last executing test programs: 2m24.665713427s ago: executing program 0 (id=15): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x8, 0x0, 0x2}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)="341c69", 0x3}], 0x1}}], 0x1, 0x4008041) shutdown(r0, 0x1) 2m24.079668647s ago: executing program 0 (id=17): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6313}], 0xfc, 0x200000000000000, 0x0}) 2m23.390663377s ago: executing program 0 (id=21): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0xa, &(0x7f0000000040)={0x0, 0xc8a1, 0x7581, 0x8, 0x315}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) 2m23.007006179s ago: executing program 0 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f00000002c0)='./file0/file0\x00') umount2(&(0x7f00000001c0)='./file0/file0/../file0\x00', 0x2) 2m22.315098466s ago: executing program 0 (id=25): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) 2m21.666786291s ago: executing program 0 (id=29): sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) recvmmsg(r0, &(0x7f00000054c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004040)}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003480)=""/4096, 0x1000}, 0x6}, {{0x0, 0x0, 0x0}, 0x1000}], 0x3, 0x40010022, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) 2m20.4458504s ago: executing program 32 (id=29): sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) recvmmsg(r0, &(0x7f00000054c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004040)}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003480)=""/4096, 0x1000}, 0x6}, {{0x0, 0x0, 0x0}, 0x1000}], 0x3, 0x40010022, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) 12.649095786s ago: executing program 5 (id=412): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x2, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x7}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 11.559866788s ago: executing program 2 (id=414): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, 0x0) 11.298738276s ago: executing program 1 (id=415): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0xfffd, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000007, 0xfffffffffffffffb}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast2, 0x3}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f0000000180)='?3', 0x2}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r1, &(0x7f0000000300), 0x20, 0x3b00, 0x0, 0xfffffffffffffdfd) 11.091886379s ago: executing program 5 (id=417): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0x5) ptrace$pokeuser(0x6, r1, 0x358, 0xffff8880b870e000) r2 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x28}, 0x28) r3 = socket(0x2, 0x80805, 0x0) flistxattr(r3, &(0x7f0000000240)=""/53, 0x35) sendmmsg$inet(r3, &(0x7f0000006d40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a00)}}], 0x2, 0x48000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) keyctl$unlink(0x9, r5, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="018d008dffff"}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000380), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) keyctl$search(0xa, r5, &(0x7f0000000040)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x2}, r5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c"], 0x48}}, 0x4084) 9.503416464s ago: executing program 1 (id=419): syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file0\x00', 0x810, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mknod$loop(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) 8.68821568s ago: executing program 3 (id=421): r0 = socket$qrtr(0x2a, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) ftruncate(r1, 0xc17a) writev(r0, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0xb1) 8.633368358s ago: executing program 5 (id=422): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) pread64(r0, &(0x7f0000004200)=""/236, 0xec, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000004380)='./file0/file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000043c0)={0x29, 0x3, 0x0, {0x1, 0x8, 0x0, 'group_id'}}, 0x29) 7.95147094s ago: executing program 1 (id=424): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a047, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x210000, &(0x7f0000000400)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@init_itable}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109341, 0x15) socket(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000640)="a62b56a381afc2158f3f5e49a0d973844696985fa99e19113993af6717d6d8d3e019846a7f45589bb0f36294d7c96ceef22922ca18c067b1e26b16900b56fbc07e41cd70cceae27d2f221789c5466cdf2f133f2ec4e09c3b4e0ad3f22e0cd6b111", 0x61) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000002680)='.\x00', 0x8080a0, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) 7.922660408s ago: executing program 3 (id=425): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x321140, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.363027279s ago: executing program 4 (id=426): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x4e22, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0xfffffffd, @mcast1={0xff, 0x7}}}, {{0xa, 0x400, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x2000009}}}, 0x108) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x80000, @mcast1}}}, 0x108) 7.290370817s ago: executing program 5 (id=427): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) 7.264026268s ago: executing program 2 (id=428): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r1, 0x221c, 0x134d, 0x16, 0x0, 0x0) 7.250553868s ago: executing program 3 (id=429): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000440)="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", 0x145}], 0x1}, 0x9cdc2384056b48b8) socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000380)={0xdf, 0x0, 0x1a000}) 6.227993513s ago: executing program 4 (id=430): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x0, 0x0}, 0x2020) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000480)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64=r3, @ANYRESOCT=r1, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYRESDEC=r3, @ANYRESHEX=r2], 0x1, 0x14ee, &(0x7f0000002400)="$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") truncate(&(0x7f0000000040)='./file1\x00', 0x100) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001880)=""/4093, 0xffd) 3.681746375s ago: executing program 2 (id=436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xa}, {}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) 3.476497513s ago: executing program 4 (id=437): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x8, 0x4) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r0, &(0x7f0000000180)='v', 0x1, 0x40c0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/165, 0xa5}, 0x8000}], 0x1, 0x2100, 0x0) 3.389029104s ago: executing program 3 (id=438): capset(0x0, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.074937002s ago: executing program 1 (id=439): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0x254}, 0x1, 0x0, 0x0, 0x8}, 0xc4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x48891) 2.529889283s ago: executing program 2 (id=440): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=@delqdisc={0x54, 0x25, 0x100, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0xffff}, {0x4, 0x5}, {0xd, 0xb}}, [@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x11}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20080885}, 0x20000800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c"], 0xfc}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x200c0810}, 0x44004) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a30000000001400038008000240000000000800014000000000140000001100"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="88010000170a0101"], 0x188}}, 0x0) 2.447457613s ago: executing program 4 (id=441): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='net/udp\x00') read$FUSE(r1, &(0x7f000001f4c0)={0x2020}, 0x1f38) 2.224369328s ago: executing program 1 (id=442): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000200)={0x0, 0x6, 0x2, "81f7"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 880.985874ms ago: executing program 2 (id=443): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000000c0)={0x5, 0xc, 0x3d, 0x7fff, 0x13, "71feaf33432ed6fe90107884be157e88b3e578"}) 855.052001ms ago: executing program 4 (id=444): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x509, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f00000000c0)='/', 0x1, 0x2f70000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x904810, &(0x7f0000000380)={[{}, {@noblock_validity}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x26, 0x759, &(0x7f0000000d40)="$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") r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, 0x0) 850.717647ms ago: executing program 5 (id=445): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x14, 0x0, &(0x7f00000000c0)="259a53f271b7ed2608004c6588a8ceccfc9270df", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 3 (id=446): r0 = io_uring_setup(0x666, &(0x7f00000002c0)={0x0, 0x284f, 0x40, 0xfffffffa, 0x235}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_setup(0x5, &(0x7f0000000e80)=0x0) syz_io_uring_setup(0x4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000080), 0x0, &(0x7f0000000000)) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) io_getevents(r1, 0x1000, 0x80000000000033b, &(0x7f0000000240), 0x0) io_submit(r1, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f0000000080)="8c", 0x1}]) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.4' (ED25519) to the list of known hosts. [ 155.835415][ T5759] cgroup: Unknown subsys name 'net' [ 155.980464][ T5759] cgroup: Unknown subsys name 'cpuset' [ 155.993850][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 161.321674][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 166.419809][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 166.429465][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 166.439665][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 166.449754][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 166.465346][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 166.476219][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 166.480008][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 166.492860][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 166.495296][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 166.509770][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 166.521473][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 166.523495][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 166.537912][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 166.542612][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 166.560481][ T5073] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 166.564111][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 166.577554][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 166.587668][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 166.589570][ T5073] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 166.600259][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 166.606518][ T5073] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 166.613422][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 166.620106][ T5073] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 166.665522][ T5073] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 166.683917][ T5073] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 167.803522][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 168.108922][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 168.200836][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 168.564335][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 168.603620][ T5786] Bluetooth: hci1: command tx timeout [ 168.682446][ T5073] Bluetooth: hci2: command tx timeout [ 168.682488][ T5781] Bluetooth: hci3: command tx timeout [ 168.693966][ T5786] Bluetooth: hci0: command tx timeout [ 168.695882][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.722497][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.730073][ T5783] bridge_slave_0: entered allmulticast mode [ 168.740596][ T5783] bridge_slave_0: entered promiscuous mode [ 168.765744][ T5786] Bluetooth: hci4: command tx timeout [ 168.789147][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 168.812871][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.823355][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.830897][ T5783] bridge_slave_1: entered allmulticast mode [ 168.841385][ T5783] bridge_slave_1: entered promiscuous mode [ 169.035562][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.105115][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.209787][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.219371][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.229809][ T5782] bridge_slave_0: entered allmulticast mode [ 169.240006][ T5782] bridge_slave_0: entered promiscuous mode [ 169.256242][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.263930][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.271394][ T5782] bridge_slave_1: entered allmulticast mode [ 169.283338][ T5782] bridge_slave_1: entered promiscuous mode [ 169.410208][ T5783] team0: Port device team_slave_0 added [ 169.424772][ T5783] team0: Port device team_slave_1 added [ 169.431008][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.439128][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.446899][ T5777] bridge_slave_0: entered allmulticast mode [ 169.456878][ T5777] bridge_slave_0: entered promiscuous mode [ 169.550616][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.558244][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.566193][ T5777] bridge_slave_1: entered allmulticast mode [ 169.574334][ T5777] bridge_slave_1: entered promiscuous mode [ 169.584309][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.591728][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.599857][ T5779] bridge_slave_0: entered allmulticast mode [ 169.607979][ T5779] bridge_slave_0: entered promiscuous mode [ 169.630181][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.717811][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.725896][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.733574][ T5779] bridge_slave_1: entered allmulticast mode [ 169.741419][ T5779] bridge_slave_1: entered promiscuous mode [ 169.758504][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.790635][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.797857][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.824099][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.931208][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.952286][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.981801][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.051692][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.094034][ T5782] team0: Port device team_slave_0 added [ 170.116263][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.124071][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.131554][ T5787] bridge_slave_0: entered allmulticast mode [ 170.140022][ T5787] bridge_slave_0: entered promiscuous mode [ 170.157416][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.194642][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.210823][ T5782] team0: Port device team_slave_1 added [ 170.249245][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.257209][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.265167][ T5787] bridge_slave_1: entered allmulticast mode [ 170.273944][ T5787] bridge_slave_1: entered promiscuous mode [ 170.313326][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.376556][ T5777] team0: Port device team_slave_0 added [ 170.428685][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.435817][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.462307][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.503410][ T5777] team0: Port device team_slave_1 added [ 170.552347][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.559432][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.587937][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.606861][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.645362][ T5779] team0: Port device team_slave_0 added [ 170.665616][ T5783] hsr_slave_0: entered promiscuous mode [ 170.674406][ T5783] hsr_slave_1: entered promiscuous mode [ 170.682391][ T5786] Bluetooth: hci1: command tx timeout [ 170.717060][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.762659][ T5073] Bluetooth: hci3: command tx timeout [ 170.762693][ T5781] Bluetooth: hci2: command tx timeout [ 170.773770][ T5786] Bluetooth: hci0: command tx timeout [ 170.789723][ T5779] team0: Port device team_slave_1 added [ 170.842407][ T5073] Bluetooth: hci4: command tx timeout [ 170.877539][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.885023][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.911307][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.971583][ T5787] team0: Port device team_slave_0 added [ 170.980264][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.987531][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.014022][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.040412][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.047731][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.075611][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.137493][ T5787] team0: Port device team_slave_1 added [ 171.162616][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.169644][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.195886][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.335526][ T5782] hsr_slave_0: entered promiscuous mode [ 171.344286][ T5782] hsr_slave_1: entered promiscuous mode [ 171.351692][ T5782] debugfs: 'hsr0' already exists in 'hsr' [ 171.357726][ T5782] Cannot create hsr debugfs directory [ 171.370787][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.378183][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.404581][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.420861][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.428217][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.454547][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.544378][ T5777] hsr_slave_0: entered promiscuous mode [ 171.554014][ T5777] hsr_slave_1: entered promiscuous mode [ 171.561312][ T5777] debugfs: 'hsr0' already exists in 'hsr' [ 171.568450][ T5777] Cannot create hsr debugfs directory [ 171.779833][ T5779] hsr_slave_0: entered promiscuous mode [ 171.788364][ T5779] hsr_slave_1: entered promiscuous mode [ 171.796466][ T5779] debugfs: 'hsr0' already exists in 'hsr' [ 171.802357][ T5779] Cannot create hsr debugfs directory [ 171.997832][ T5787] hsr_slave_0: entered promiscuous mode [ 172.006407][ T5787] hsr_slave_1: entered promiscuous mode [ 172.014386][ T5787] debugfs: 'hsr0' already exists in 'hsr' [ 172.020195][ T5787] Cannot create hsr debugfs directory [ 172.762417][ T5073] Bluetooth: hci1: command tx timeout [ 172.797806][ T5783] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 172.842094][ T5073] Bluetooth: hci2: command tx timeout [ 172.849089][ T5783] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 172.856445][ T5073] Bluetooth: hci3: command tx timeout [ 172.862142][ T5786] Bluetooth: hci0: command tx timeout [ 172.877903][ T5783] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 172.925010][ T5073] Bluetooth: hci4: command tx timeout [ 172.936243][ T5783] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 173.090942][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 173.138174][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 173.158870][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 173.200732][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 173.320213][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 173.379326][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 173.424619][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 173.446316][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 173.636471][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 173.657630][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 173.703887][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 173.754724][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 173.958832][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.979153][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 174.018739][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 174.067876][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 174.109258][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 174.244627][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.320784][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.328287][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.447572][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.454902][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.549151][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.637329][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.766187][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.838209][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.845414][ T5073] Bluetooth: hci1: command tx timeout [ 174.885712][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.934504][ T5073] Bluetooth: hci3: command tx timeout [ 174.935276][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.940037][ T5073] Bluetooth: hci0: command tx timeout [ 174.947428][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.960523][ T5786] Bluetooth: hci2: command tx timeout [ 174.965858][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.973366][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.995260][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.012539][ T5073] Bluetooth: hci4: command tx timeout [ 175.093458][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.100890][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.116986][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.124471][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.213820][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.221296][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.337795][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.345308][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.649525][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.918767][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.971754][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.048836][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.056387][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.139377][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.146892][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.879094][ T5787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.181514][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.292727][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.591055][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.889840][ T5779] veth0_vlan: entered promiscuous mode [ 177.899143][ T5782] veth0_vlan: entered promiscuous mode [ 178.056402][ T5782] veth1_vlan: entered promiscuous mode [ 178.070669][ T5779] veth1_vlan: entered promiscuous mode [ 178.188635][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.200462][ T5783] veth0_vlan: entered promiscuous mode [ 178.211850][ T5777] veth0_vlan: entered promiscuous mode [ 178.300992][ T5777] veth1_vlan: entered promiscuous mode [ 178.356023][ T5783] veth1_vlan: entered promiscuous mode [ 178.469398][ T5779] veth0_macvtap: entered promiscuous mode [ 178.511544][ T5782] veth0_macvtap: entered promiscuous mode [ 178.534992][ T5779] veth1_macvtap: entered promiscuous mode [ 178.576141][ T5782] veth1_macvtap: entered promiscuous mode [ 178.687161][ T5787] veth0_vlan: entered promiscuous mode [ 178.707410][ T5777] veth0_macvtap: entered promiscuous mode [ 178.765821][ T5783] veth0_macvtap: entered promiscuous mode [ 178.778493][ T5777] veth1_macvtap: entered promiscuous mode [ 178.796698][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.855171][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.872982][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.894163][ T5783] veth1_macvtap: entered promiscuous mode [ 178.904618][ T5787] veth1_vlan: entered promiscuous mode [ 178.951542][ T1127] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.961785][ T1127] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.983996][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.013216][ T1127] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.022363][ T1127] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.072398][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.087772][ T1127] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.098916][ T1127] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.158099][ T65] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.177209][ T65] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.256965][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.297225][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.398137][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.446079][ T1127] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.459866][ T1127] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.526751][ T1127] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.542430][ T1127] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.551376][ T1127] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.666187][ T1127] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.722466][ T1127] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.731449][ T1127] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.802820][ T5787] veth0_macvtap: entered promiscuous mode [ 179.913375][ T5787] veth1_macvtap: entered promiscuous mode [ 180.079560][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.175430][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.268393][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.301238][ T65] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.407085][ T65] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.428382][ T143] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.408767][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.445748][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.604441][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.630294][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.746751][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.757519][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.969282][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.991779][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.055511][ T5779] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 185.152142][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.170911][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.407563][ T1084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.419526][ T1084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.461253][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.509592][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.891769][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.921412][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.982880][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.015985][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.277068][ T1084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.309597][ T1084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.072560][ T5980] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 189.794272][ T6019] evm: overlay not supported [ 190.041531][ T6022] binder: 6020:6022 ioctl c0306201 200000000640 returned -22 [ 190.042240][ T6023] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 190.381741][ T6025] loop2: detected capacity change from 0 to 512 [ 190.563629][ T6025] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.635341][ T6030] loop4: detected capacity change from 0 to 512 [ 190.686794][ T6030] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 190.802573][ T6030] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 190.969835][ T6030] EXT4-fs (loop4): 1 orphan inode deleted [ 190.986336][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.001058][ T6030] EXT4-fs (loop4): 1 truncate cleaned up [ 191.051145][ T6030] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.194465][ T6030] syz.4.20 (pid 6030) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 191.396778][ T6040] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 191.608840][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.832226][ T5831] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 193.953969][ T6064] syz.1.35 uses obsolete (PF_INET,SOCK_PACKET) [ 193.971725][ T6064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'. [ 194.013117][ T5831] usb 4-1: Using ep0 maxpacket: 16 [ 194.037788][ T5831] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.057561][ T5831] usb 4-1: config 0 has no interfaces? [ 194.078348][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 194.089153][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 194.099456][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 194.111381][ T5831] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 194.113105][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 194.137482][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 194.178352][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.238890][ T5831] usb 4-1: config 0 descriptor?? [ 194.520789][ T5831] usb 4-1: USB disconnect, device number 2 [ 194.558680][ T6068] loop2: detected capacity change from 0 to 256 [ 194.580539][ T6068] exfat: Deprecated parameter 'utf8' [ 194.625916][ T6068] exfat: Deprecated parameter 'namecase' [ 194.636417][ T6068] exfat: Deprecated parameter 'namecase' [ 194.678268][ T6068] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 194.913164][ T6073] netlink: 'syz.4.37': attribute type 4 has an invalid length. [ 195.085315][ T6074] netlink: 'syz.4.37': attribute type 4 has an invalid length. [ 196.202562][ T5073] Bluetooth: hci0: command tx timeout [ 196.528014][ T6077] Process accounting resumed [ 196.695655][ T6089] input: syz1 as /devices/virtual/input/input5 [ 196.770429][ T6065] chnl_net:caif_netlink_parms(): no params data found [ 197.282443][ T5832] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 197.389989][ T6096] vlan2: entered allmulticast mode [ 197.401210][ T6096] veth0_to_bond: entered allmulticast mode [ 197.463593][ T5832] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 197.475086][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.493486][ T5832] usb 2-1: Product: syz [ 197.498262][ T5832] usb 2-1: Manufacturer: syz [ 197.503744][ T5832] usb 2-1: SerialNumber: syz [ 197.531568][ T5832] usb 2-1: config 0 descriptor?? [ 198.282212][ T5073] Bluetooth: hci0: command tx timeout [ 198.372759][ T6065] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.384411][ T6065] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.398933][ T6065] bridge_slave_0: entered allmulticast mode [ 198.443454][ T6065] bridge_slave_0: entered promiscuous mode [ 198.828225][ T5832] usb 2-1: f81604_read: reg: 100e failed: -EPROTO [ 198.882684][ T5832] usb 2-1: f81604_read: reg: 200f failed: -EPROTO [ 198.890782][ T6065] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.935392][ T6065] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.962308][ T5832] usb 2-1: USB disconnect, device number 2 [ 199.002900][ T6065] bridge_slave_1: entered allmulticast mode [ 199.047527][ T6065] bridge_slave_1: entered promiscuous mode [ 199.200015][ T5832] usb 2-1: f81604_read: reg: 100f failed: -ENODEV [ 199.370966][ T5832] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 199.493098][ T6065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.545736][ T6065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.689594][ T6116] Zero length message leads to an empty skb [ 200.029297][ T6065] team0: Port device team_slave_0 added [ 200.111702][ T6065] team0: Port device team_slave_1 added [ 200.120307][ T6125] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 200.127016][ T6125] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 200.143219][ T6125] vhci_hcd vhci_hcd.0: Device attached [ 200.152779][ T6128] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 200.159476][ T6128] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 200.254130][ T6128] vhci_hcd vhci_hcd.0: Device attached [ 200.333539][ T6125] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(5) [ 200.339569][ T6134] loop2: detected capacity change from 0 to 256 [ 200.340237][ T6125] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 200.357632][ T6128] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(10) [ 200.364423][ T6128] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 200.384676][ T6065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.392715][ T5073] Bluetooth: hci0: command tx timeout [ 200.398573][ T6065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.425691][ T6125] vhci_hcd vhci_hcd.0: Device attached [ 200.451782][ T6128] vhci_hcd vhci_hcd.0: Device attached [ 200.457369][ T795] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 200.485644][ T6065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.514679][ T6134] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 200.526832][ T6065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.526898][ T6065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.527035][ T6065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.571091][ T6128] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(14) [ 200.577872][ T6128] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 200.637244][ T6125] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(9) [ 200.643973][ T6125] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 200.664750][ T6134] exFAT-fs (loop2): error, data valid size is invalid(-9223372036854774758) [ 200.678585][ T6128] vhci_hcd vhci_hcd.0: Device attached [ 200.689490][ T6125] vhci_hcd vhci_hcd.0: Device attached [ 200.712741][ T6134] exFAT-fs (loop2): Filesystem has been set read-only [ 200.772177][ T6144] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(17) [ 200.778995][ T6144] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 200.797395][ T5837] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 200.840363][ T6144] vhci_hcd vhci_hcd.0: Device attached [ 200.874290][ T6141] vhci_hcd: connection closed [ 200.875441][ T6136] vhci_hcd: connection closed [ 200.876377][ T6140] vhci_hcd: connection closed [ 200.889699][ T6130] vhci_hcd: connection closed [ 200.902886][ T6138] vhci_hcd: connection closed [ 200.905013][ T6126] vhci_hcd: connection reset by peer [ 200.918796][ T12] vhci_hcd vhci_hcd.3: stop threads [ 200.952580][ T12] vhci_hcd vhci_hcd.3: release socket [ 200.972957][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 200.983438][ T6146] vhci_hcd: connection closed [ 200.985509][ T6065] hsr_slave_0: entered promiscuous mode [ 200.998043][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.008467][ T12] vhci_hcd vhci_hcd.3: stop threads [ 201.015265][ T12] vhci_hcd vhci_hcd.3: release socket [ 201.031530][ T6065] hsr_slave_1: entered promiscuous mode [ 201.042360][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 201.042418][ T5837] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 201.058488][ T6065] debugfs: 'hsr0' already exists in 'hsr' [ 201.064621][ T12] vhci_hcd vhci_hcd.3: stop threads [ 201.069987][ T12] vhci_hcd vhci_hcd.3: release socket [ 201.081587][ T6065] Cannot create hsr debugfs directory [ 201.102266][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.107619][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 201.143591][ T12] vhci_hcd vhci_hcd.3: stop threads [ 201.148974][ T12] vhci_hcd vhci_hcd.3: release socket [ 201.151201][ T5837] usb 5-1: config 0 descriptor?? [ 201.174225][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 201.199315][ T12] vhci_hcd vhci_hcd.3: stop threads [ 201.214549][ T12] vhci_hcd vhci_hcd.3: release socket [ 201.220303][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 201.252182][ T12] vhci_hcd vhci_hcd.3: stop threads [ 201.257557][ T12] vhci_hcd vhci_hcd.3: release socket [ 201.310338][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 