] Remounting filesystem read-only [ 928.538785][ T30] audit: type=1800 audit(1760231012.617:965): pid=18346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.5475" name="file2" dev="loop8" ino=16 res=0 errno=0 [ 928.569741][T18353] CPU: 0 UID: 0 PID: 18353 Comm: syz.8.5475 Not tainted syzkaller #0 PREEMPT(none) [ 928.569889][T18353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 928.569970][T18353] Call Trace: [ 928.570019][T18353] [ 928.570068][T18353] __dump_stack+0x26/0x30 [ 928.570238][T18353] dump_stack_lvl+0x1df/0x270 [ 928.570396][T18353] dump_stack+0x1e/0x25 [ 928.570534][T18353] nilfs_btree_last_key+0x6b3/0x9a0 [ 928.570726][T18353] ? __pfx_nilfs_btree_last_key+0x10/0x10 [ 928.570873][T18353] nilfs_bmap_last_key+0x75/0x230 [ 928.571013][T18353] nilfs_truncate_bmap+0xd7/0x5b0 [ 928.571167][T18353] nilfs_truncate+0x261/0x580 [ 928.571295][T18353] ? unmap_mapping_range+0xc5/0x150 [ 928.571495][T18353] nilfs_setattr+0x373/0x420 [ 928.571651][T18353] ? __pfx_nilfs_setattr+0x10/0x10 [ 928.571788][T18353] notify_change+0x1ada/0x1bf0 [ 928.571989][T18353] do_truncate+0x28f/0x310 [ 928.572135][T18353] path_openat+0x5d85/0x6760 [ 928.572327][T18353] ? do_SYSENTER_32+0x1f/0x30 [ 928.572504][T18353] ? kmsan_get_metadata+0xfb/0x160 [ 928.572650][T18353] ? do_sys_openat2+0x1bb/0x2f0 [ 928.572814][T18353] ? filter_irq_stacks+0x13f/0x190 [ 928.573015][T18353] ? kmsan_get_metadata+0xfb/0x160 [ 928.573177][T18353] do_filp_open+0x280/0x660 [ 928.573408][T18353] do_sys_openat2+0x1bb/0x2f0 [ 928.573577][T18353] __ia32_sys_creat+0xe1/0x150 [ 928.573749][T18353] ia32_sys_call+0x365c/0x4310 [ 928.573929][T18353] __do_fast_syscall_32+0xb0/0x150 [ 928.574117][T18353] do_fast_syscall_32+0x38/0x80 [ 928.574300][T18353] do_SYSENTER_32+0x1f/0x30 [ 928.574472][T18353] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 928.574633][T18353] RIP: 0023:0xf7f54539 [ 928.574739][T18353] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 928.574858][T18353] RSP: 002b:00000000f542555c EFLAGS: 00000206 ORIG_RAX: 0000000000000008 [ 928.574985][T18353] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 0000000000000124 [ 928.575081][T18353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 928.575163][T18353] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 928.575252][T18353] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 928.575338][T18353] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 928.575452][T18353] [ 928.818314][T18353] NILFS (loop8): btree level mismatch (ino=16): 1 != 3 [ 928.825654][T18353] NILFS error (device loop8): nilfs_bmap_last_key: broken bmap (inode number=16) [ 928.840266][T18353] NILFS (loop8): error -5 truncating bmap (ino=16) [ 929.035051][T11519] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.242877][T11519] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.273816][T11341] NILFS (loop8): disposed unprocessed dirty file(s) when detaching log writer [ 929.443427][T11519] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.540187][T18348] ntfs3(loop1): failed to convert "0080" to cp860 [ 929.569594][T18348] ntfs3(loop1): failed to convert name for inode 1e. [ 929.601452][T11519] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.604263][T18348] ntfs3(loop1): ino=1f, mi_enum_attr [ 929.854648][T11519] bridge_slave_1: left allmulticast mode [ 929.860764][T11519] bridge_slave_1: left promiscuous mode [ 929.867300][T11519] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.899087][T11519] bridge_slave_0: left allmulticast mode [ 929.912996][T11519] bridge_slave_0: left promiscuous mode [ 929.919865][T11519] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.580713][T11519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 930.649482][T11519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 930.695037][T11519] bond0 (unregistering): Released all slaves [ 931.584357][ T5805] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 931.608998][ T5805] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 931.618533][ T5805] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 931.633246][ T5805] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 931.651757][ T5805] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 931.817353][T11519] hsr_slave_0: left promiscuous mode [ 931.847306][T11519] hsr_slave_1: left promiscuous mode [ 931.863125][T11519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 931.872285][T11519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 931.911251][T11519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 931.919139][T11519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 931.960521][T11519] veth1_macvtap: left promiscuous mode [ 931.966365][T11519] veth0_macvtap: left promiscuous mode [ 931.972658][T11519] veth1_vlan: left promiscuous mode [ 931.979555][T11519] veth0_vlan: left promiscuous mode [ 932.187994][T18385] loop1: detected capacity change from 0 to 512 [ 932.233957][T18385] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 932.302110][T18384] loop0: detected capacity change from 0 to 512 [ 932.346360][T18385] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 932.445062][T18385] EXT4-fs (loop1): orphan cleanup on readonly fs [ 932.452324][T18385] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.5494: bad orphan inode 267 [ 932.548350][T18384] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 932.550742][T18385] EXT4-fs (loop1): Remounting filesystem read-only [ 932.561553][T18384] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 932.590762][T18385] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 932.788463][T11519] team0 (unregistering): Port device team_slave_1 removed [ 932.859742][T11519] team0 (unregistering): Port device team_slave_0 removed [ 932.957938][T18385] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.5494: dx entry: limit 0 != root limit 125 [ 932.970723][T18385] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.5494: Corrupt directory, running e2fsck is recommended [ 933.118440][T17324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 933.610929][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 933.719448][ T5805] Bluetooth: hci4: command tx timeout [ 934.758988][T18410] loop8: detected capacity change from 0 to 64 [ 935.019222][T18374] chnl_net:caif_netlink_parms(): no params data found [ 935.410352][T18421] loop0: detected capacity change from 0 to 1024 [ 935.477911][T18426] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 935.485881][T18426] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 935.492884][T18426] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 935.499893][T18426] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 935.507218][T18426] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 935.514231][T18426] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 935.521469][T18426] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 935.802386][ T5805] Bluetooth: hci4: command tx timeout [ 936.108368][T18374] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.116019][T18374] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.124182][T18374] bridge_slave_0: entered allmulticast mode [ 936.133733][T18374] bridge_slave_0: entered promiscuous mode [ 936.212193][T18374] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.219986][T18374] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.222204][T18436] loop1: detected capacity change from 0 to 256 [ 936.227799][T18374] bridge_slave_1: entered allmulticast mode [ 936.243782][T18374] bridge_slave_1: entered promiscuous mode [ 936.465735][T18436] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d) [ 936.492382][T18436] exFAT-fs (loop1): error, data size is invalid(17179870234) [ 936.500268][T18436] exFAT-fs (loop1): Filesystem has been set read-only [ 936.521308][T18374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.630488][T18374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 936.921398][T18374] team0: Port device team_slave_0 added [ 936.981060][T18374] team0: Port device team_slave_1 added [ 937.105270][T18451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5521'. [ 937.106907][T18450] loop1: detected capacity change from 0 to 1024 [ 937.204483][T18374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 937.211859][T18374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.238395][T18374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 937.269578][T18374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 937.281516][T18374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.309386][T18374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 937.337883][T18450] hfsplus: bad catalog entry type [ 937.563267][ T49] hfsplus: b-tree write err: -5, ino 4 [ 937.618771][T11117] kernel read not supported for file /vga_arbiter (pid: 11117 comm: kworker/1:0) [ 937.684169][T18458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5524'. [ 937.736973][T18374] hsr_slave_0: entered promiscuous mode [ 937.747315][T18374] hsr_slave_1: entered promiscuous mode [ 937.756368][T18374] debugfs: 'hsr0' already exists in 'hsr' [ 937.762482][T18374] Cannot create hsr debugfs directory [ 937.785289][T18458] erspan0: entered promiscuous mode [ 937.816187][T18458] erspan0: left promiscuous mode [ 937.836722][T18460] loop8: detected capacity change from 0 to 128 [ 937.879518][ T5805] Bluetooth: hci4: command tx timeout [ 937.886699][T18460] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 938.108954][T18460] overlayfs: upper fs needs to support d_type. [ 938.166152][T18460] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 938.174460][T18460] overlayfs: failed to set xattr on upper [ 938.180545][T18460] overlayfs: ...falling back to redirect_dir=nofollow. [ 938.187566][T18460] overlayfs: ...falling back to index=off. [ 938.193785][T18460] overlayfs: ...falling back to uuid=null. [ 938.651104][T11341] UDF-fs: error (device loop8): udf_read_inode: (ino 114) failed !bh [ 938.694106][T11341] UDF-fs: error (device loop8): udf_read_inode: (ino 114) failed !bh [ 939.412807][T18374] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 939.491363][T18374] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 939.567638][T18374] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 939.637138][T18374] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 939.704703][T18479] loop0: detected capacity change from 0 to 64 [ 939.964535][ T5805] Bluetooth: hci4: command tx timeout [ 940.399106][T18374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 940.473337][T18374] 8021q: adding VLAN 0 to HW filter on device team0 [ 940.517656][ T3743] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.525336][ T3743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 940.597089][ T3743] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.604691][ T3743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 941.688348][T11701] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 941.799224][T18494] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 