last executing test programs: 39.017534329s ago: executing program 1 (id=1605): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') unlink(&(0x7f0000000180)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) 37.926772698s ago: executing program 1 (id=1610): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1}, 0x4) ptrace$getregset(0x4205, r0, 0x202, 0x0) 36.343388403s ago: executing program 1 (id=1615): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc0189374, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, 0x0, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x5, 0x9f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) setns(r6, 0x34020000) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, 0x0, 0x18) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x252203, 0x0) r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x3, &(0x7f0000000000)=@framed={{0xf, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x28}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./cgroup\x00', 0x81c941, &(0x7f0000000080)={[{@grpjquota}, {@noblock_validity}, {@discard}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@noinit_itable}, {@noinit_itable}, {@noauto_da_alloc}, {@resgid}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1a, 0x4e3, &(0x7f0000000b80)="$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") 36.337435482s ago: executing program 3 (id=1616): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8c18cffb703000008000000b70400000000000085000000070000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f00000004c0)={r0, r1}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec85000000750000008500000008000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002000)="b635a23a2016a72187bea6f49af69fc50e62be9b91036831bdeecb48c13bb131c346c3e92f08dc3e906534c965dc3029c871de321968e3788fa100e23ffcf4070c9b5731c9e315676713c5668adcb232058a72dd3f9dcc3393a54b66f68e5013e2e74bea3da949fc18e58f7df102ad2f65aa31a773ef5c353b7f3c623a575938ff845618fd087df36099d5ca1d7d6f038c546fb310bb3178bc9a693e6cac76ca27f8afec8f31c9a8d5bca4a31a7ae7dc0cb36afe6165ec1206172879c342d63c402f7e40b6a80dffd8b53b37c7c6dd80d3032019c28cbfb59a2f9def205c9ae2523de159bf7e367b1dbdf3876a29c6dab82b439251424cfb62e9cc83178036852558af1ce423a4e05f196e061d5a25a83571b7165033e1f383acd2d854ee70ed2510a3e48f318bebe7381415a12697523e93a617b0946dfaed978c334f15b5a3453e69cf879a8c655f2066fc4bbe5ac4453118bab0be6f6130d1a1e152be82c67e9e79b51308d6a11b6b0a28d0683f4cee3a515d094f34cd7e265de644974c75598d69d42c23d6287bde741cc04419c95262e4857feb0961a04a05815bc39a36f44f5af86927075ba9770afc6d292077bab454e333c2071c7c3cbec060b9a1971de44fe264dbcdf855c6ccdd0e352dcb6829c0bca7944a71ba92290ab85d19c0da056cb03a5cfe64961a8009b29881a19e5875df770af2e8a01c83aaa6987102bf4333d47ef6163f4dd459de363c2fe2a45b1c7b884a058aa78aa24bda266734dda02c483484658f2be92b2a62f9c670415d710e10a6abc8545a84e7f63ee8b1bb030abdd2f25089c57a014b67f0c769d18f3339eddd70289ce779b374