201.333579][ T12] vhci_hcd vhci_hcd.3: stop threads [ 201.338967][ T12] vhci_hcd vhci_hcd.3: release socket [ 201.357335][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 201.649139][ T5837] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 201.736743][ T5837] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0001/input/input6 [ 201.992542][ T5837] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 202.050444][ T5073] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 202.059306][ T5073] Bluetooth: hci3: Injecting HCI hardware error event [ 202.067489][ T5786] Bluetooth: hci3: hardware error 0x00 [ 202.448268][ T5073] Bluetooth: hci0: command tx timeout [ 202.852656][ T6120] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 203.514663][ T6065] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 203.604238][ T6065] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 203.718549][ T6065] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 203.723166][ T6170] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 203.815016][ T6065] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 203.994990][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.001629][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.094107][ T6173] loop2: detected capacity change from 0 to 1024 [ 204.140203][ T5786] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 204.175030][ T5837] usb 5-1: USB disconnect, device number 2 [ 204.367248][ T6176] hfsplus: b-tree write err: -5, ino 2 [ 205.020619][ T6180] loop4: detected capacity change from 0 to 16 [ 205.133377][ T6180] ======================================================= [ 205.133377][ T6180] WARNING: The mand mount option has been deprecated and [ 205.133377][ T6180] and is ignored by this kernel. Remove the mand [ 205.133377][ T6180] option from the mount to silence this warning. [ 205.133377][ T6180] ======================================================= [ 205.214653][ T12] hfsplus: b-tree write err: -5, ino 25 [ 205.220633][ T12] hfsplus: b-tree write err: -5, ino 4 [ 205.273393][ T12] hfsplus: b-tree write err: -5, ino 2 [ 205.279726][ T12] hfsplus: b-tree write err: -5, ino 26 [ 205.301514][ T6180] erofs (device loop4): mounted with root inode @ nid 36. [ 205.490792][ T29] audit: type=1800 audit(1775812456.528:2): pid=6180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.67" name="file2" dev="overlay" ino=89 res=0 errno=0 [ 205.652637][ T795] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 205.741971][ T6182] loop3: detected capacity change from 0 to 2048 [ 205.894695][ T6182] loop3: p1 < > p4 [ 206.008134][ T6182] loop3: p4 size 8388608 extends beyond EOD, truncated [ 206.061006][ T6065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.385674][ T6065] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.491741][ T6192] loop1: detected capacity change from 0 to 512 [ 206.501109][ T6192] EXT4-fs: Ignoring removed mblk_io_submit option [ 206.610219][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.617812][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.670725][ T6192] EXT4-fs (loop1): orphan cleanup on readonly fs [ 206.728406][ T6192] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 206.789289][ T6163] udevd[6163]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 206.793152][ T6192] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.73: attempt to clear invalid blocks 2 len 1 [ 206.803357][ T6193] loop4: detected capacity change from 0 to 1024 [ 206.847553][ T6160] udevd[6160]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 206.925652][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.933343][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.940703][ T6193] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 206.960014][ T6193] System zones: 0-1, 3-36 [ 206.968912][ T6192] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 206.972014][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 206.988053][ C1] EXT4-fs (loop1): initial error at time 1775812458: ext4_clear_blocks:876: inode 13 [ 206.997865][ C1] EXT4-fs (loop1): last error at time 1775812458: ext4_clear_blocks:876: inode 13 [ 207.018476][ T6192] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 207.049422][ T6193] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.72: bad orphan inode 134217728 [ 207.055552][ T6192] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.73: invalid indirect mapped block 1819239214 (level 0) [ 207.060840][ T6193] loop4: lost filesystem error report for type 5 error -117 [ 207.077284][ T6193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.121420][ T6200] loop2: detected capacity change from 0 to 128 [ 207.153302][ T6192] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 207.161433][ T6192] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.73: invalid indirect mapped block 1819239214 (level 1) [ 207.278728][ T6192] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 207.309555][ T6192] EXT4-fs (loop1): 1 truncate cleaned up [ 207.374092][ T6200] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 207.399013][ T6192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 207.526321][ T6200] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 207.639244][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.903865][ T6192] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 208.254826][ T5782] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 208.320057][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.733351][ T6213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.77'. [ 208.767317][ T6213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.77'. [ 208.777888][ T1084] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.788987][ T35] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.799456][ T35] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.812767][ T35] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.807491][ T6065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.066564][ T6237] loop2: detected capacity change from 0 to 512 [ 211.239843][ T6237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.382618][ T6237] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 211.582750][ T29] audit: type=1800 audit(1775812462.608:3): pid=6237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.86" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 211.706917][ T6246] faux_driver vgem: [drm] Unknown color mode 11; guessing buffer size. [ 212.113437][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.397191][ T6065] veth0_vlan: entered promiscuous mode [ 212.587971][ T6065] veth1_vlan: entered promiscuous mode [ 212.999339][ T6255] Bluetooth: MGMT ver 1.23 [ 213.259704][ T6252] loop2: detected capacity change from 0 to 32768 [ 213.286180][ T6252] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.91 (6252) [ 213.300862][ T6065] veth0_macvtap: entered promiscuous mode [ 213.331817][ T6252] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 213.342582][ T6252] BTRFS info (device loop2): using sha256 checksum algorithm [ 213.350351][ T6252] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 213.489203][ T6065] veth1_macvtap: entered promiscuous mode [ 213.604162][ T6252] BTRFS info (device loop2): rebuilding free space tree [ 213.679427][ T6252] BTRFS info (device loop2): disabling free space tree [ 213.692139][ T6252] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 213.703607][ T6252] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 213.759012][ T6252] BTRFS info (device loop2): enabling ssd optimizations [ 213.766397][ T6252] BTRFS info (device loop2): enabling disk space caching [ 213.773724][ T6252] BTRFS info (device loop2): force clearing of disk cache [ 213.781009][ T6252] BTRFS info (device loop2): max_inline set to 4096 [ 213.818892][ T6252] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 213.928707][ T6065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.046715][ T6065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.222532][ T35] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.296169][ T35] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.401364][ T35] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.470486][ T35] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.309563][ T29] audit: type=1326 audit(1775812467.358:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.1.104" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb9e59c819 code=0x0 [ 216.942248][ T5832] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 216.988885][ T6310] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 217.033287][ T6310] overlayfs: failed to set uuid (27/file1, err=-1); falling back to uuid=null. [ 217.170947][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.233254][ T5832] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 217.262071][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.296625][ T5832] usb 5-1: config 0 descriptor?? [ 217.639155][ T5832] usbhid 5-1:0.0: can't add hid device: -71 [ 217.687477][ T5832] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 217.745044][ T5832] usb 5-1: USB disconnect, device number 3 [ 218.146770][ T6322] loop2: detected capacity change from 0 to 1024 [ 218.162277][ T5832] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 218.195220][ T6322] hfsplus: invalid length 32517 has been corrected to 255 [ 218.242003][ T6316] loop1: detected capacity change from 0 to 32768 [ 218.251610][ T6316] btrfs: Deprecated parameter 'usebackuproot' [ 218.258044][ T6316] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 218.272599][ T6316] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.109 (6316) [ 218.290490][ T6323] hfsplus: invalid length 32517 has been corrected to 255 [ 218.322188][ T6316] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 218.332578][ T6316] BTRFS info (device loop1): using crc32c checksum algorithm [ 218.362240][ T5832] usb 5-1: Using ep0 maxpacket: 32 [ 218.406985][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.441345][ T5832] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 218.453813][ T6323] hfsplus: invalid length 32517 has been corrected to 255 [ 218.525629][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.529385][ T143] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 218.568935][ T5832] usb 5-1: config 0 descriptor?? [ 218.631731][ T5832] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 218.639775][ T6316] BTRFS error (device loop1): failed to load root extent [ 218.648841][ T6316] BTRFS warning (device loop1): try to load backup roots slot 1 [ 218.661631][ T143] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 218.727807][ T5832] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 218.760193][ T6316] BTRFS warning (device loop1): couldn't read tree root [ 218.767549][ T6316] BTRFS warning (device loop1): try to load backup roots slot 2 [ 218.783367][ T1084] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 218.859418][ T6316] BTRFS warning (device loop1): couldn't read tree root [ 218.870750][ T6316] BTRFS warning (device loop1): try to load backup roots slot 3 [ 218.924906][ T6316] BTRFS info (device loop1): rebuilding free space tree [ 218.952725][ T6316] BTRFS info (device loop1): checking UUID tree [ 218.976131][ T6316] BTRFS info (device loop1): enabling ssd optimizations [ 218.983580][ T6316] BTRFS info (device loop1): turning on async discard [ 218.990521][ T6316] BTRFS info (device loop1): enabling free space tree [ 218.997652][ T6316] BTRFS info (device loop1): force clearing of disk cache [ 219.005924][ T6316] BTRFS info (device loop1): enabling auto defrag [ 219.018744][ T6316] BTRFS info (device loop1): trying to use backup root at mount time [ 219.027089][ T6316] BTRFS info (device loop1): use zstd compression, level 3 [ 219.107147][ T1084] hfsplus: b-tree write err: -5, ino 20 [ 219.133077][ T5832] usb 5-1: USB disconnect, device number 4 [ 219.196657][ T1084] hfsplus: invalid length 32517 has been corrected to 255 [ 219.206235][ T5832] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 219.267421][ T1084] hfsplus: b-tree write err: -5, ino 22 [ 219.794461][ T6347] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 