941.826293][T18494] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 941.843580][T18494] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 941.860273][T11701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 941.872009][T11701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 941.882967][T11701] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 941.896333][T11701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.912470][T11701] usb 4-1: config 0 descriptor?? [ 941.922383][T18494] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 941.949284][T18494] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 942.007430][T18374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 942.662866][T11701] hid-u2fzero 0003:10C4:8ACF.0039: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.3-1/input0 [ 942.677471][T11701] hid-u2fzero 0003:10C4:8ACF.0039: U2F Zero LED initialised [ 942.685445][T11701] hid-u2fzero 0003:10C4:8ACF.0039: U2F Zero RNG initialised [ 942.869050][T18504] loop0: detected capacity change from 0 to 256 [ 942.877576][T11701] usb 4-1: USB disconnect, device number 13 [ 943.535560][T18514] loop0: detected capacity change from 0 to 512 [ 943.576020][T18514] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 943.659802][T18514] EXT4-fs (loop0): 1 truncate cleaned up [ 943.689550][T18514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 943.846534][T18492] chnl_net:caif_netlink_parms(): no params data found [ 943.868871][T18519] loop1: detected capacity change from 0 to 256 [ 943.914723][T18522] program syz.3.5548 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 943.971264][T17324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.023398][T18519] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 944.068585][T18494] Bluetooth: hci0: command tx timeout [ 944.228520][T18374] veth0_vlan: entered promiscuous mode [ 944.306317][T18519] exFAT-fs (loop1): error, exfat_zeroed_cluster: out of range(sect:184 len:8) [ 944.315663][T18519] exFAT-fs (loop1): Filesystem has been set read-only [ 944.328977][T18374] veth1_vlan: entered promiscuous mode [ 944.396229][T18525] loop0: detected capacity change from 0 to 512 [ 944.500682][T18525] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 944.567404][T18527] loop3: detected capacity change from 0 to 64 [ 944.575339][T18374] veth0_macvtap: entered promiscuous mode [ 944.602113][T18525] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.5549: bad orphan inode 15 [ 944.622622][T18374] veth1_macvtap: entered promiscuous mode [ 944.692405][T18374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 944.740026][T18525] ext4_test_bit(bit=14, block=18) = 1 [ 944.745628][T18525] is_bad_inode(inode)=0 [ 944.754967][T18525] NEXT_ORPHAN(inode)=1023 [ 944.761735][T18525] max_ino=32 [ 944.765094][T18525] i_nlink=0 [ 944.791252][T18374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 944.842438][ T14] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.882704][ T14] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.892108][T18525] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2967: inode #15: comm syz.0.5549: corrupted xattr block 19: bad e_name length [ 944.968758][ T14] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.980801][T18525] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 944.981425][ T14] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.992338][T18525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 945.013008][T18525] ext2 filesystem being mounted at /97/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 945.419962][T18492] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.427618][T18492] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.443058][T18492] bridge_slave_0: entered allmulticast mode [ 945.455383][T18492] bridge_slave_0: entered promiscuous mode [ 945.541363][T17324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 945.576047][T18492] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.583717][T18492] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.592007][T18492] bridge_slave_1: entered allmulticast mode [ 945.601949][T18492] bridge_slave_1: entered promiscuous mode [ 945.715501][T18533] loop1: detected capacity change from 0 to 4096 [ 945.842958][T18538] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 945.843556][T18533] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 945.887642][T18533] NILFS (loop1): mounting fs with errors [ 945.899877][T18492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.930363][T18492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.960370][T18536] loop3: detected capacity change from 0 to 4096 [ 946.106695][T18542] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 946.121016][T18494] Bluetooth: hci0: command tx timeout [ 946.226704][T18492] team0: Port device team_slave_0 added [ 946.252957][T18492] team0: Port device team_slave_1 added [ 946.446329][T18492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 946.453728][T18492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.483036][T18492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.578864][T18492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.586030][T18492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.617539][T18492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 947.167527][T18492] hsr_slave_0: entered promiscuous mode [ 947.178008][T18492] hsr_slave_1: entered promiscuous mode [ 947.187163][T18492] debugfs: 'hsr0' already exists in 'hsr' [ 947.193460][T18492] Cannot create hsr debugfs directory [ 947.255880][T18552] comedi comedi3: 8255: I/O port conflict (0x4004f27,4) [ 947.263599][T18552] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 947.270612][T18552] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 947.277313][T18552] comedi comedi3: 8255: I/O port conflict (0x100401,4) [ 947.284869][T18552] comedi comedi3: 8255: I/O port conflict (0x21,4) [ 947.291879][T18552] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 947.298721][T18552] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 947.306136][T18552] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 947.604969][T18555] loop0: detected capacity change from 0 to 256 [ 947.655708][T18555] exfat: Deprecated parameter 'namecase' [ 947.662271][T18555] exfat: Deprecated parameter 'utf8' [ 947.809405][T18555] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 948.203697][T18494] Bluetooth: hci0: command tx timeout [ 948.770479][T18568] netlink: 'syz.3.5562': attribute type 46 has an invalid length. [ 948.898985][ T3475] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.979481][T18492] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 949.077132][ T3475] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.173245][T18492] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 949.290825][ T3475] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.375662][T18492] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 949.476160][ T3475] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.540742][T18492] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 949.832075][ T3475] bridge_slave_1: left allmulticast mode [ 949.837968][ T3475] bridge_slave_1: left promiscuous mode [ 949.844955][ T3475] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.865598][ T3475] bridge_slave_0: left allmulticast mode [ 949.876724][ T3475] bridge_slave_0: left promiscuous mode [ 949.883573][ T3475] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.308869][T18494] Bluetooth: hci0: command tx timeout [ 950.432329][ T3475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 950.471721][ T3475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 950.505079][ T3475] bond0 (unregistering): Released all slaves [ 951.434300][T18492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 951.563388][T18584] loop1: detected capacity change from 0 to 4096 [ 951.728958][ T3475] hsr_slave_0: left promiscuous mode [ 951.815402][T18584] NILFS (loop1): invalid segment: Checksum error in segment payload [ 951.840057][T18584] NILFS (loop1): trying rollback from an earlier position [ 951.870055][ T3475] hsr_slave_1: left promiscuous mode [ 951.878017][ T3475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 951.886079][ T3475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 951.964201][T18584] NILFS (loop1): recovery complete [ 951.966448][ T3475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 951.977250][ T3475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 951.991663][ T5805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 952.009768][ T3475] veth1_macvtap: left promiscuous mode [ 952.015504][ T3475] veth0_macvtap: left promiscuous mode [ 952.016153][ T5805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 952.025434][ T3475] veth1_vlan: left promiscuous mode [ 952.038259][ T3475] veth0_vlan: left promiscuous mode [ 952.046504][T18591] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 952.069766][ T5805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 952.155781][ T5805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 952.170529][ T5805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 952.673905][ T3475] team0 (unregistering): Port device team_slave_1 removed [ 952.727519][ T3475] team0 (unregistering): Port device team_slave_0 removed [ 953.099127][T18492] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.200631][ T4933] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.208282][ T4933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.394600][ T4933] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.402153][ T4933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.602103][T18598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5571'. [ 953.633983][T18581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.644650][T18581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.930061][T18581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.940811][T18581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.289836][T18494] Bluetooth: hci2: command tx timeout [ 954.602678][T18605] loop3: detected capacity change from 0 to 64 [ 954.875335][T18605] Trying to free block not in datazone [ 955.365970][T18589] chnl_net:caif_netlink_parms(): no params data found [ 955.917968][T18492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 956.109769][T18625] sctp: [Deprecated]: syz.3.5578 (pid 18625) Use of int in max_burst socket option deprecated. [ 956.109769][T18625] Use struct sctp_assoc_value instead [ 956.359137][T18494] Bluetooth: hci2: command tx timeout [ 956.507493][T18589] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.521639][T18589] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.541927][T18589] bridge_slave_0: entered allmulticast mode [ 956.560277][T18589] bridge_slave_0: entered promiscuous mode [ 956.583926][T18589] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.594975][T18589] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.603425][T18589] bridge_slave_1: entered