c7f811fae76c38d057e0f71fd7c53bd8f18491293c390ab97c3a9490e6b3cc6482990393b1248166e68dc532b2f0c2c375c014e738c0833d109c66c97cc1b318b44b2664aa94ae689452707465b08f5d0df59fc1662c9a96365a9a01f5de018abe3c035e069e928d7dbf1f010cb9b0c30ee806414e8cc3d2c010087892280735686d2c4fbf42bec52487ab0a8f5c46882860a51549b97c6c6cd5bafe0059ecb52963a89a4e45041041b2c7a544c09e258d757db52942943a6a091d57764d1c200c787012229bd224964ade40e3c26a11b8a73b38fdb9efd4f43affbec9d94b86fddb18ad22b7308c4722c98648e2ee10bd19a0ddff955c001eeeb27391fd19cc9e75ecc281ab175c92becf420aee960e99702d83b1fdbd6cb14b64a3f2b01a2949dfaaa2cd21c83b456721cda5fc55f2fbd4d79739c9d515d4e17a5cbee63fd7781806525107471dca76fb8630780d71737890587d64446dd8f683421647024ee0d4743d3a1c40a36dd775050b1eae69ca0b2a3eb064a8e1c24a3d465ef3fd470f844294ab23b8e6a8e88ce7ecafe84c4e31c08f3444c1a9cf8527f50f11b809235e54f4704222a473c87e3209fdc615d5a01d5dee3178c7175d2f0464042157c6249261050ca66f07635ee324535c524ed7e199d2df42666f07047069ee7bc72a788140a4aef44bd258d01a3ed28be4089f797022022f3a7e30c2e50af2888782bfd8e410d41452165e3c86cc703455fb811947defd3462621c665ae555c9bc75ce4dcdaffa3241d140774dce1d1213f0b9200813db316fe70dbb7c518cf393daad90dba2f79bc8665da6f55e0a4e309fe2ea95868af4258df212e3ffe3ecd56a847378c4b6349c4ecf165b07521ff4d272fdb07745d5bcdd02685cb9d7833002cd9edb6331ca8f6f877df03621b67308246b7a552e61c9820fb108a9a0c89c9774956a23e2ad56fc40fa8da59f6fc6ffc21fba200ad858fe0ec974100a878552d9ff24fb80bef586375e3bbd15c72f40cd66e1eec9de67800fdcf00b2b88c4c07b27a0db91a467ee1a1294cdb077a327cf8ecafa211b60208d56d1732b87b448b039c7b5271270ed46d507a6a81716fdff750127a50e7f5b34b5b3d4e99140ce6b933be3b021cbad405d4a1d50668163b1064b879fcf267cd1ff40261aa410ee086643bf43687992b094045e409db0ad7b8b9070fef8b9b618d138f377d6eca58ba46b419ee787e35d351dd196f18645970724768122e6e7b272080b217c68d47d14cbd240811a23fecf0d580eca7e05da64d8a438479f70eae43cd676f92f8b0e77bd829c4b2b3f7e96e180b6113b1528cc13ce684f864d808210d4a8ed4f9a73005ad761ad46307413d493bf7452907c17af88a4628040c37ebd2fbb5cd7b382621105a7af874f0cf7c99ff478d7f5800b5be59d3b74ec160f22a586ba9a017cc4fe0c1cc58e289fc060ce3a415d55660e28f92eee2ace1c4b3a0cc700de3b8f617b0ece1415e2b917d906303ce018af05661a261690d3b2b1c738981791f9e5f2abf97beaa27e4deb3e12b2ffacaf68798945ee7ee7a955969ef6e7c71f6f85609c6485500e18f39f9ea927ccd26dbfd28269750149a44ab81a739a5367549364b71ea8c3f4275e0041261e356c21f58527a704af6828df7a209a4ba2a42c96b506d04000adfd16df424624a6981276a4fe4777c2d91e516195c56c8b7cbf88a091c903049d5563db8a62f39cc0c29824779fac1d8a4899d1cdac16f076202f587ae05333d208bdb3b4dfe52e65fb1ffdb740667032960114a06967910f4c8bea2e3d93f438b4e6a3b5c1144cb95d2137e508e575c49cf114d06a56bf9336548a09a8b82374622d58084fd4f740aca1704f44ec359525bfaa23058ff4fc5c3f50e1f7bf8d05abe5467f77b03c3f6188afeccc15dc0b2fd51e5f699a67475de8302fb1585f6b2e7e5c3c470efdc51fe58787417304ab43cda673883b689b3e00fab6328b40af8a0194d56ad91bb7195bdeec56eece40c5269f275bca2e23748838446a0f7d4219bce3d96038fc4f20b7272604c8f9b7c6ce4fd2