219.819550][ T5779] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 220.670298][ T6358] loop5: detected capacity change from 0 to 7 [ 220.715446][ T6358] Dev loop5: unable to read RDB block 7 [ 220.741370][ T6358] loop5: AHDI p4 [ 220.771833][ T6358] loop5: partition table partially beyond EOD, truncated [ 221.042389][ T5832] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 221.252167][ T5832] usb 5-1: Using ep0 maxpacket: 32 [ 221.288800][ T5832] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 221.322772][ T5832] usb 5-1: config 0 has no interface number 0 [ 221.375019][ T5832] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 221.412715][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.452184][ T5832] usb 5-1: Product: syz [ 221.456706][ T5832] usb 5-1: Manufacturer: syz [ 221.461465][ T5832] usb 5-1: SerialNumber: syz [ 221.539170][ T5832] usb 5-1: config 0 descriptor?? [ 222.511735][ T6375] loop1: detected capacity change from 0 to 2048 [ 222.590884][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.646643][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.739251][ T6375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.856320][ T5832] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 222.888177][ T5832] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 222.899847][ T5832] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 222.919247][ T5832] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 222.985450][ T5832] usb 5-1: USB disconnect, device number 5 [ 223.020072][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.055768][ T6375] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.122: bg 0: block 234: padding at end of block bitmap is not set [ 223.079590][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.169173][ T6375] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 66 with error 117 [ 223.227755][ T6375] EXT4-fs (loop1): This should not happen!! Data will be lost [ 223.227755][ T6375] [ 223.585341][ T6388] loop2: detected capacity change from 0 to 512 [ 223.691549][ T5779] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 223.707989][ T6388] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 223.788879][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.885166][ T6388] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.125: bad orphan inode 131083 [ 223.950398][ T6388] loop2: lost filesystem error report for type 5 error -117 [ 223.952020][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 223.966179][ C1] EXT4-fs (loop2): initial error at time 1775812474: ext4_orphan_get:1423 [ 223.975005][ C1] EXT4-fs (loop2): last error at time 1775812474: ext4_orphan_get:1423 [ 223.984806][ T6388] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.297610][ T6400] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 224.532108][ T5835] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 224.676703][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.776602][ T5835] usb 5-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 224.801051][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.856435][ T5835] usb 5-1: Product: syz [ 224.860789][ T5835] usb 5-1: Manufacturer: syz [ 224.921526][ T5835] usb 5-1: SerialNumber: syz [ 225.252436][ T5832] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 225.399168][ T5835] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 225.446786][ T5835] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 225.486510][ T5832] usb 2-1: Using ep0 maxpacket: 32 [ 225.537787][ T5832] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 225.592244][ T5832] usb 2-1: config 2 has no interface number 0 [ 225.614127][ T6414] loop5: detected capacity change from 0 to 128 [ 225.620892][ T5832] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 225.662698][ T5832] usb 2-1: config 2 interface 88 has no altsetting 0 [ 225.726870][ T5832] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 225.748309][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.761003][ T6414] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 225.773588][ T5832] usb 2-1: Product: syz [ 225.773695][ T5832] usb 2-1: Manufacturer: syz [ 225.773788][ T5832] usb 2-1: SerialNumber: syz [ 225.811271][ T6414] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 225.864927][ T6408] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 226.144824][ T6414] process 'syz.5.134' launched './file1' with NULL argv: empty string added [ 226.204657][ T6408] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 226.249958][ T6419] Invalid argument reading file caps for ./file0 [ 226.276675][ T5835] usb 5-1: USB disconnect, device number 6 [ 226.480110][ T6417] loop3: detected capacity change from 0 to 2048 [ 226.632694][ T6417] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.665077][ T6065] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 226.720560][ T6036] udevd[6036]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.737402][ T6421] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 226.832078][ T29] audit: type=1800 audit(1775812477.878:5): pid=6417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.135" name="file1" dev="loop3" ino=1367 res=0 errno=0 [ 227.345617][ T6424] loop2: detected capacity change from 0 to 2048 [ 227.469586][ T6424] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 227.499045][ T5832] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 227.550678][ T6424] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 227.560371][ T5832] asix 2-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 227.601756][ T5832] asix 2-1:2.88: probe with driver asix failed with error -71 [ 227.672805][ T5832] usb 2-1: USB disconnect, device number 3 [ 228.586173][ T6442] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 228.651781][ T6439] loop4: detected capacity change from 0 to 128 [ 228.778888][ T6439] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 228.862210][ T6439] hpfs: filesystem error: improperly stopped [ 228.919086][ T6439] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 229.018722][ T6439] hpfs: You really don't want any checks? You are crazy... [ 229.085292][ T6439] hpfs: Code page index out of array [ 229.090729][ T6439] hpfs: code page support is disabled [ 229.200222][ T6439] hpfs: hpfs_map_4sectors(): unaligned read [ 229.237963][ T6439] hpfs: hpfs_map_4sectors(): unaligned read [ 229.278185][ T6439] hpfs: filesystem error: unable to find root dir [ 229.400674][ T6437] loop3: detected capacity change from 0 to 40427 [ 229.424920][ T6437] F2FS-fs (loop3): build fault injection rate: 771 [ 229.437296][ T6446] loop5: detected capacity change from 0 to 1024 [ 229.495045][ T6437] F2FS-fs (loop3): invalid crc value [ 229.768677][ T6437] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 229.783961][ T6437] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 230.268755][ T6459] loop1: detected capacity change from 0 to 16 [ 230.294439][ T6456] input: syz0 as /devices/virtual/input/input7 [ 230.328494][ T6459] erofs (device loop1): mounted with root inode @ nid 36. [ 230.384940][ T6459] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 232.003166][ T6476] loop4: detected capacity change from 0 to 256 [ 232.086483][ T6476] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 232.207592][ T6476] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 233.704516][ T6489] loop2: detected capacity change from 0 to 256 [ 233.853043][ T6489] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 233.902427][ T6489] FAT-fs (loop2): Filesystem has been set read-only [ 234.072650][ T5835] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 234.183933][ T5838] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 234.262257][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.346397][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.382455][ T5838] usb 2-1: Using ep0 maxpacket: 16 [ 234.394274][ T5835] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 234.429810][ T5838] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 234.459037][ T5838] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.480783][ T5835] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 234.524090][ T5838] usb 2-1: config 1 has no interface number 0 [ 234.530388][ T5838] usb 2-1: config 1 interface 105 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 234.540803][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.596448][ T5838] usb 2-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.642105][ T5835] usb 4-1: config 0 descriptor?? [ 234.650613][ T5838] usb 2-1: config 1 interface 105 has no altsetting 0 [ 234.704195][ T5838] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 234.762090][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 234.807112][ T5838] usb 2-1: Product: syz [ 234.811577][ T5838] usb 2-1: Manufacturer: syz [ 234.867423][ T5838] usb 2-1: SerialNumber: syz [ 235.176075][ T5838] aqc111 2-1:1.105: probe with driver aqc111 failed with error -22 [ 235.271078][ T5835] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 235.369544][ T5831] usb 2-1: USB disconnect, device number 4 [ 235.437155][ T5835] usb 4-1: USB disconnect, device number 3 [ 235.997404][ T6510] fido_id[6510]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 236.772270][ T5835] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 236.972133][ T5835] usb 2-1: Using ep0 maxpacket: 8 [ 237.018917][ T5835] usb 2-1: config 1 interface 0 has no altsetting 0 [ 237.079118][ T5835] usb 2-1: string descriptor 0 read error: -22 [ 237.097872][ T5835] usb 2-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.40 [ 237.140735][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.506962][ T5838] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 237.690887][ T5838] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 237.731152][ T5835] apple 0003:05AC:022B.0003: unexpected long global item [ 237.760487][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 237.790152][ T5835] apple 0003:05AC:022B.0003: parse failed [ 237.804668][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 237.816653][ T5835] apple 0003:05AC:022B.0003: probe with driver apple failed with error -22 [ 237.827939][ T6540] loop5: detected capacity change from 0 to 1024 [ 237.837549][ T5838] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 237.870712][ T5838] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 237.934301][ T5835] usb 2-1: USB disconnect, device number 5 [ 237.940926][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.035761][ T5838] usb 4-1: config 0 descriptor?? [ 238.071058][ T6540] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.456884][ T6547] loop2: detected capacity change from 0 to 1024 [ 238.564099][ T6547] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 238.605625][ T6547] System zones: 0-1, 3-12 [ 238.633347][ T6547] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.662978][ T5838] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 238.847789][ T6065] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.902723][ T5838] usb 4-1: USB disconnect, device number 4 [ 239.019823][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 239.275757][ T6550] fido_id[6550]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 239.394054][ T5835] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 239.627640][ T5835] usb 5-1: unable to get BOS descriptor or descriptor too short [ 239.687923][ T5835] usb 5-1: not running at top speed; connect to a high speed hub [ 239.803180][ T5835] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 239.836035][ T6561] loop1: detected capacity change from 0 to 512 [ 239.843408][ T5835] usb 5-1: config 1 interface 0 has no altsetting 0 [ 239.870020][ T5835] usb 5-1: string descriptor 0 read error: -22 [ 239.905421][ T5835] usb 5-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.40 [ 239.946270][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.015344][ T6564] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.193'. [ 240.048457][ T6553] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 240.608943][ T5835] sony 0003:054C:0374.0005: invalid report_size -1149171161 [ 240.684426][ T5835] sony 0003:054C:0374.0005: item 0 4 1 7 parsing failed [ 240.741303][ T5835] sony 0003:054C:0374.0005: parse failed [ 240.805560][ T5835] sony 0003:054C:0374.0005: probe with driver sony failed with error -22 [ 240.910359][ T5835] usb 5-1: USB disconnect, device number 7 [ 241.007955][ T6573] loop3: detected capacity change from 0 to 128 [ 241.146401][ T6573] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 241.183630][ T6573] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 241.304419][ T6573] Invalid argument reading file caps for ./file0 [ 241.534198][ T6580] loop1: detected capacity change from 0 to 2048 [ 241.582223][ T5838] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 241.675084][ T5787] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 241.735583][ T6580] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 241.782436][ T5838] usb 3-1: Using ep0 maxpacket: 32 [ 241.857759][ T5838] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 241.906571][ T5838] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 241.968841][ T5838] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 242.014557][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 242.060670][ T5838] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 242.122257][ T5838] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 242.202380][ T5838] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 242.211651][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.214209][ T6589] loop5: detected capacity change from 0 to 512 [ 242.294809][ T5838] usb 3-1: config 0 descriptor?? [ 242.570914][ T5838] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 242.841686][ T5838] usb 3-1: USB disconnect, device number 2 [ 242.868170][ T5838] usblp0: removed [ 243.936414][ T6611] netlink: 'syz.2.209': attribute type 3 has an invalid length. [ 244.572472][ T5838] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 244.772276][ T5838] usb 2-1: Using ep0 maxpacket: 32 [ 244.803841][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.860691][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.902617][ T5838] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 244.986428][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.011192][ T5838] usb 2-1: config 0 descriptor?? [ 245.029308][ T6629] netlink: 20 bytes leftover after parsing attributes in process `syz.2.215'. [ 245.101613][ T6629] netlink: 20 bytes leftover after parsing attributes in process `syz.2.215'. [ 245.584937][ T6640] loop5: detected capacity change from 0 to 512 [ 245.596090][ T5838] logitech 0003:046D:C29C.0006: hidraw0: USB HID vb4.30 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 245.663909][ T6640] EXT4-fs: Ignoring removed orlov option [ 245.799644][ T6640] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 245.824002][ T6640] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.218: invalid indirect mapped block 2683928664 (level 1) [ 245.904173][ T5838] logitech 0003:046D:C29C.0006: no inputs found [ 245.958051][ T5838] usb 2-1: USB disconnect, device number 6 [ 245.960248][ T6632] loop3: detected capacity change from 0 to 4096 [ 245.969590][ T6640] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 245.981985][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 245.997964][ C0] EXT4-fs (loop5): initial error at time 1775812497: ext4_free_branches:1023: inode 13 [ 246.007944][ C0] EXT4-fs (loop5): last error at time 1775812497: ext4_free_branches:1023: inode 13 [ 246.052510][ T6640] EXT4-fs (loop5): 1 truncate cleaned up [ 246.091330][ T6640] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.467502][ T6647] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 246.599814][ T6065] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.972330][ T6646] fido_id[6646]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 247.948222][ T6664] loop5: detected capacity change from 0 to 1024 [ 248.118638][ T6664] hfsplus: b-tree write err: -5, ino 2 [ 248.193091][ T6664] hfsplus: bad catalog entry type [ 248.470907][ T57] hfsplus: b-tree write err: -5, ino 25 [ 248.508810][ T57] hfsplus: b-tree write err: -5, ino 4 [ 248.530560][ T57] hfsplus: b-tree write err: -5, ino 2 [ 248.552672][ T57] hfsplus: b-tree write err: -5, ino 26 [ 248.578537][ T6668] kvm: MONITOR instruction emulated as NOP! [ 248.637819][ T6660] loop4: detected capacity change from 0 to 8192 [ 248.737365][ T6660] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 249.182438][ T5838] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 249.414656][ T5838] usb 6-1: Using ep0 maxpacket: 32 [ 249.483287][ T5838] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 249.510459][ T6677] loop4: detected capacity change from 0 to 128 [ 249.542262][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.621674][ T5838] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 249.690878][ T29] audit: type=1800 audit(1775812500.708:6): pid=6677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.232" name="bus" dev="loop4" ino=1048618 res=0 errno=0 [ 249.755585][ T6677] syz.4.232: attempt to access beyond end of device [ 249.755585][ T6677] loop4: rw=0, sector=121, nr_sectors = 75 limit=128 [ 251.103787][ T5838] usb 6-1: USB disconnect, device number 2 [ 251.295406][ T6701] binder: 6699:6701 ioctl c0306201 200000000640 returned -14 [ 252.104811][ T6714] loop1: detected capacity change from 0 to 128 [ 252.154228][ T6716] netlink: 24 bytes leftover after parsing attributes in process `syz.5.247'. [ 252.178930][ T6714] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 252.241134][ T6714] hpfs: filesystem error: improperly stopped [ 252.271140][ T6714] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 252.326523][ T6714] hpfs: You really don't want any checks? You are crazy... [ 252.347394][ T6714] hpfs: Code page index out of array [ 252.362435][ T6714] hpfs: code page support is disabled [ 252.381141][ T6714] hpfs: hpfs_map_4sectors(): unaligned read [ 252.442212][ T6714] hpfs: hpfs_map_4sectors(): unaligned read [ 252.448258][ T6714] hpfs: filesystem error: unable to find root dir [ 252.582912][ T6714] hpfs: hpfs_map_4sectors(): unaligned read [ 253.016192][ T6726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.251'. [ 253.102102][ T6726] netlink: 'syz.4.251': attribute type 12 has an invalid length. [ 253.234600][ T6726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.251'. [ 253.237028][ T35] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.302413][ T6726] netlink: 'syz.4.251': attribute type 12 has an invalid length. [ 253.362308][ T35] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.389305][ T35] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.431573][ T6737] loop3: detected capacity change from 0 to 16 [ 253.468448][ T35] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.487732][ T5832] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 253.504958][ T6734] loop1: detected capacity change from 0 to 512 [ 253.516556][ T6737] erofs (device loop3): mounted with root inode @ nid 36. [ 253.642562][ T6734] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 253.677368][ T6734] EXT4-fs (loop1): orphan cleanup on readonly fs [ 253.682209][ T5832] usb 6-1: Using ep0 maxpacket: 8 [ 253.734232][ T5832] usb 6-1: config 0 has no interfaces? [ 253.758191][ T5832] usb 6-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10 [ 253.769529][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.778102][ T5832] usb 6-1: Product: syz [ 253.782750][ T5832] usb 6-1: Manufacturer: syz [ 253.787498][ T5832] usb 6-1: SerialNumber: syz [ 253.797247][ T5832] usb 6-1: config 0 descriptor?? [ 253.807853][ T6734] Quota error (device loop1): v2_read_file_info: Can't read info structure [ 253.885503][ T6734] EXT4-fs warning (device loop1): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 253.952510][ T6734] EXT4-fs (loop1): Cannot turn on quotas: error -5 [ 253.997580][ T6734] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.253: bg 0: block 64: padding at end of block bitmap is not set [ 254.052373][ T6728] clip:clip_setentry: non-CLIP VCC [ 254.065611][ T5835] usb 6-1: USB disconnect, device number 3 [ 254.099205][ T6734] loop1: lost filesystem error report for type 5 error -117 [ 254.101993][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 254.116507][ C0] EXT4-fs (loop1): initial error at time 1775812505: ext4_validate_block_bitmap:441 [ 254.126214][ C0] EXT4-fs (loop1): last error at time 1775812505: ext4_validate_block_bitmap:441 [ 254.168188][ T6744] netlink: 52 bytes leftover after parsing attributes in process `syz.4.256'. [ 254.181640][ T6744] virtio-fs: tag <./cgroup> not found [ 254.899790][ T6746] sd 0:0:1:0: PR command failed: 1026 [ 254.905578][ T6746] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 254.912602][ T6746] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 254.983711][ T6734] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 255.052544][ T6734] loop1: lost filesystem error report for type 5 error -117 [ 255.072998][ T6734] EXT4-fs (loop1): 1 truncate cleaned up [ 255.443664][ T6734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 255.912974][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.973866][ T6779] sd 0:0:1:0: PR command failed: 1026 [ 257.979553][ T6779] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 257.986841][ T6779] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 258.249885][ T6784] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 258.322900][ T6784] overlayfs: failed to set xattr on upper [ 258.382484][ T6784] overlayfs: ...falling back to redirect_dir=nofollow. [ 258.466305][ T6784] overlayfs: ...falling back to index=off. [ 258.571403][ T6784] overlayfs: ...falling back to uuid=null. [ 258.577863][ T6784] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 258.592529][ T6786] loop1: detected capacity change from 0 to 1024 [ 258.645670][ T6786] EXT4-fs: Ignoring removed orlov option [ 258.774420][ T6786] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 258.789854][ T6786] System zones: 0-1, 3-12 [ 258.836517][ T6786] EXT4-fs (loop1): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.934074][ T1098] Bluetooth: hci5: Frame reassembly failed (-84) [ 258.978494][ T5073] Bluetooth: hci5: unexpected event 0x02 length: 0 < 1 [ 259.104265][ T6786] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 259.371479][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 259.771117][ T6806] netlink: 52 bytes leftover after parsing attributes in process `syz.1.279'. [ 260.722905][ T6818] netlink: 'syz.2.285': attribute type 12 has an invalid length. [ 260.763968][ T6818] netlink: 'syz.2.285': attribute type 29 has an invalid length. [ 260.786121][ T6818] netlink: 148 bytes leftover after parsing attributes in process `syz.2.285'. [ 260.859613][ T6818] netlink: 'syz.2.285': attribute type 2 has an invalid length. [ 260.924349][ T5073] Bluetooth: hci5: command 0x1003 tx timeout [ 260.952507][ T5786] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 261.368747][ T6826] sd 0:0:1:0: PR command failed: 1026 [ 261.374549][ T6826] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 261.381540][ T6826] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 262.037683][ T5831] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 262.217602][ T5831] usb 4-1: Using ep0 maxpacket: 16 [ 262.316447][ T6836] netlink: 52 bytes leftover after parsing attributes in process `syz.4.290'. [ 262.370907][ T6836] virtio-fs: tag <./cgroup> not found [ 262.973543][ T5831] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 262.985887][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 263.004368][ T5831] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 263.014631][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.022964][ T5831] usb 4-1: Product: syz [ 263.027278][ T5831] usb 4-1: Manufacturer: syz [ 263.032112][ T5831] usb 4-1: SerialNumber: syz [ 263.073173][ T5831] usb 4-1: config 0 descriptor?? [ 263.117710][ T5831] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 263.132267][ T5831] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 263.262748][ T5838] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 263.457640][ T5838] usb 