allmulticast mode [ 956.615595][T18589] bridge_slave_1: entered promiscuous mode [ 956.827875][T18589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 956.875808][T18589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 956.989921][T18635] loop3: detected capacity change from 0 to 256 [ 957.087134][T18589] team0: Port device team_slave_0 added [ 957.151562][T18635] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 957.159963][T18589] team0: Port device team_slave_1 added [ 957.333916][ T30] audit: type=1326 audit(1760231041.397:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18636 comm="syz.5.5582" exe="/root/syz-executor" sig=31 arch=40000003 syscall=20 compat=1 ip=0xf703d539 code=0x0 [ 957.402367][T18589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 957.409853][T18589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 957.436368][T18589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 957.563607][T18589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 957.570970][T18589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 957.597746][T18589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 957.797629][T18643] loop3: detected capacity change from 0 to 512 [ 957.866290][T18589] hsr_slave_0: entered promiscuous mode [ 957.876677][T18589] hsr_slave_1: entered promiscuous mode [ 957.886359][T18589] debugfs: 'hsr0' already exists in 'hsr' [ 957.892416][T18589] Cannot create hsr debugfs directory [ 958.059745][T18643] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 958.071244][T18643] FAT-fs (loop3): Filesystem has been set read-only [ 958.127561][T18645] 9pnet_rdma: rdma_create_trans (18645): problem binding to privport: 13 [ 958.440115][T18494] Bluetooth: hci2: command tx timeout [ 958.753822][T18492] veth0_vlan: entered promiscuous mode [ 958.812341][T18589] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.961798][T18589] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.051010][T18492] veth1_vlan: entered promiscuous mode [ 959.130202][T18589] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.264129][T18589] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.705719][T18492] veth0_macvtap: entered promiscuous mode [ 959.720344][T18589] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 959.775532][T18492] veth1_macvtap: entered promiscuous mode [ 959.818780][T18589] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 959.875362][T18589] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 959.953527][T18589] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 960.057699][T18492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 960.157748][T18492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 960.290876][T17534] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.377820][T17534] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.387057][T17534] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.405697][T17534] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.524443][T18494] Bluetooth: hci2: command tx timeout [ 960.659337][T18669] loop3: detected capacity change from 0 to 128 [ 960.823016][T18669] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 960.944292][T18669] ext4 filesystem being mounted at /303/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 961.022719][T18669] EXT4-fs (loop3): shut down requested (2) [ 961.111826][T18589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 961.313549][T15293] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 961.371345][T18589] 8021q: adding VLAN 0 to HW filter on device team0 [ 961.467055][T18581] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.474631][T18581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.601497][T18581] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.609148][T18581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 961.837790][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 962.557176][T18692] loop1: detected capacity change from 0 to 512 [ 962.675844][T18689] loop5: detected capacity change from 0 to 4096 [ 962.713243][T18692] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.5603: corrupted in-inode xattr: invalid ea_ino [ 962.810919][T18699] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 962.823126][T18692] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.5603: couldn't read orphan inode 15 (err -117) [ 962.905145][T18692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 963.351143][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.618801][T18589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 964.047148][T18589] veth0_vlan: entered promiscuous mode [ 964.173938][T18589] veth1_vlan: entered promiscuous mode [ 964.506983][T18718] loop5: detected capacity change from 0 to 512 [ 964.541976][T18589] veth0_macvtap: entered promiscuous mode [ 964.551357][T18718] EXT4-fs: Ignoring removed i_version option [ 964.565146][T18718] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 964.595562][T18589] veth1_macvtap: entered promiscuous mode [ 964.716890][T18718] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 964.833625][T18589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 964.847669][T18726] block nbd3: NBD_DISCONNECT [ 964.953397][T18589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 965.058623][ T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.111277][ T14] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.218453][ T14] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.227486][ T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.374489][T18374] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 966.168446][T18746] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 966.175198][T18746] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 966.186418][T18746] vhci_hcd vhci_hcd.0: Device attached [ 966.388852][ T42] vhci_hcd: vhci_device speed not set [ 966.476410][ T42] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 966.533133][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.544046][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.552517][T11117] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 966.704316][ T3743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.712883][ T3743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.753390][T11117] usb 4-1: config 0 has no interfaces? [ 966.762640][T11117] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 966.779372][T11117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.883509][T11117] usb 4-1: config 0 descriptor?? [ 967.185648][T18747] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 967.204055][ T4047] vhci_hcd: stop threads [ 967.208860][ T4047] vhci_hcd: release socket [ 967.213534][ T4047] vhci_hcd: disconnect device [ 967.237274][ T9] usb 4-1: USB disconnect, device number 14 [ 968.137250][T18769] loop5: detected capacity change from 0 to 4096 [ 968.877104][T18787] loop3: detected capacity change from 0 to 16 [ 968.878534][T18785] loop1: detected capacity change from 0 to 2048 [ 968.915265][T18785] EXT4-fs: Ignoring removed bh option [ 968.940529][T18787] erofs (device loop3): mounted with root inode @ nid 36. [ 969.027475][T18785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 969.393618][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 969.907009][T18800] loop5: detected capacity change from 0 to 1024 [ 969.921042][T18494] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 970.089553][T18800] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 970.321547][T17534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.329849][T17534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.517541][ T3743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.529120][ T3743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.643920][ T42] vhci_hcd: vhci_device speed not set [ 972.166052][T18841] loop7: detected capacity change from 0 to 64 [ 972.774856][ T42] kernel write not supported for file /dsp (pid: 42 comm: kworker/1:1) [ 972.886058][T18847] netlink: 'syz.2.5652': attribute type 1 has an invalid length. [ 973.231885][T18851] loop7: detected capacity change from 0 to 256 [ 973.370962][T18853] loop3: detected capacity change from 0 to 128 [ 973.511015][T18857] loop1: detected capacity change from 0 to 128 [ 973.852443][T18860] loop5: detected capacity change from 0 to 512 [ 974.061704][T18860] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.5658: casefold flag without casefold feature [ 974.128882][T18860] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.5658: couldn't read orphan inode 15 (err -117) [ 974.180401][T18860] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 974.181633][T18870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5661'. [ 974.205516][ T42] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 974.307078][T18872] Bluetooth: MGMT ver 1.23 [ 974.372195][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 974.387748][ T42] usb 4-1: unable to get BOS descriptor or descriptor too short [ 974.423267][ T42] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 974.431880][ T42] usb 4-1: config 4 has no interface number 0 [ 974.440966][ T42] usb 4-1: config 4 interface 30 has no altsetting 0 [ 974.481483][T18374] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 974.528878][ T42] usb 4-1: string descriptor 0 read error: -22 [ 974.535800][ T42] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 974.547790][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.697767][ T42] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 974.705169][ T42] dw2102: su3000_power_ctrl: 1, initialized 0 [ 974.714269][ T42] dvb-usb: bulk message failed: -22 (2/0) [ 974.730832][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 974.746087][ T42] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 974.769456][ T42] usb 4-1: media controller created [ 974.780750][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 974.786832][ T42] dw2102: i2c transfer failed. [ 974.794554][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 974.800612][ T42] dw2102: i2c transfer failed. [ 974.805549][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 974.814040][ T42] dw2102: i2c transfer failed. [ 974.819172][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 974.825182][ T42] dw2102: i2c transfer failed. [ 974.832709][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 974.839698][ T42] dw2102: i2c transfer failed. [ 974.844635][ T42] dvb-usb: bulk message failed: -22 (6/0) [ 974.853146][ T42] dw2102: i2c transfer failed. [ 974.870773][ T42] dvb-usb: MAC address: 02:02:02:02:02:02 [ 974.909912][T18864] dvb-usb: bulk message failed: -22 (3/0) [ 974.915964][T18864] dw2102: i2c transfer failed. [ 974.922257][T18864] dvb-usb: bulk message failed: -22 (3/0) [ 974.928457][T18864] dw2102: i2c transfer failed. [ 975.030938][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 975.184469][ T42] dvb-usb: bulk message failed: -22 (3/0) [ 975.193204][ T42] dw2102: command 0x0e transfer failed. [ 975.199212][ T42] dvb-usb: bulk message