b91d104c23b6e2e59c2efea536536f332cb7f2d113c7ad1613ebe9ec50c86be7acde5c703dd663f6b821c7408917a62adb7795f6508408fdb327f2a3bcecf9892bd815ba7373dd80548b92afb12ce395577ba3a638189eb9978d1941b836f7785dae64e62c5d7b0e46b62ba639b0c6a790dfa850104e0413ae0b386438e0eb87c4acababc30eb376f6f47485a11c884a187d67ea7d679a367e32337a1bbb07ec05324a3dbc2586bc0991a304aaf035ec99abf8bcad6b10295d9f832d8879b9690447ed3854806095565689e7655ba7ada3c41b814b436615dd491b13613cc8cd6e826b159c0b07d86841904d8db164b2d95b77dd8cee127e33e9f72697af5bdac028586bd580548bab55d712aa656cf9fa86f07e0bf6394b5b9e78a2f0ee6de2ce7f1f4764787fccbfd7df104b50099205e14a7e65c2fe0afa688aef20043841767e1cc18c058bd83db3d5efba9c2f40aed1712730177124f71664b00112c2a801e3f7632fd9aa67bc9b2b6fa494c1596cf96f277f50d51bba6441733f0a7d73bd8055c88068c8e566e1dd4121ec95ca6df211a7cac1c6f3dc67270b86b6bdf1b2a98db3756796d8ca726be861bf70c90151eba75ff30b8fa17e5640f6bec0a042593f2f113875b9e18114e55be082083dfb8799d9c5d0a5828cebaea60f7fad3c98c078c09c245ed56a4fc7f9a7bb407daac2cc9d4bf8d3ed454cc022ab10ce4d41a2d4c6bc1ec3d6925426a5f4eca2e9bded77515c0896ffb0001adf51d9f43462222f7e06ad6cd69c4d02a384c4d8bce93638a24364d6ba8d17a537ea78655c3305bf069e07691a78aaa3ac03dd987972cd3c79b32b90a0376b9bbe0a6fe95ebe1e95de12fd0e53f5bc9b047146ef5ff4b40a2bdcf0bd53a6887b37107b6d37c86aacfee3478d3d81a5ca8be63559ea5276a64d88657c0d59859a2d1b76c0a382ad851ba8411a7e6e17d838694b156c5550c5cc14212e65e3b3231e5837cd7866381705db015245cc258ff1bd66517feaaa4f7d154b24c51ae54dc5466846b5e9a64ba88d3bc799f6118dcb2e5a972aa3823ddf5bd2a39109e56b820194c172c7e87ef1240701659149f7b05897aa7945fe5040d7e67c635ac0dca05e5ef0e9d6f542f8b1f15fec8897667587fe7db94fe36d73e51c8ab6f2b0ae3f6c51325b27ffd344a91bcd174adaa4569b9d52c0d31191ad191c3a52129e425307dd9ec1d1dea3bccd3fd7e5774915012b0369704f3d298c175d58accb97ac897153146e7f3b1982aaa9af9433b7d3cc40a2804e8246d06ffcee41f5c771c5cfc327acd8061303acd961a22fe2483f375d5c249214aadd9c8ccc3831e31f19ebfb124df863b9809f767cdec9905257b8dfb1a4c7e78db768daf6bbb6863f649a6f3023d1d5b32bb746fab105a25b07395b10d539c691710c6f80182ec0029844881f0d41b856f8a576339d16fcf1462af2ca95125d6f4771fdb3a880bbd240b671f9d904b8740f88b691c8fd783f1bbd22679beb7170cf07c85773ebd8363e75f4343b1579c7a40a9744f1f505b9a956faaccedc1df39d1e3c7d0912640afd4f666aea9363a8d84eccdcf3cda738443640aac65baf492fffc5643e87e6922867db2037cc927ebb30398334f4f9ce3b304d4a0ffda5b7de5ce781633dabd8eebe44a6feb454414d6e766608ba9f6b1ec8ac5ca11ea6438db7d86902d99b7d0749a646bbe3b0a988ef9a9a1f2ded7e238a31ea7241ad6de45d8f33d084520c8a68334de96c32948b9baf68333d5b51ca4bd0c91b75487c00b41dc2070b8b3d8923af1bb358e64bac194e8aff8645993b018f9e8c63917d220cc7a49980c920109e62c042fc4b757422724ff875a54bc3fd1cc278c4ae08f225d4da56e2e3c5056126681c8592bd195c438ff06afd66026cd08c5ede98b7a700dd3bd5fada703baaebbb1f96c49ce5c1263de39a5c5cbb56e610e43091b4e8af3448404d8d84d9a29430949d51f141e1f12451c71f4c07af6558d987b000f1a14cc33a26a4a80da7827fa536fd78fb8878b498ae174f2e8a5b9666d2c6e6ef678bb1b81b58e1bf26