2-1: Using ep0 maxpacket: 32 [ 263.469285][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.510696][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.561343][ T5838] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 263.595028][ T5838] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 263.625333][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.692873][ T5838] usb 2-1: config 0 descriptor?? [ 263.807807][ T5831] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 263.830774][ T5831] em28xx 4-1:0.0: Config register raw data: 0x72 [ 263.838819][ T5831] em28xx 4-1:0.0: I2S Audio (3 sample rate(s)) [ 263.847068][ T5831] em28xx 4-1:0.0: No AC97 audio processor [ 264.416917][ T5838] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0007/input/input10 [ 264.441143][ T5831] usb 4-1: USB disconnect, device number 5 [ 264.598860][ T5838] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0007/input/input11 [ 264.813992][ T5838] kye 0003:0458:5011.0007: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 265.426081][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.439513][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.542845][ C0] kye 0003:0458:5011.0007: usb_submit_urb(ctrl) failed: -1 [ 266.755169][ T5831] usb 2-1: USB disconnect, device number 7 [ 266.887708][ T6877] sd 0:0:1:0: PR command failed: 1026 [ 266.893562][ T6877] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 266.900553][ T6877] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 267.018223][ T6876] netlink: 52 bytes leftover after parsing attributes in process `syz.2.303'. [ 267.096400][ T6876] virtio-fs: tag <./cgroup> not found [ 269.082757][ T6897] netlink: 28 bytes leftover after parsing attributes in process `syz.2.307'. [ 269.328147][ T6897] loop2: detected capacity change from 0 to 2048 [ 269.664877][ T6897] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 271.852488][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 271.955275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 272.087902][ T6903] netlink: 'syz.4.311': attribute type 29 has an invalid length. [ 272.096439][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.311'. [ 272.124499][ T6903] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 272.934015][ T6905] loop3: detected capacity change from 0 to 1024 [ 272.963937][ T6905] EXT4-fs: Ignoring removed orlov option [ 273.162550][ T5838] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 273.167369][ T6916] loop4: detected capacity change from 0 to 512 [ 273.209639][ T6905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.287165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 273.592779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 273.695356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 273.839392][ T6920] sd 0:0:1:0: PR command failed: 1026 [ 273.845168][ T6920] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 273.852179][ T6920] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 273.900549][ T6916] EXT4-fs: Ignoring removed orlov option [ 274.105510][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 274.693002][ T6916] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 274.806909][ T6916] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.315: invalid indirect mapped block 2683928664 (level 1) [ 274.992795][ T6916] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 275.002030][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 275.018061][ C1] EXT4-fs (loop4): initial error at time 1775812526: ext4_free_branches:1023: inode 13 [ 275.028062][ C1] EXT4-fs (loop4): last error at time 1775812526: ext4_free_branches:1023: inode 13 [ 275.166169][ T5838] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.182944][ T6916] EXT4-fs (loop4): 1 truncate cleaned up [ 275.224011][ T6916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.476389][ T6928] netlink: 52 bytes leftover after parsing attributes in process `syz.1.317'. [ 275.531543][ T6928] virtio-fs: tag <./cgroup> not found [ 275.581100][ T5838] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 275.725235][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.732182][ T6918] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 275.926944][ T5838] usb 3-1: Product: syz [ 276.017109][ T5838] usb 3-1: Manufacturer: syz [ 276.068905][ T6918] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 276.108295][ T5838] usb 3-1: SerialNumber: syz [ 276.361467][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.433268][ T5783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.644415][ T5838] usb 3-1: can't set config #1, error -71 [ 276.672069][ T5838] usb 3-1: USB disconnect, device number 3 [ 276.998947][ T6940] netlink: 52 bytes leftover after parsing attributes in process `syz.2.322'. [ 277.060629][ T6940] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.069397][ T6940] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.203302][ T6944] netlink: 52 bytes leftover after parsing attributes in process `syz.2.322'. [ 277.538870][ T6934] loop4: detected capacity change from 0 to 32768 [ 277.594971][ T6934] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 278.706842][ T6963] netlink: 28 bytes leftover after parsing attributes in process `syz.1.323'. [ 278.948606][ T6963] loop1: detected capacity change from 0 to 2048 [ 279.043109][ T5832] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 279.234084][ T6963] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 281.712079][ T5832] usb 6-1: Using ep0 maxpacket: 16 [ 282.236057][ T6934] XFS (loop4): Ending clean mount [ 282.580757][ T5783] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 282.691235][ T5832] usb 6-1: device descriptor read/all, error -71 [ 283.589463][ T6972] netlink: 20 bytes leftover after parsing attributes in process `syz.5.329'. [ 283.703600][ T6972] netlink: 20 bytes leftover after parsing attributes in process `syz.5.329'. [ 284.484156][ T6982] netlink: 52 bytes leftover after parsing attributes in process `syz.4.331'. [ 284.523933][ T6982] virtio-fs: tag <./cgroup> not found [ 285.415129][ T6987] capability: warning: `syz.5.344' uses deprecated v2 capabilities in a way that may be insecure [ 285.825627][ T6993] netlink: 27 bytes leftover after parsing attributes in process `syz.1.336'. [ 287.083326][ T7004] netlink: 28 bytes leftover after parsing attributes in process `syz.5.337'. [ 287.335667][ T7004] loop5: detected capacity change from 0 to 2048 [ 287.605378][ T7004] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 291.103557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 291.205464][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 291.615543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 291.922511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 292.914969][ T7021] netlink: 52 bytes leftover after parsing attributes in process `syz.3.345'. [ 292.961011][ T7021] virtio-fs: tag <./cgroup> not found [ 293.484199][ T5785] Bluetooth: hci2: command 0x0406 tx timeout [ 293.490410][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 293.497138][ T5785] Bluetooth: hci4: command 0x0406 tx timeout [ 294.394520][ T7030] netlink: 'syz.5.347': attribute type 29 has an invalid length. [ 294.402790][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.5.347'. [ 294.411736][ T7030] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 294.881003][ T7037] loop2: detected capacity change from 0 to 1024 [ 295.044593][ T7037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.223001][ T7048] loop3: detected capacity change from 0 to 512 [ 295.277712][ T7048] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 295.368982][ T7048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.478737][ T7048] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 295.620956][ T29] audit: type=1800 audit(1775812546.668:7): pid=7052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.353" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 296.390217][ T7056] loop4: detected capacity change from 0 to 256 [ 296.516817][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.520418][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.603184][ T7058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.354'. [ 296.848020][ T7058] loop1: detected capacity change from 0 to 2048 [ 297.115053][ T7058] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 299.149837][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.357'. [ 300.181429][ T7066] loop3: detected capacity change from 0 to 128 [ 300.244745][ T7065] loop2: detected capacity change from 0 to 512 [ 300.369695][ T7065] EXT4-fs: Ignoring removed oldalloc option [ 300.543199][ T7066] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 300.842229][ T7066] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 301.176907][ T7065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.381596][ T7065] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 301.487771][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.710718][ T5787] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 302.023573][ T7081] netlink: 'syz.4.362': attribute type 29 has an invalid length. [ 302.031478][ T7081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.362'. [ 302.040568][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.071283][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.227770][ T7081] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 302.312525][ T7085] netlink: 36 bytes leftover after parsing attributes in process `syz.5.365'. [ 302.398521][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.705585][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.927960][ T29] audit: type=1326 audit(1775812553.978:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.2.366" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82a1d9c819 code=0x0 [ 303.454061][ T7093] block nbd2: shutting down sockets [ 303.572743][ T5835] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 303.682932][ T57] bridge_slave_1: left allmulticast mode [ 304.267956][ T57] bridge_slave_1: left promiscuous mode [ 304.278545][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.388010][ T7113] netlink: 28 bytes leftover after parsing attributes in process `syz.5.370'. [ 304.635743][ T7113] loop5: detected capacity change from 0 to 2048 [ 305.285557][ T57] bridge_slave_0: left allmulticast mode [ 305.291560][ T57] bridge_slave_0: left promiscuous mode [ 305.312586][ T5835] usb 5-1: Using ep0 maxpacket: 8 [ 305.319616][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.325787][ T7113] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 309.362504][ T5835] usb 5-1: unable to get BOS descriptor or descriptor too short [ 309.401493][ T5835] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 309.462697][ T5835] usb 5-1: can't read configurations, error -71 [ 311.047710][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.100835][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.208516][ T57] bond0 (unregistering): Released all slaves [ 312.030201][ T7149] netlink: 16 bytes leftover after parsing attributes in process `syz.3.383'. [ 312.127835][ T7152] loop1: detected capacity change from 0 to 128 [ 312.610260][ T7152] syz.1.384: attempt to access beyond end of device [ 312.610260][ T7152] loop1: rw=8390657, sector=138, nr_sectors = 2 limit=128 [ 312.722914][ T7152] Buffer I/O error on dev loop1, logical block 69, lost async page write [ 312.749614][ T7152] syz.1.384: attempt to access beyond end of device [ 312.749614][ T7152] loop1: rw=8390657, sector=140, nr_sectors = 2 limit=128 [ 312.769341][ T7160] netlink: 'syz.3.386': attribute type 4 has an invalid length. [ 312.813393][ T7152] Buffer I/O error on dev loop1, logical block 70, lost async page write [ 312.824105][ T7160] netlink: 'syz.3.386': attribute type 8 has an invalid length. [ 312.853357][ T7152] syz.1.384: attempt to access beyond end of device [ 312.853357][ T7152] loop1: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 312.872754][ T7160] netlink: 'syz.3.386': attribute type 1 has an invalid length. [ 312.897883][ T7160] netlink: 180 bytes leftover after parsing attributes in process `syz.3.386'. [ 312.925865][ T7152] Buffer I/O