failed: -22 (3/0) [ 975.205115][ T42] dw2102: command 0x0e transfer failed. [ 975.344166][T18874] loop2: detected capacity change from 0 to 4096 [ 975.529851][T18874] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 975.529874][ T42] dvb-usb: bulk message failed: -22 (3/0) [ 975.529988][T18874] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 975.536646][ T42] dw2102: command 0x0e transfer failed. [ 975.536708][ T42] dvb-usb: bulk message failed: -22 (3/0) [ 975.567313][ T42] dw2102: command 0x0e transfer failed. [ 975.585271][ T42] dvb-usb: bulk message failed: -22 (1/0) [ 975.597132][ T42] dw2102: command 0x51 transfer failed. [ 975.604082][ T42] dvb-usb: bulk message failed: -22 (5/0) [ 975.612674][ T42] dw2102: i2c probe for address 0x68 failed. [ 975.618993][ T42] dvb-usb: bulk message failed: -22 (5/0) [ 975.624900][ T42] dw2102: i2c probe for address 0x69 failed. [ 975.633832][ T42] dvb-usb: bulk message failed: -22 (5/0) [ 975.639961][ T42] dw2102: i2c probe for address 0x6a failed. [ 975.646095][ T42] dw2102: probing for demodulator failed. Is the external power switched on? [ 975.657606][ T42] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 975.739327][T18885] xt_socket: unknown flags 0xe4 [ 976.103971][T17534] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 976.161172][T18589] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 976.167941][T18589] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 976.176288][T18589] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 976.186249][ T3510] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 976.310217][T18892] team0: Device ipip0 is of different type [ 976.334331][T18893] loop3: detected capacity change from 0 to 128 [ 976.373735][T18494] Bluetooth: hci0: command tx timeout [ 976.421369][ T42] rc_core: IR keymap rc-tt-1500 not found [ 976.427288][ T42] Registered IR keymap rc-empty [ 976.433806][ T42] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 976.449526][ T42] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input36 [ 976.526504][T18895] loop5: detected capacity change from 0 to 64 [ 976.573822][ T42] dvb-usb: schedule remote query interval to 250 msecs. [ 976.583835][ T42] dw2102: su3000_power_ctrl: 0, initialized 1 [ 976.590617][ T42] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 976.672860][ T42] usb 4-1: USB disconnect, device number 15 [ 977.071224][T18899] loop2: detected capacity change from 0 to 256 [ 977.092460][ T42] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 977.261382][T18899] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a371bfb, utbl_chksum : 0xe619d30d) [ 977.285239][T17534] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.296429][T17534] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 977.454763][T17534] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.465643][T17534] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 977.605705][T17534] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.616514][T17534] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 977.658904][T18910] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5678'. [ 977.787343][T17534] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.801574][T17534] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 978.281673][T18917] loop3: detected capacity change from 0 to 8 [ 978.299614][T17534] bridge_slave_1: left allmulticast mode [ 978.305614][T17534] bridge_slave_1: left promiscuous mode [ 978.314838][T17534] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.364588][T17534] bridge_slave_0: left allmulticast mode [ 978.373210][T17534] bridge_slave_0: left promiscuous mode [ 978.382714][T17534] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.462006][T18918] loop1: detected capacity change from 0 to 256 [ 978.494211][T18917] SQUASHFS error: Failed to read block 0x2d7: -5 [ 978.501102][T18917] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 978.507636][T18918] exfat: Deprecated parameter 'namecase' [ 978.689989][T18918] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 979.092896][T18922] loop5: detected capacity change from 0 to 128 [ 979.127349][T17534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 979.214297][T17534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 979.277762][T17534] bond0 (unregistering): Released all slaves [ 979.477004][T17534] tipc: Disabling bearer [ 979.495189][T17534] tipc: Left network mode [ 979.622147][T18928] max out of range [ 979.978912][T18933] loop5: detected capacity change from 0 to 128 [ 980.132025][T18933] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 980.261299][T18933] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 980.262588][T18938] loop3: detected capacity change from 0 to 256 [ 980.371168][T18938] exfat: Deprecated parameter 'utf8' [ 980.543886][T18938] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 980.636869][T17534] hsr_slave_0: left promiscuous mode [ 980.687804][T17534] hsr_slave_1: left promiscuous mode [ 980.700787][T17534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 980.708592][T17534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 980.766685][T17534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 980.786483][T17534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 980.835311][T17534] veth1_macvtap: left promiscuous mode [ 980.841236][T17534] veth0_macvtap: left promiscuous mode [ 980.847865][T17534] veth1_vlan: left promiscuous mode [ 980.856052][T17534] veth0_vlan: left promiscuous mode [ 980.866445][T18374] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 981.680036][ C1] sd 0:0:1:0: [sda] tag#2094 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 981.690934][ C1] sd 0:0:1:0: [sda] tag#2094 CDB: Write(6) 0a 00 00 00 05 00 00 00 02 00 00 00 [ 982.444045][T17534] team0 (unregistering): Port device team_slave_1 removed [ 982.554932][T17534] team0 (unregistering): Port device team_slave_0 removed [ 983.807752][T18967] loop2: detected capacity change from 0 to 512 [ 983.921042][T18967] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 984.067630][T18969] loop3: detected capacity change from 0 to 128 [ 984.100779][T18969] EXT4-fs: Ignoring removed nomblk_io_submit option [ 984.116419][T18969] EXT4-fs (loop3): Test dummy encryption mode enabled [ 985.039749][T18967] EXT4-fs (loop2): 1 truncate cleaned up [ 985.047646][T18967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 985.064230][T18969] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 985.102836][T18969] ext4 filesystem being mounted at /327/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 985.580400][T15293] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 985.790711][T18589] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.316760][T18982] loop3: detected capacity change from 0 to 512 [ 986.324189][ T30] audit: type=1326 audit(1760231070.377:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18979 comm="syz.5.5713" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 986.490601][T18982] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 986.521975][ T30] audit: type=1326 audit(1760231070.467:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18979 comm="syz.5.5713" exe="/root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 986.547655][ T30] audit: type=1326 audit(1760231070.467:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18979 comm="syz.5.5713" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 986.571247][ T30] audit: type=1326 audit(1760231070.467:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18979 comm="syz.5.5713" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 986.820424][T18982] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.5712: invalid block [ 986.903321][T18982] EXT4-fs (loop3): Remounting filesystem read-only [ 987.001237][T18982] EXT4-fs (loop3): 2 truncates cleaned up [ 987.009401][T18982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 987.127990][T17534] IPVS: stop unused estimator thread 0... [ 987.374890][T15293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.561319][T18999] loop7: detected capacity change from 0 to 1024 [ 987.594477][T18999] EXT4-fs: Ignoring removed bh option [ 987.621209][T18999] EXT4-fs (loop7): stripe (36) is not aligned with cluster size (16), stripe is disabled [ 987.700551][T18999] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 988.023784][T18999] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 988.256164][T18492] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.313342][T19012] loop3: detected capacity change from 0 to 64 [ 988.583471][T19018] loop2: detected capacity change from 0 to 1024 [ 988.711042][T19018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 988.877634][T19018] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 989.257069][T18589] EXT4-fs error (device loop2): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /17/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=0, size=80 fake=0 [ 989.359280][T18589] EXT4-fs error (device loop2): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /17/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=0, size=80 fake=0 [ 989.383570][T18589] EXT4-fs error (device loop2): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=60 fake=0 [ 989.428424][T18589] EXT4-fs warning (device loop2): empty_inline_dir:1767: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 989.504972][T18589] EXT4-fs error (device loop2): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /17/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=0, size=80 fake=0 [ 989.605198][T18589] EXT4-fs error (device loop2): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /17/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=0, size=80 fake=0 [ 989.839013][T18589] EXT4-fs error (device loop2): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=60 fake=0 [ 989.840300][T18589] EXT4-fs warning (device loop2): empty_inline_dir:1767: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 989.841479][T18589] EXT4-fs error (device loop2): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /17/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=0, size=80 fake=0 [ 989.860752][T18589] EXT4-fs error (device loop2): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /17/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=0, size=80 fake=0 [ 989.862602][T18589] EXT4-fs error (device loop2): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=60 fake=0 [ 989.865954][T18589] EXT4-fs warning (device loop2): empty_inline_dir:1767: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 989.867235][T18589] EXT4-fs error (device loop2): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /17/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=0, size=80 fake=0 [ 989.874267][T18589] EXT4-fs warning (device loop2): empty_inline_dir:1767: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 989.884082][T18589] EXT4-fs warning (device loop2): empty_inline_dir:1767: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 