a64a1d73fd49005bf6b04f7a22b17f324c10b60a20da359f4df247ebc59a0895dd4559f17dc6f08e063ec8033b25d8cb0ab49c6bb302038889f15dfbaf21208e737ca121894b29d915bff2ea53ca74e67fd4adc802c3e839e586bbe2a65e843614dd96ef1c121d9989a56e2ad321d8ef5006882a8a03de4f192e057fb40ae6332e40934e78dabf392085dff93eebfe6072fca2e31603c988dd5bbdb16d95aa8a8cddcd1635905d1e347a51d2ec219b2e7581ce7d060c0de274cfbd9e6d9d132c4fc0149ca5a13c9e41fc46b88da841fb0a301c050d21f80938651029fd5dc2fce4a06e524f540a89e53eb93fe04dff0853505cc3299a97370581c7fdb8159f95f44629ca7a9e34bb447f7e5f549c18ffd06da6ccbc2d48c5bf3537360c4b185a5284dd4988dc0a6f2381e640b900cb56e0ec43ffa95b23d70f6a7b73dc29e41c710968f0ad01717aee92abfd67cde9cdea149b47641602014318998d675a141a2d3ab75e718ab382d305b4a961c9e8b621861e435d006faccc5929c0365d890b3d3973babe159e8db74d6c61d07f55b6fc49b5dcca788eddfb28916a36c80eae7c2554882ec31d1813dce2034ba8973a2919405e94589c24c3cdfa1bf2fcc0feefb87d1af27a2f80316d4462ea309a30eec785c3a597c6107897df297d930a686426b6afc2277e3c9929d00d9000ca9388427f060af654e8c4bb3993b01cf8eac473e7215f0e5cbe75e91c245a746b86a6d876bb7e624e690384cc0be32d3fad30640af8befe0f39ea10fc578214fb7db22b0b8d4a797d56335da88ae9c7a74dd685234178a4e49b8ca81893c30bb33fb3d8db2ed69c69fc2ba7ad04df26f49018088798906471f9b29392bc3fe78d612be345d838a72a00741af079446a5fc6fc7b779c0a4d8f75eb945c65e60f2894bfd9a526bdc29e277f15481b82f10dc8329d6b3f27f352a49dee12e435aaaf8e832aed574b17fc029ecfbf8862d0dfab18bf095d70b1f226c932f8ce3ccaec100477e2071dd1ca48af36ecf96cd063c9708216fd9d65d0e69658911e157cf47c64060acdb28cb05b9757db3da23b8a57705559b59667158862168d25b44b4b6e6b92f0ed2d6df1d08e328889c16da0bb46bb751b5cbb008f66493d5ab425284ade4d6a181ab708489efa3afab44511df1e217e5ae255026394ec9d89d8e8cffb9e32494ddb0fdcea1c53a6d1a962a0a886dca255cd0b58ad7ba90701a1f826c4febfd444c5d92a302fe9c99f085741dfe5082dcdb442174e825b5baa790fc03fb23f7a20f82d259fdf6708398fca2c9a9d28c953282e3c8db92b12afe96cbef7ddcde5d0552af596bc367c7a3f4ac5dcc93b885fe2ff9ad008527820524b8601313703665de05ebe7ff3f22e2cc6d6294a7732a11dbc5f82951c97bc78c2875f12265ee0762c42cc0e27c3c7e6242b70a2b98e3990d0a4c337795a26e63976b470b1b4ee0e338bd8565d317f21744a3a26e8ade2685cee223dd29472ba5b9e8e83cc7e1ab322cb79274573bbedbe8d8d7194fc2d4098f3a1716e07cafa7fd89a229e278851373dc71ecd7f4ea6d1d2936e8553a95c37ce51d33878004515e84780fd9720b71c745c3248b4ea2fe1a5572908b79242d41314412b414cb303d5f30af096774632994aac2be64472215c96c5d680f3c5dcc8b148f7facc44420adf727857a0ef912b6834672ff2d6ddfcd6ff64667635c724a7294ff3bb61ccabf1c00e13c1070d000febf9ccbd8bb111827ca9d30db4ec554953db59d93e555a9502f09eef63bbe4de97de381aad868bb9fd7d6586d4c8d0dfbb200cf87295b3ae9a8f10da508dd34392f601bcf7c6e58e737a0e25a00059550b4e2b6d490d854eb209f0cbb332a59e582acc01431d250e1199c91c7f840962d1b8648938e23bf1937b61afbaf0f38af84dacaa0585d749ef7c53bef067c09fddacf3349af13f3d265e7281164d085c845bc2396ee5d02f02f619f4dbb8acdaa66fa36910582b83a49421d1494b1cb20f7b26f692c4e3f314884b79cc49962e364ab5be2d411cfbc90e235c03a2c6e505eec9a