error on dev loop1, logical block 71, lost async page write [ 312.979966][ T7160] NCSI netlink: No device for ifindex 7388460 [ 314.116286][ T7152] syz.1.384: attempt to access beyond end of device [ 314.116286][ T7152] loop1: rw=8390657, sector=138, nr_sectors = 2 limit=128 [ 314.372265][ T7152] Buffer I/O error on dev loop1, logical block 69, lost async page write [ 314.419847][ T7152] syz.1.384: attempt to access beyond end of device [ 314.419847][ T7152] loop1: rw=8390657, sector=140, nr_sectors = 2 limit=128 [ 314.512007][ T7152] Buffer I/O error on dev loop1, logical block 70, lost async page write [ 314.521219][ T7152] syz.1.384: attempt to access beyond end of device [ 314.521219][ T7152] loop1: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 314.627200][ T7152] Buffer I/O error on dev loop1, logical block 71, lost async page write [ 315.753659][ T57] hsr_slave_0: left promiscuous mode [ 315.795659][ T57] hsr_slave_1: left promiscuous mode [ 315.827097][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.879653][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.952755][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.002206][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.169035][ T57] veth1_macvtap: left promiscuous mode [ 316.184335][ T57] veth0_macvtap: left promiscuous mode [ 316.241187][ T57] veth1_vlan: left promiscuous mode [ 316.262196][ T57] veth0_vlan: left promiscuous mode [ 316.515381][ T7195] loop3: detected capacity change from 0 to 512 [ 316.580478][ T7199] sg_write: data in/out 1701604413/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 316.580478][ T7199] program syz.1.397 not setting count and/or reply_len properly [ 316.619312][ T7199] sg_write: data in/out 1701604413/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 316.619312][ T7199] program syz.1.397 not setting count and/or reply_len properly [ 316.641027][ T7199] sg_write: data in/out 1701604413/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 316.641027][ T7199] program syz.1.397 not setting count and/or reply_len properly [ 316.666000][ T7195] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 316.667765][ T7199] sg_write: data in/out 1701604413/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 316.667765][ T7199] program syz.1.397 not setting count and/or reply_len properly [ 316.732882][ T7195] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 316.815632][ T7195] EXT4-fs (loop3): 1 truncate cleaned up [ 316.890365][ T7195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.047970][ T7195] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #2: block 4: comm syz.3.394: lblock 0 mapped to illegal pblock 4 (length 1) [ 317.468336][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.062193][ T795] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 318.075080][ T7216] fuse: root generation should be zero [ 318.277707][ T795] usb 3-1: Using ep0 maxpacket: 32 [ 318.372997][ T795] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.423432][ T795] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.498430][ T795] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 318.550883][ T795] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 318.600418][ T795] usb 3-1: Product: syz [ 318.625035][ T795] usb 3-1: Manufacturer: syz [ 318.683018][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 319.006344][ T795] hub 3-1:4.0: USB hub found [ 319.225595][ T7233] netlink: 52 bytes leftover after parsing attributes in process `syz.5.406'. [ 319.310238][ T7233] virtio-fs: tag <./cgroup> not found [ 319.563774][ T795] hub 3-1:4.0: 2 ports detected [ 320.157045][ T57] team0 (unregistering): Port device team_slave_1 removed [ 320.339397][ T57] team0 (unregistering): Port device team_slave_0 removed [ 320.686287][ T795] hub 3-1:4.0: hub_hub_status failed (err = -32) [ 320.710324][ T795] hub 3-1:4.0: config failed, can't get hub status (err -32) [ 321.042920][ T5831] usb 3-1: USB disconnect, device number 4 [ 321.467931][ T7235] syzkaller1: entered promiscuous mode [ 321.498326][ T7235] syzkaller1: entered allmulticast mode [ 322.783627][ T7275] netlink: 24 bytes leftover after parsing attributes in process `syz.3.416'. [ 322.802246][ T5831] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 323.005268][ T5831] usb 3-1: Using ep0 maxpacket: 8 [ 323.444241][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 323.673729][ T5831] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 323.813142][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.229491][ T5831] usb 3-1: config 0 descriptor?? [ 324.634353][ T5831] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 324.860015][ T7290] loop1: detected capacity change from 0 to 128 [ 324.875484][ C1] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 324.910247][ T5832] usb 3-1: USB disconnect, device number 5 [ 324.963659][ T7290] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 325.154397][ T7290] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 325.223141][ T7290] ext2 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.742277][ T5779] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 326.360320][ T7314] loop1: detected capacity change from 0 to 1024 [ 326.548725][ T7314] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.713706][ T7314] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 326.768790][ T7314] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 326.859352][ T7314] EXT4-fs (loop1): This should not happen!! Data will be lost [ 326.859352][ T7314] [ 326.875259][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.882583][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.893377][ T7314] EXT4-fs (loop1): Total free blocks count 0 [ 326.990515][ T7314] EXT4-fs (loop1): Free/Dirty block details [ 327.057662][ T7314] EXT4-fs (loop1): free_blocks=20480 [ 327.092724][ T7314] EXT4-fs (loop1): dirty_blocks=16 [ 327.196763][ T7314] EXT4-fs (loop1): Block reservation details [ 327.220303][ T7314] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 327.301178][ T7328] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 327.925110][ T5779] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 328.114570][ T5831] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 328.576996][ T5831] usb 6-1: Using ep0 maxpacket: 32 [ 329.340899][ T7345] loop4: detected capacity change from 0 to 256 [ 329.377170][ T5831] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 329.391677][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.404192][ T5831] usb 6-1: Product: syz [ 329.408456][ T5831] usb 6-1: Manufacturer: syz [ 329.413288][ T5831] usb 6-1: SerialNumber: syz [ 329.424956][ T5831] usb 6-1: config 0 descriptor?? [ 329.687211][ T5831] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 329.794625][ T7345] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 329.934515][ T29] audit: type=1800 audit(1775812580.928:9): pid=7345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.435" name="file1" dev="loop4" ino=1048620 res=0 errno=0 [ 330.646084][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.436'. [ 331.402412][ T5831] gspca_ov534_9: reg_r err -71 [ 331.563157][ T7370] netlink: 116 bytes leftover after parsing attributes in process `syz.2.440'. [ 331.692326][ T5831] gspca_ov534_9: Unknown sensor 0000 [ 331.693403][ T5831] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 332.233083][ T5831] usb 6-1: USB disconnect, device number 6 [ 332.874867][ T5838] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 333.089771][ T5838] usb 2-1: Using ep0 maxpacket: 32 [ 333.150263][ T5838] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 333.151439][ T7382] loop4: detected capacity change from 0 to 512 [ 333.176264][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.252736][ T5838] usb 2-1: Product: syz [ 333.270838][ T5838] usb 2-1: Manufacturer: syz [ 333.308175][ T5838] usb 2-1: SerialNumber: syz [ 333.388541][ T5838] usb 2-1: config 0 descriptor?? [ 333.434009][ T7382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.501758][ T5838] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 333.704617][ T12] ===================================================== [ 333.712114][ T12] BUG: KMSAN: uninit-value in n_tty_lookahead_flow_ctrl+0x37c/0x740 [ 333.720412][ T12] n_tty_lookahead_flow_ctrl+0x37c/0x740 [ 333.726544][ T12] tty_port_default_lookahead_buf+0x146/0x200 [ 333.733003][ T12] flush_to_ldisc+0x808/0xe40 [ 333.737812][ T12] process_scheduled_works+0xb82/0x1e80 [ 333.748754][ T12] worker_thread+0xee4/0x1590 [ 333.758989][ T12] kthread+0x53f/0x600 [ 333.763370][ T12] ret_from_fork+0x20f/0x910 [ 333.768102][ T12] ret_from_fork_asm+0x1a/0x30 [ 333.773156][ T12] [ 333.775539][ T12] Uninit was created at: [ 333.779976][ T12] __kmalloc_noprof+0x486/0x1680 [ 333.785326][ T12] __tty_buffer_request_room+0x3d4/0x7a0 [ 333.791102][ T12] __tty_insert_flip_string_flags+0x157/0x6e0 [ 333.797443][ T12] uart_insert_char+0x368/0x930 [ 333.806985][ T12] serial8250_read_char+0x1ba/0x670 [ 333.813740][ T12] serial8250_handle_irq_locked+0x6d4/0xa40 [ 333.819829][ T12] serial8250_handle_irq+0x187/0x730 [ 333.825491][ T12] serial8250_default_handle_irq+0x116/0x370 [ 333.831619][ T12] serial8250_interrupt+0xcb/0x420 [ 333.837103][ T12] __handle_irq_event_percpu+0x13c/0xf90 [ 333.843150][ T12] handle_irq_event+0xe0/0x2a0 [ 333.848048][ T12] handle_edge_irq+0x2a9/0xb30 [ 333.853174][ T12] __common_interrupt+0x9d/0x180 [ 333.858399][ T12] common_interrupt+0x94/0xb0 [ 333.863358][ T12] asm_common_interrupt+0x2b/0x40 [ 333.868524][ T12] [ 333.870951][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 333.880606][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 333.890917][ T12] Workqueue: events_unbound flush_to_ldisc [ 333.896996][ T12] ===================================================== [ 333.907563][ T12] Disabling lock debugging due to kernel taint [ 334.147157][ T12] Kernel panic - not syncing: kmsan.panic set ... [ 334.153746][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G B syzkaller #0 PREEMPT(full) [ 334.164768][ T12] Tainted: [B]=BAD_PAGE [ 334.168994][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 334.179164][ T12] Workqueue: events_unbound flush_to_ldisc [ 334.185155][ T12] Call Trace: [ 334.188519][ T12] [ 334.191530][ T12] __dump_stack+0x26/0x30 [ 334.196017][ T12] dump_stack_lvl+0x50/0x1c0 [ 334.200770][ T12] ? dump_stack+0x12/0x25 [ 334.205258][ T12] dump_stack+0x1e/0x25 [ 334.209567][ T12] vpanic+0x7b4/0x1430 [ 334.213849][ T12] panic+0x15d/0x160 [ 334.217957][ T12] kmsan_report+0x31a/0x320 [ 334.222664][ T12] ? __msan_warning+0x1b/0x30 [ 334.227513][ T12] ? n_tty_lookahead_flow_ctrl+0x37c/0x740 [ 334.233499][ T12] ? tty_port_default_lookahead_buf+0x146/0x200 [ 334.239919][ T12] ? flush_to_ldisc+0x808/0xe40 [ 334.244910][ T12] ? process_scheduled_works+0xb82/0x1e80 [ 334.250795][ T12] ? worker_thread+0xee4/0x1590 [ 334.255833][ T12] ? kthread+0x53f/0x600 [ 334.260243][ T12] ? ret_from_fork+0x20f/0x910 [ 334.265165][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 334.270288][ T12] ? up_read+0x6a/0xf0 [ 334.274493][ T12] ? n_tty_receive_buf_common+0x2408/0x2610 [ 334.280636][ T12] ? kmsan_get_metadata+0xf1/0x160 [ 334.285907][ T12] __msan_warning+0x1b/0x30 [ 334.290587][ T12] n_tty_lookahead_flow_ctrl+0x37c/0x740 [ 334.296425][ T12] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 334.302393][ T12] ? __pfx_n_tty_lookahead_flow_ctrl+0x10/0x10 [ 334.308728][ T12] tty_port_default_lookahead_buf+0x146/0x200 [ 334.314974][ T12] flush_to_ldisc+0x808/0xe40 [ 334.319811][ T12] ? __pfx_tty_port_default_lookahead_buf+0x10/0x10 [ 334.326577][ T12] ? __pfx_flush_to_ldisc+0x10/0x10 [ 334.331933][ T12] process_scheduled_works+0xb82/0x1e80 [ 334.337790][ T12] worker_thread+0xee4/0x1590 [ 334.342669][ T12] kthread+0x53f/0x600 [ 334.346912][ T12] ? __pfx_worker_thread+0x10/0x10 [ 334.352189][ T12] ? __pfx_kthread+0x10/0x10 [ 334.356943][ T12] ret_from_fork+0x20f/0x910 [ 334.361688][ T12] ? __switch_to+0x51c/0x750 [ 334.366462][ T12] ? __pfx_kthread+0x10/0x10 [ 334.371231][ T12] ret_from_fork_asm+0x1a/0x30 [ 334.376202][ T12] [ 334.379661][ T12] Kernel Offset: disabled [ 334.384026][ T12] Rebooting in 86400 seconds..