990.074938][T18589] EXT4-fs warning (device loop2): empty_inline_dir:1767: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 990.080610][T18589] EXT4-fs warning (device loop2): empty_inline_dir:1767: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 990.089884][T18589] EXT4-fs warning (device loop2): empty_inline_dir:1767: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 990.135603][T18589] EXT4-fs warning (device loop2): empty_inline_dir:1767: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 990.140846][T18589] EXT4-fs warning (device loop2): empty_inline_dir:1767: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 990.280364][T19041] loop1: detected capacity change from 0 to 1024 [ 990.822659][ T4933] hfsplus: b-tree write err: -5, ino 4 [ 991.595386][T19059] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5746'. [ 991.674190][T19054] loop5: detected capacity change from 0 to 4096 [ 991.697367][T19054] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 991.926297][T19062] loop3: detected capacity change from 0 to 512 [ 991.945872][T19062] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 992.013230][T19054] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 992.033001][T19054] ntfs3(loop5): Failed to load $Extend (-22). [ 992.039641][T19054] ntfs3(loop5): Failed to initialize $Extend. [ 992.065891][T19062] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 992.085725][T19066] loop1: detected capacity change from 0 to 128 [ 992.139968][T19066] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 992.204627][T19066] ext4 filesystem being mounted at /1222/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 992.783703][ T4047] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.831797][T18589] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.951460][T19072] loop3: detected capacity change from 0 to 1024 [ 992.975015][ T4047] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.103616][ T4047] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.104045][T19072] hfsplus: bad catalog entry type [ 993.194551][ T5795] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 993.303702][ T4047] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.377468][ T3475] hfsplus: b-tree write err: -5, ino 4 [ 993.563667][ T4047] bridge_slave_1: left allmulticast mode [ 993.569687][ T4047] bridge_slave_1: left promiscuous mode [ 993.576267][ T4047] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.657090][ T4047] bridge_slave_0: left allmulticast mode [ 993.663195][ T4047] bridge_slave_0: left promiscuous mode [ 993.670148][ T4047] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.127977][ T4047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 994.147045][ T4047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 994.171872][ T4047] bond0 (unregistering): Released all slaves [ 994.501779][ T4047] hsr_slave_0: left promiscuous mode [ 994.536896][ T4047] hsr_slave_1: left promiscuous mode [ 994.545123][ T4047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 994.555464][ T4047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 994.632849][ T4047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 994.640863][ T4047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 994.691902][ T4047] veth1_macvtap: left promiscuous mode [ 994.697829][ T4047] veth0_macvtap: left promiscuous mode [ 994.704062][ T4047] veth1_vlan: left promiscuous mode [ 994.712153][ T4047] veth0_vlan: left promiscuous mode [ 995.691260][T19088] loop5: detected capacity change from 0 to 64 [ 995.894724][ T4047] team0 (unregistering): Port device team_slave_1 removed [ 995.968760][ T5805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 995.971073][ T4047] team0 (unregistering): Port device team_slave_0 removed [ 996.023514][ T5805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 996.033462][ T5805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 996.051016][ T5805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 996.074331][ T5805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 996.926015][T19097] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5762'. [ 997.204847][T19103] loop3: detected capacity change from 0 to 128 [ 997.224712][T19100] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5763'. [ 997.234470][T19100] netlink: 'syz.7.5763': attribute type 5 has an invalid length. [ 997.303423][T19104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5765'. [ 997.335719][T19103] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 997.364516][T19103] ext4 filesystem being mounted at /341/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 997.416703][T19109] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5766'. [ 997.556758][T19091] chnl_net:caif_netlink_parms(): no params data found [ 998.279600][ T5805] Bluetooth: hci2: command tx timeout [ 998.338686][T15293] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 998.760926][T19091] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.772188][T19091] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.780197][T19091] bridge_slave_0: entered allmulticast mode [ 998.792494][T19091] bridge_slave_0: entered promiscuous mode [ 998.813863][T19091] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.835273][T19091] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.843218][T19091] bridge_slave_1: entered allmulticast mode [ 998.855237][T19091] bridge_slave_1: entered promiscuous mode [ 998.978887][T19091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 999.034275][T19091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 999.316551][T19091] team0: Port device team_slave_0 added [ 999.361441][T19091] team0: Port device team_slave_1 added [ 999.557105][T19091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 999.566238][T19091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 999.593045][T19091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 999.686038][T19091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 999.693499][T19091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 999.722338][T19091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 999.982352][T19091] hsr_slave_0: entered promiscuous mode [ 999.992925][T19091] hsr_slave_1: entered promiscuous mode [ 1000.005342][T19091] debugfs: 'hsr0' already exists in 'hsr' [ 1000.011474][T19091] Cannot create hsr debugfs directory [ 1000.054893][T19141] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5779'. [ 1000.330691][T19144] [U] [ 1000.333696][T19144] [U] [ 1000.336647][T19144] [U] [ 1000.339593][T19144] [U] [ 1000.342538][T19144] [U] [ 1000.345476][T19144] [U] [ 1000.348413][T19144] [U] [ 1000.351346][T19144] [U] [ 1000.366690][ T5805] Bluetooth: hci2: command tx timeout [ 1000.392735][T19144] [U] [ 1000.395732][T19144] [U] [ 1000.398663][T19144] [U] [ 1000.406771][T19143] [U] [ 1000.747777][T19152] loop5: detected capacity change from 0 to 64 [ 1001.113248][T19091] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.126381][T19091] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1001.137349][T19091] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 1001.245234][T19156] loop3: detected capacity change from 0 to 512 [ 1001.286264][T19156] EXT4-fs: Ignoring removed oldalloc option [ 1001.317818][T19156] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 1001.349214][T19156] EXT4-fs (loop3): 1 truncate cleaned up [ 1001.357164][T19156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1001.364180][T19091] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.393446][T19091] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1001.410454][T19091] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 1001.547724][T15293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1001.611607][T19091] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.622446][T19091] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1001.633275][T19091] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 1001.866130][T19091] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.877212][T19091] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1001.888986][T19091] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 1002.323239][T19091] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1002.345633][T19091] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1002.409773][T19091] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1002.441487][ T5805] Bluetooth: hci2: command tx timeout [ 1002.479921][T19091] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1002.547366][T19170] loop3: detected capacity change from 0 to 164 [ 1002.687817][T19170] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 1003.422413][T19091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1003.491245][T19183] loop3: detected capacity change from 0 to 512 [ 1003.564185][T19183] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1003.587391][T19091] 8021q: adding VLAN 0 to HW filter on device team0 [ 1003.649186][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.656686][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1003.707337][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.715001][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1003.792522][T19183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1003.808880][T19183] ext4 filesystem being mounted at /349/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1003.847995][T19192] loop5: detected capacity change from 0 to 2048 [ 1003.964451][T19192] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1004.021407][ T30] audit: type=1800 audit(1760231088.067:971): pid=19183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5799" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 1004.144130][T15293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1004.296635][T19195] loop7: detected capacity change from 0 to 256 [ 1004.521477][ T5805] Bluetooth: hci2: command tx timeout [ 1004.634861][T19201] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 1004.642792][T19201] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1004.649704][T19201] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1004.659060][T19201] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 1004.665750][T19201] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1004.674174][T19201] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 1004.681881][T19201] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1004.688941][T19201] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1004.695617][T19201] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 1004.703110][T19201] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1004.710011][T19201] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1004.717006][T19195] FAT-fs (loop7): Directory bread(block 64) failed [ 1004.723893][T19195] FAT-fs (loop7): Directory bread(block 65) failed [ 1004.731835][T19195] FAT-fs (loop7): Directory bread(block 66) failed [ 1004.738754][T19195] FAT-fs (loop7): Directory bread(block 67) failed [ 1004.745608][T19195] FAT-fs (loop7): Directory bread(block 68) failed [ 1004.752480][T19195] FAT-fs (loop7): Directory bread(block 69) failed [ 1004.762341][T19195] FAT-fs (loop7): Directory bread(block 70) failed [ 1004.770002][T19195] FAT-fs (loop7): Directory bread(block 71) failed [ 1004.776867][T19195] FAT-fs (loop7): Directory bread(block 72) failed [ 1004.783716][T19195] FAT-fs (loop7): Directory bread(block 73) failed [ 1005.309046][T19091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1006.491362][T19228] loop5: detected capacity change from 0 to 128 [ 1006.666668][T19228] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1006.700896][T19228] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1007.239493][T19091] veth0_vlan: entered promiscuous mode [ 1007.359827][T19091] veth1_vlan: entered promiscuous mode [ 1007.614520][T19244] loop3: detected capacity change from 0 to 256 [ 1007.694512][T19247] loop1: detected capacity change from 0 to 8 [ 1007.705172][T18374] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1007.804188][T19091] veth0_macvtap: entered promiscuous mode [ 1007.871325][T19091] veth1_macvtap: entered promiscuous mode [ 1007.889222][T19247] SQUASHFS error: Failed to read block 0xdfa: -5 [ 1007.895752][T19247] SQUASHFS error: Unable to read metadata cache entry [dfa] [ 1007.896486][T19244] FAT-fs (loop3): Directory bread(block 64) failed [ 1007.912994][T19244] FAT-fs (loop3): Directory bread(block 65) failed [ 1007.920149][T19244] FAT-fs (loop3): Directory bread(block 66) failed [ 1007.926864][T19244] FAT-fs (loop3): Directory bread(block 67) failed [ 1007.935808][T19247] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1007.939221][T19247] SQUASHFS error: Failed to read block 0x4de: -5 [ 1007.939792][T19247] SQUASHFS error: Failed to read block 0x4de: -5 [ 1007.940352][T19247] SQUASHFS error: Failed to read block 0x4de: -5 [ 1007.940918][T19247] SQUASHFS error: Failed to read block 0x4de: -5 [ 1007.941482][T19247] SQUASHFS error: Failed to read block 0x4de: -5 [ 1007.942041][T19247] SQUASHFS error: Failed to read block 0x4de: -5 [ 1007.942604][T19247] SQUASHFS error: Failed to read block 0x4de: -5 [ 1007.943165][T19247] SQUASHFS error: Failed to read block 0x4de: -5 [ 1007.943865][T19247] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1007.987045][ T30] audit: type=1800 audit(1760231092.017:972): pid=19247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5823" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 1007.994980][T19244] FAT-fs (loop3): Directory bread(block 68) failed [ 1008.064507][T19244] FAT-fs (loop3): Directory bread(block 69) failed [ 1008.071592][T19244] FAT-fs (loop3): Directory bread(block 70) failed [ 1008.080854][T19244] FAT-fs (loop3): Directory bread(block 71) failed [ 1008.087730][T19244] FAT-fs (loop3): Directory bread(block 72) failed [ 1008.094701][T19244] FAT-fs (loop3): Directory bread(block 73) failed [ 1008.257171][T19091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1008.376593][T19091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1008.497159][ T3475] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.515532][T19252] loop7: detected capacity change from 0 to 256 [ 1008.552774][ T3475] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.593353][ T3475] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.642196][ T3475] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.663863][T19254] loop1: detected capacity change from 0 to 256 [ 1008.720933][T19252] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 1008.949960][T19254] FAT-fs (loop1): Directory bread(block 64) failed [ 1008.959479][T19254] FAT-fs (loop1): Directory bread(block 65) failed [ 1008.966349][T19254] FAT-fs (loop1): Directory bread(block 66) failed [ 1008.974322][T19254] FAT-fs (loop1): Directory bread(block 67) failed [ 1008.982028][T19254] FAT-fs (loop1): Directory bread(block 68) failed [ 1008.989011][T19254] FAT-fs (loop1): Directory bread(block 69) failed [ 1008.995844][T19254] FAT-fs (loop1): Directory bread(block 70) failed [ 1009.002837][T19254] FAT-fs (loop1): Directory bread(block 71) failed [ 1009.009863][T19254] FAT-fs (loop1): Directory bread(block 72) failed [ 1009.016584][T19254] FAT-fs (loop1): Directory bread(block 73) failed [ 1010.281731][T16484] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1010.466476][T16484] usb 4-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 1010.476411][T16484] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.510408][T16484] usb 4-1: config 0 descriptor?? [ 1011.034448][T16484] cypress 0003:04B4:0001.003A: hidraw0: USB HID v0.06 Device [HID 04b4:0001] on usb-dummy_hcd.3-1/input0 [ 1011.199778][ T5852] usb 4-1: USB disconnect, device number 16 [ 1011.558954][T19300] loop7: detected capacity change from 0 to 1024 [ 1011.858962][T18581] hfsplus: b-tree write err: -5, ino 4 [ 1012.325630][T19314] loop1: detected capacity change from 0 to 64 [ 1013.231010][T18581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.239333][T18581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.489478][ T3475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.497503][ T3475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.915813][T19339] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5858'. [ 1014.530265][T19345] loop1: detected capacity change from 0 to 4096 [ 1014.571659][T19345] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1014.847650][T19345] ------------[ cut here ]------------ [ 1014.853611][T19345] WARNING: CPU: 0 PID: 19345 at fs/ntfs3/frecord.c:3030 ni_rename+0x20f/0x220 [ 1014.863160][T19345] Modules linked in: [ 1014.867300][T19345] CPU: 0 UID: 0 PID: 19345 Comm: syz.1.5861 Not tainted syzkaller #0 PREEMPT(none) [ 1014.877161][T19345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1014.887924][T19345] RIP: 0010:ni_rename+0x20f/0x220 [ 1014.893416][T19345] Code: c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ca 23 6e 0c cc 8b 7d c8 41 89 c5 e8 5e 66 8e fe 44 89 e8 85 c0 74 a7 e8 92 95 e8 fd 90 <0f> 0b 90 eb be 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 [ 1014.917163][T19345] RSP: 0018:ffff88804b007a00 EFLAGS: 00010287 [ 1014.928417][T19345] RAX: ffffffff840e8eee RBX: ffff888115b28ba0 RCX: 0000000000080000 [ 1014.936773][T19345] RDX: ffffc90008c03000 RSI: 0000000000000ddc RDI: 0000000000000ddd [ 1014.945160][T19345] RBP: ffff88804b007a58 R08: ffffea000000000f R09: 0000000000000000 [ 1014.953568][T19345] R10: ffff888237d235f0 R11: ffffffff82875384 R12: 0000000000000000 [ 1014.961942][T19345] R13: 0000000000000000 R14: 00000000fffffffe R15: 0000000000000000 [ 1014.970308][T19345] FS: 0000000000000000(0000) GS:ffff8881aaf7a000(0063) knlGS:00000000f543db40 [ 1014.979591][T19345] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1014.986379][T19345] CR2: 00000000f540c528 CR3: 000000002d2f2000 CR4: 00000000003526f0 [ 1014.994788][T19345] Call Trace: [ 1015.002300][T19345] [ 1015.005425][T19345] ntfs_rename+0xdd2/0x1290 [ 1015.011541][T19345] ? __pfx_ntfs_rename+0x10/0x10 [ 1015.016783][T19345] vfs_rename+0x1f3d/0x2510 [ 1015.021745][T19345] do_renameat2+0x1433/0x19d0 [ 1015.026713][T19345] __ia32_sys_renameat2+0x15d/0x210 [ 1015.032360][T19345] ia32_sys_call+0x3490/0x4310 [ 1015.037408][T19345] __do_fast_syscall_32+0xb0/0x150 [ 1015.042971][T19345] ? irqentry_exit_to_user_mode+0x7f/0xa0 [ 1015.049192][T19345] do_fast_syscall_32+0x38/0x80 [ 1015.054326][T19345] do_SYSENTER_32+0x1f/0x30 [ 1015.059235][T19345] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1015.065822][T19345] RIP: 0023:0xf704d539 [ 1015.070261][T19345] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1015.090374][T19345] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000161 [ 1015.102747][T19345] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140 [ 1015.112218][T19345] RDX: 00000000ffffff9c RSI: 00000000800004c0 RDI: 0000000000000000 [ 1015.120562][T19345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1015.128887][T19345] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1015.137040][T19345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1015.145464][T19345] [ 1015.148839][T19345] ---[ end trace 0000000000000000 ]--- [ 1016.011931][T19372] netlink: 180 bytes leftover after parsing attributes in process `syz.7.5873'. [ 1016.025353][T19372] xt_time: unknown flags 0xf4 [ 1017.007825][T19386] loop5: detected capacity change from 0 to 256 [ 1017.058276][T19386] exfat: Deprecated parameter 'namecase' [ 1017.064321][T19386] exfat: Deprecated parameter 'utf8' [ 1017.218800][T19394] loop9: detected capacity change from 0 to 256 [ 1017.219609][T19386] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d) [ 1017.391075][T19394] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1018.116043][ T30] audit: type=1326 audit(1760231102.177:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19403 comm="syz.3.5890" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1018.243112][ T30] audit: type=1326 audit(1760231102.227:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19403 comm="syz.3.5890" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1018.265828][ T30] audit: type=1326 audit(1760231102.277:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19403 comm="syz.3.5890" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1018.291843][ T30] audit: type=1326 audit(1760231102.277:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19403 comm="syz.3.5890" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1018.315379][ T30] audit: type=1326 audit(1760231102.277:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19403 comm="syz.3.5890" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1018.338434][ T30] audit: type=1326 audit(1760231102.277:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19403 comm="syz.3.5890" exe="/root/syz-executor" sig=0 arch=40000003 syscall=298 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1018.361006][ T30] audit: type=1326 audit(1760231102.277:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19403 comm="syz.3.5890" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1018.386226][ T30] audit: type=1326 audit(1760231102.277:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19403 comm="syz.3.5890" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1018.885287][T19418] team_slave_0: entered promiscuous mode [ 1018.891358][T19418] team_slave_1: entered promiscuous mode [ 1018.901959][T19418] macsec1: entered promiscuous mode [ 1018.907354][T19418] team0: entered promiscuous mode [ 1018.921227][T19418] team0: Device macsec1 is already an upper device of the team interface [ 1018.981912][T19418] team0: left promiscuous mode [ 1018.996145][T19418] team_slave_0: left promiscuous mode [ 1019.001881][T19418] team_slave_1: left promiscuous mode [ 1019.546729][T19425] loop5: detected capacity change from 0 to 1024 [ 1019.769736][T19425] hfsplus: bad catalog entry type [ 1020.049083][ T14] hfsplus: b-tree write err: -5, ino 4 [ 1020.231185][T19439] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5904'. [ 1020.317895][T19443] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1020.642427][T19449] loop7: detected capacity change from 0 to 256 [ 1020.669653][T19449] exfat: Deprecated parameter 'namecase' [ 1020.754091][T19452] netlink: 'syz.5.5911': attribute type 3 has an invalid length. [ 1020.765751][T19449] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1021.492492][T19467] loop3: detected capacity change from 0 to 512 [ 1021.680398][T19467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1021.694469][T19467] ext4 filesystem being mounted at /374/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1021.815042][T19472] netlink: 332 bytes leftover after parsing attributes in process `syz.5.5920'. [ 1021.827314][T19472] netlink: 'syz.5.5920': attribute type 9 has an invalid length. [ 1021.842095][T19472] netlink: 108 bytes leftover after parsing attributes in process `syz.5.5920'. [ 1021.853718][T19472] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5920'. [ 1021.877639][T15293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1022.162845][T19476] bond1: invalid ARP target 0.0.0.0 specified for addition [ 1022.180100][T19476] bond1: option arp_ip_target: invalid value (0) [ 1022.219173][T19476] bond1 (unregistering): Released all slaves [ 1022.536785][T19487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1022.545786][T19487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1022.588446][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1022.614741][T19487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1022.622537][T19487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1022.789442][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1022.810954][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.821655][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1022.858921][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=f1.40 [ 1022.868590][ T9] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1022.877139][ T9] usb 6-1: Product: syz [ 1022.884838][ T9] usb 6-1: Manufacturer: syz [ 1023.045269][T19493] loop7: detected capacity change from 0 to 2048 [ 1023.124246][ T9] usb 6-1: bad CDC descriptors [ 1023.157821][T19493] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1023.159581][ T9] usb 6-1: USB disconnect, device number 9 [ 1023.261083][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1024.248286][T19512] loop7: detected capacity change from 0 to 256 [ 1024.409802][T19507] loop3: detected capacity change from 0 to 4096 [ 1024.486255][T19512] FAT-fs (loop7): Directory bread(block 64) failed [ 1024.496352][T19512] FAT-fs (loop7): Directory bread(block 65) failed [ 1024.503576][T19512] FAT-fs (loop7): Directory bread(block 66) failed [ 1024.512918][T19512] FAT-fs (loop7): Directory bread(block 67) failed [ 1024.529199][T19512] FAT-fs (loop7): Directory bread(block 68) failed [ 1024.535953][T19512] FAT-fs (loop7): Directory bread(block 69) failed [ 1024.548317][T19512] FAT-fs (loop7): Directory bread(block 70) failed [ 1024.555056][T19512] FAT-fs (loop7): Directory bread(block 71) failed [ 1024.564637][T19512] FAT-fs (loop7): Directory bread(block 72) failed [ 1024.571656][T19512] FAT-fs (loop7): Directory bread(block 73) failed [ 1024.604878][T19515] loop1: detected capacity change from 0 to 65 [ 1024.676149][T19515] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 1025.521712][T19524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1025.529888][T19524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1025.564590][T19524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1025.572301][T19524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1025.697794][T19529] loop1: detected capacity change from 0 to 64 [ 1025.781534][T19529] hfs: bad catalog entry type 65535 [ 1026.321867][T19535] loop5: detected capacity change from 0 to 4096 [ 1026.351192][T19535] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 1026.383995][ T30] audit: type=1400 audit(1760231110.457:981): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F04 [ 1026.456079][T19541] loop7: detected capacity change from 0 to 512 [ 1026.491741][T19538] loop1: detected capacity change from 0 to 1024 [ 1026.662557][T19535] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 1027.052907][ T3475] hfsplus: b-tree write err: -5, ino 4 [ 1027.541085][T19556] loop3: detected capacity change from 0 to 512 [ 1027.583767][T19556] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1027.691010][T19556] EXT4-fs (loop3): 1 truncate cleaned up [ 1027.707401][T19556] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1027.921665][T19563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1027.929670][T19563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1027.992149][T19563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1028.010551][T19563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1028.077653][T15293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1028.459716][T19568] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5962'. [ 1028.471623][T19568] IPVS: Error connecting to the multicast addr [ 1028.854999][T19574] ALSA: mixer_oss: invalid OSS volume 'DIG¨TAL1' [ 1029.060715][T19578] loop5: detected capacity change from 0 to 1024 [ 1029.093600][T19578] EXT4-fs: inline encryption not supported [ 1029.100089][T19578] EXT4-fs: Ignoring removed i_version option [ 1029.154567][T19578] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1029.313861][T19578] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.5967: lblock 2 mapped to illegal pblock 2 (length 1) [ 1029.352408][T19578] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 1029.361313][T19578] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.5967: lblock 0 mapped to illegal pblock 48 (length 1) [ 1029.377096][T19578] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 1029.386466][T19578] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.5967: Failed to acquire dquot type 0 [ 1029.433132][T19578] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 1029.457120][T19589] sp0: Synchronizing with TNC [ 1029.483660][T19578] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.5967: mark_inode_dirty error [ 1029.515532][T19578] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1029.526471][T19578] EXT4-fs (loop5): 1 orphan inode deleted [ 1029.534453][T19578] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1029.563792][ T3475] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 1029.583685][ T3475] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 1029.593643][ T3475] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:10: Failed to release dquot type 0 [ 1029.984293][T19594] loop1: detected capacity change from 0 to 16 [ 1030.011186][T18374] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1030.030067][T19594] erofs (device loop1): mounted with root inode @ nid 36. [ 1030.086379][T18374] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1030.109198][T18374] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 1030.122387][T18374] EXT4-fs error (device loop5): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 1030.449312][T19601] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1030.456173][T19601] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1030.484157][T19601] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1030.491033][T19601] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1030.504865][T19601] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1030.511711][T19601] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1030.566685][T19601] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1030.573675][T19601] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1030.609453][T19601] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1030.613664][T19604] loop7: detected capacity change from 0 to 512 [ 1030.616343][T19601] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1030.690839][T16484] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1030.704976][T19604] EXT4-fs error (device loop7): ext4_iget_extra_inode:5075: inode #15: comm syz.7.5978: corrupted in-inode xattr: invalid ea_ino [ 1030.856831][T16484] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1030.882642][T16484] usb 6-1: not running at top speed; connect to a high speed hub [ 1030.917254][T16484] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1030.929395][T16484] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1030.940108][T16484] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1031.033901][T16484] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1031.043781][T16484] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.054633][T16484] usb 6-1: Product: syz [ 1031.059352][T16484] usb 6-1: Manufacturer: syz [ 1031.064140][T16484] usb 6-1: SerialNumber: syz [ 1031.125018][T19604] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.5978: couldn't read orphan inode 15 (err -117) [ 1031.190399][T19604] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1031.403120][T19610] loop1: detected capacity change from 0 to 512 [ 1031.464234][T19610] EXT4-fs: Ignoring removed orlov option [ 1031.502433][T19610] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1031.544839][T19610] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 1031.594865][T19610] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.5980: corrupted in-inode xattr: e_value size too large [ 1031.703014][T19610] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.5980: couldn't read orphan inode 15 (err -117) [ 1031.705281][T16484] usb 6-1: 0:2 : does not exist [ 1031.763203][T19610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1031.777110][T18492] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1031.949237][ T9] usb 6-1: USB disconnect, device number 10 [ 1032.147018][T19617] loop7: detected capacity change from 0 to 512 [ 1032.165251][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1032.277747][T19617] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1032.291284][T19617] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1032.484472][T19622] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 1032.492244][T19622] macsec1: entered allmulticast mode [ 1032.497820][T19622] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 1032.624121][T19622] netdevsim netdevsim9 netdevsim0: left allmulticast mode [ 1032.631744][T19622] netdevsim netdevsim9 netdevsim0: left promiscuous mode [ 1032.775046][T18492] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1032.992351][T19627] netlink: 'syz.5.5986': attribute type 2 has an invalid length. [ 1033.906836][T19642] loop1: detected capacity change from 0 to 128 [ 1033.984847][T19642] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1034.019258][T19642] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1034.382232][ T4933] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1034.636334][T19654] loop9: detected capacity change from 0 to 256 [ 1034.686075][T19654] exfat: Deprecated parameter 'utf8' [ 1034.695205][T19654] exfat: Deprecated parameter 'namecase' [ 1034.728295][T19659] loop7: detected capacity change from 0 to 512 [ 1034.776465][T19659] vfat: Unknown parameter 'nnonumtail' [ 1034.851751][T19654] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1035.948888][T19680] loop9: detected capacity change from 0 to 512 [ 1036.172169][T19680] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1036.382137][T19680] EXT4-fs: Ignoring removed orlov option [ 1036.388656][T19680] EXT4-fs: can't change dax mount option while remounting [ 1036.571907][T19091] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1036.783206][T19696] can0: slcan on ptm0. [ 1036.915690][T19695] can0 (unregistered): slcan off ptm0. [ 1037.603828][T19715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6027'. [ 1038.157788][T19728] loop1: detected capacity change from 0 to 8 [ 1039.021628][T19743] loop5: detected capacity change from 0 to 64 [ 1039.099503][T19745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6039'. [ 1039.523521][ T30] audit: type=1326 audit(1760231123.597:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19748 comm="syz.9.6042" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f25539 code=0x0 [ 1040.070070][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1040.137365][T19766] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6049'. [ 1040.261322][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1040.283650][ T5805] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1040.299717][ T5805] Bluetooth: hci0: Injecting HCI hardware error event [ 1040.302888][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.318568][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.319437][ T5805] Bluetooth: hci0: hardware error 0x00 [ 1040.328671][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1040.328889][ T9] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1040.329025][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.463958][ T9] usb 2-1: config 0 descriptor?? [ 1040.939724][ T9] steelseries 0003:1038:1410.003B: unknown main item tag 0x0 [ 1040.947605][ T9] steelseries 0003:1038:1410.003B: unbalanced collection at end of report description [ 1041.025281][ T9] steelseries 0003:1038:1410.003B: parse failed [ 1041.036889][ T9] steelseries 0003:1038:1410.003B: probe with driver steelseries failed with error -22 [ 1041.152815][T19780] loop5: detected capacity change from 0 to 512 [ 1041.209999][ T9] usb 2-1: USB disconnect, device number 25 [ 1041.228930][T19780] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1041.265792][T16484] IPVS: starting estimator thread 0... [ 1041.309370][T19780] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 1041.361256][T19783] IPVS: using max 240 ests per chain, 12000 per kthread [ 1041.379426][T19780] System zones: 0-2, 18-18, 34-34 [ 1041.430960][T19780] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1041.444512][T19780] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1041.875695][T18374] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1041.909937][ T9] kernel write not supported for file /adsp1 (pid: 9 comm: kworker/0:0) [ 1042.256867][T19801] loop1: detected capacity change from 0 to 128 [ 1042.265262][T19802] loop5: detected capacity change from 0 to 256 [ 1042.291444][T19802] exfat: Deprecated parameter 'namecase' [ 1042.297629][T19802] exfat: Deprecated parameter 'utf8' [ 1042.399408][T19802] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x3f800a9b, utbl_chksum : 0xe619d30d) [ 1042.439062][ T5805] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1043.176127][T19816] loop5: detected capacity change from 0 to 1024 [ 1043.354583][T19820] loop1: detected capacity change from 0 to 22 [ 1043.396975][T19820] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1043.543020][ T14] hfsplus: b-tree write err: -5, ino 4 [ 1043.552596][ T30] audit: type=1326 audit(1760231127.617:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19821 comm="syz.3.6074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1043.577869][ T30] audit: type=1326 audit(1760231127.627:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19821 comm="syz.3.6074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1043.604114][ T30] audit: type=1326 audit(1760231127.627:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19821 comm="syz.3.6074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1043.626780][ T30] audit: type=1326 audit(1760231127.657:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19821 comm="syz.3.6074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1043.652023][ T30] audit: type=1326 audit(1760231127.667:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19821 comm="syz.3.6074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=195 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1043.677662][ T30] audit: type=1326 audit(1760231127.667:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19821 comm="syz.3.6074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe1539 code=0x7ffc0000 [ 1044.225250][T19831] MPI: mpi too large (130952 bits) [ 1045.806868][T19858] loop5: detected capacity change from 0 to 256 [ 1046.116794][ T4047] ===================================================== [ 1046.124635][ T4047] BUG: KMSAN: uninit-value in n_tty_receive_buf_closing+0xfe/0x9a0 [ 1046.136079][ T4047] n_tty_receive_buf_closing+0xfe/0x9a0 [ 1046.145415][ T4047] n_tty_receive_buf_common+0x19d5/0x2540 [ 1046.151971][ T4047] n_tty_receive_buf2+0x4c/0x60 [ 1046.157005][ T4047] tty_ldisc_receive_buf+0xc6/0x2c0 [ 1046.162610][ T4047] tty_port_default_receive_buf+0xd7/0x1a0 [ 1046.171242][ T4047] flush_to_ldisc+0x43e/0xe30 [ 1046.176099][ T4047] process_scheduled_works+0xb91/0x1d80 [ 1046.182489][ T4047] worker_thread+0xedf/0x1590 [ 1046.187366][ T4047] kthread+0xd5c/0xf00 [ 1046.191731][ T4047] ret_from_fork+0x1f5/0x4c0 [ 1046.196502][ T4047] ret_from_fork_asm+0x1a/0x30 [ 1046.204590][ T4047] [ 1046.206995][ T4047] Uninit was stored to memory at: [ 1046.212500][ T4047] n_tty_receive_buf_closing+0xf7/0x9a0 [ 1046.218456][ T4047] n_tty_receive_buf_common+0x19d5/0x2540 [ 1046.224380][ T4047] n_tty_receive_buf2+0x4c/0x60 [ 1046.235121][ T4047] tty_ldisc_receive_buf+0xc6/0x2c0 [ 1046.241676][ T4047] tty_port_default_receive_buf+0xd7/0x1a0 [ 1046.247678][ T4047] flush_to_ldisc+0x43e/0xe30 [ 1046.252774][ T4047] process_scheduled_works+0xb91/0x1d80 [ 1046.261182][ T4047] worker_thread+0xedf/0x1590 [ 1046.266051][ T4047] kthread+0xd5c/0xf00 [ 1046.270544][ T4047] ret_from_fork+0x1f5/0x4c0 [ 1046.275311][ T4047] ret_from_fork_asm+0x1a/0x30 [ 1046.281745][ T4047] [ 1046.284140][ T4047] Uninit was created at: [ 1046.291826][ T4047] __kmalloc_noprof+0xabb/0x1b40 [ 1046.296930][ T4047] __tty_buffer_request_room+0x3d4/0x7a0 [ 1046.302917][ T4047] __tty_insert_flip_string_flags+0x157/0x6f0 [ 1046.309280][ T4047] uart_insert_char+0x368/0x930 [ 1046.314276][ T4047] serial8250_read_char+0x1ba/0x670 [ 1046.322197][ T4047] serial8250_handle_irq+0x930/0x1110 [ 1046.327743][ T4047] serial8250_default_handle_irq+0x116/0x370 [ 1046.337555][ T4047] serial8250_interrupt+0xcb/0x430 [ 1046.344015][ T4047] __handle_irq_event_percpu+0x11e/0xf80 [ 1046.352315][ T4047] handle_irq_event+0xe0/0x2a0 [ 1046.357258][ T4047] handle_edge_irq+0x2a9/0xb50 [ 1046.362507][ T4047] __common_interrupt+0x9d/0x180 [ 1046.367604][ T4047] common_interrupt+0x94/0xb0 [ 1046.372568][ T4047] asm_common_interrupt+0x2b/0x40 [ 1046.377785][ T4047] [ 1046.382800][ T4047] CPU: 0 UID: 0 PID: 4047 Comm: kworker/u8:19 Tainted: G W syzkaller #0 PREEMPT(none) [ 1046.394398][ T4047] Tainted: [W]=WARN [ 1046.398411][ T4047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1046.411244][ T4047] Workqueue: events_unbound flush_to_ldisc [ 1046.417279][ T4047] ===================================================== [ 1046.424540][ T4047] Disabling lock debugging due to kernel taint [ 1046.430947][ T4047] Kernel panic - not syncing: kmsan.panic set ... [ 1046.437490][ T4047] CPU: 0 UID: 0 PID: 4047 Comm: kworker/u8:19 Tainted: G B W syzkaller #0 PREEMPT(none) [ 1046.448788][ T4047] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1046.453900][ T4047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1046.464083][ T4047] Workqueue: events_unbound flush_to_ldisc [ 1046.470069][ T4047] Call Trace: [ 1046.473418][ T4047] [ 1046.476410][ T4047] __dump_stack+0x26/0x30 [ 1046.480886][ T4047] dump_stack_lvl+0x53/0x270 [ 1046.485627][ T4047] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1046.491586][ T4047] dump_stack+0x1e/0x25 [ 1046.495872][ T4047] vpanic+0x435/0xd30 [ 1046.500010][ T4047] panic+0x15d/0x160 [ 1046.504102][ T4047] kmsan_report+0x31c/0x320 [ 1046.508748][ T4047] ? __msan_warning+0x1b/0x30 [ 1046.513533][ T4047] ? n_tty_receive_buf_closing+0xfe/0x9a0 [ 1046.519421][ T4047] ? n_tty_receive_buf_common+0x19d5/0x2540 [ 1046.525501][ T4047] ? n_tty_receive_buf2+0x4c/0x60 [ 1046.530692][ T4047] ? tty_ldisc_receive_buf+0xc6/0x2c0 [ 1046.536210][ T4047] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 1046.542352][ T4047] ? flush_to_ldisc+0x43e/0xe30 [ 1046.547344][ T4047] ? process_scheduled_works+0xb91/0x1d80 [ 1046.553238][ T4047] ? worker_thread+0xedf/0x1590 [ 1046.558253][ T4047] ? kthread+0xd5c/0xf00 [ 1046.562606][ T4047] ? ret_from_fork+0x1f5/0x4c0 [ 1046.567519][ T4047] ? ret_from_fork_asm+0x1a/0x30 [ 1046.572610][ T4047] ? ret_from_fork_asm+0x1a/0x30 [ 1046.577720][ T4047] ? kmsan_get_metadata+0xfb/0x160 [ 1046.582968][ T4047] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1046.588922][ T4047] ? kmsan_get_metadata+0xfb/0x160 [ 1046.594180][ T4047] ? kmsan_get_metadata+0xfb/0x160 [ 1046.599442][ T4047] ? kmsan_get_metadata+0xfb/0x160 [ 1046.604693][ T4047] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1046.610655][ T4047] ? kmsan_get_metadata+0xfb/0x160 [ 1046.615914][ T4047] __msan_warning+0x1b/0x30 [ 1046.620537][ T4047] n_tty_receive_buf_closing+0xfe/0x9a0 [ 1046.626312][ T4047] n_tty_receive_buf_common+0x19d5/0x2540 [ 1046.632255][ T4047] ? kmsan_get_metadata+0xfb/0x160 [ 1046.637562][ T4047] n_tty_receive_buf2+0x4c/0x60 [ 1046.642588][ T4047] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 1046.648316][ T4047] tty_ldisc_receive_buf+0xc6/0x2c0 [ 1046.653698][ T4047] tty_port_default_receive_buf+0xd7/0x1a0 [ 1046.659688][ T4047] flush_to_ldisc+0x43e/0xe30 [ 1046.664524][ T4047] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 1046.671098][ T4047] ? __pfx_flush_to_ldisc+0x10/0x10 [ 1046.676460][ T4047] process_scheduled_works+0xb91/0x1d80 [ 1046.682234][ T4047] worker_thread+0xedf/0x1590 [ 1046.687110][ T4047] kthread+0xd5c/0xf00 [ 1046.691301][ T4047] ? __pfx_worker_thread+0x10/0x10 [ 1046.696600][ T4047] ? __pfx_kthread+0x10/0x10 [ 1046.701309][ T4047] ret_from_fork+0x1f5/0x4c0 [ 1046.706061][ T4047] ? __pfx_kthread+0x10/0x10 [ 1046.710783][ T4047] ret_from_fork_asm+0x1a/0x30 [ 1046.715736][ T4047] [ 1046.719140][ T4047] Kernel Offset: disabled [ 1046.723520][ T4047] Rebooting in 86400 seconds..