42fe5eb90bb14cd24ab483ea7113b69d1eafca2fa96d4a92c4f5ff75391f3eefb12a2ac90faeddbc8041e5c836a46a345cc4bf0c4c2f7c9cb3ada8b35b05c15e8a36aeff8becc43c71ea0499e09aa8e21866c7e6887e24ebab1ca5f8d16389a4c4238727cea23eff3daeb5ddb960b1754087dc716c576e06c05febfd949fd7d57342036cfc6e4aa0d8712b53abaf0e644c4ca7d3734707a3f49c251178a94804aad6352ddaa22b4f27f5fb42b03537493e37c3948fba46a61f27b4017fc0e2b14a8e42b6526d341dade056f462f19cd7c950c7453fb8110cc16a731d3201a2a91279de59c18a1c1626a3dec8e21164521756b5e05913c119cb10910b4fbb6985b8fffd58b801db77f94d1f49a1e7def0eb9182c6b8e5335854020a570f0c62698b28f54cc034d67ec016374387ed340a1fee896b681916522fa9d6808af508b156629e2b59a43ea8fa8038bd42dab28592bae496170156d335949087d05399c64ff83437ecded598382d57288dc09f3fb19ee29328bfde4f600dafa49d462c8a305190044bf998495585b4812b5a2d7bbad8fb539bf65d40ec96bf14d19f20b94cb4f837bb59af74e0819a10d38978df3e06112ed6dbbfd057f52a24622050f6b59c90aadc20aca0a624cd14b65287c75222e32de6f169ef50d83a3c870fb1a119aba1b86ecc49e90511f0a038c85a36273638f791779517b525ec7e5dccec04ba74db44e81e5fb010371a9ee60eeea324ccf3dfce9f29ececc9c2e78f5e0b65ef38a472f61a747103decfb4be0932f36f1dd13f960251fb1371d1583b4a5c9d266e1dbab3fcd0a316c90cc9f52640fb8578324acc4bda0ed316ee891c2f64f573f163f05753e39197b97f119b96f0a8761a27ed952761aa9e37928037cca04069ec57f232067c6e8155c5e648f78a795eff6ddc33b8964bf6fe490f86fca8a7a269c877406032df2ae120afbf8a714910049b70b5e0355a81967a7b745d3e3d02b52ddfc105caed8f0dd2e38523a5918e920dfd024a276d00921251a48e380b09559fdf9c21a242608c2be5eb95740dfdb17f150f66704e752a23794980dcf51c6c5403a9ccb6cd1da068acb385061a4c7e195b0f3eb47ed7d4388a5fc8c039316783563d02bcd7cd33be35d91c35c4c6a68dd43b072735eb86fc01c650a2457d4d77a2c9a21878aee24ac379af9c73f3dc5e76de7516abb3b7d45c755ebbf9eb72d0ea4c97b3c34bf2609060fb20409706b82cd59aac37a392008e1e0df08bd17b56e8127ba631b0c57b2a7d6bc6c03ee347c00b4858ac0867d650db51b8e0ebed1ac770726190cc2fbb8bea49824b5286ffdf7897336863cb7900f34950c141444c784f9b787d77e8bf083c138cffdbe548569faf553aeb2ea26039a1bdd5e31ea649f69a838cf2c5134dabd1f9f2d3f4b92bd5f9728ed92fa10d750c4eb0b2e5f93a7eaeeb50c01f3af6f2b2500b0b2d8b3adf59ad0ec247d4dacd048bbba6dd28e57babef6a93a4e8eeece780225c14956a47a6f21db0077045359acd4f60686eeca084f02c57ec2724da1096c97ba635091a5ec9ddae8b60988055a456e8cf2146852e3526e2de46ba6b63f1d0c6df52af897674a09d1ed9efee6c510f893b79ae374a1bb0167356ce9741015f99b2aaecea7476c9a3922da674da08ed3e5cadfbccebfb7f651521db771c4d3e692e37d7035a7134a7baa8c7bb4f3f063cc67757236c38cb11e2ed1497e3f1c6db6921d19fb13606a51a78f6c4ec63f6dc23d77a5d1c0de680b104fb67b42b0cc550eada029cd67a7b4bd4aa4a5479ac5c9c7bf98c08c8ad7009cf5087e6556ec54e66af1ab3f96ce74a8abf5420ff52b0390d5c40aa372c1ca53b5a0e72960a4db4da2b2fa318effcb6069d7d24f29977fbf4219be9e95299dbed5bdaa998bb00ef8d6e5310c365568b5570b5a715a325dfb9eed5d12be78e0728141d866ff0c4f21a2085499d1cfb1b68a6733bad33384a258fa2465e41e45b44a2fc243127b6070fb4b56e8ff73702751d1f39967ead0155649ef2fd15abee559756014dfcb99cd37c70d387af273971a72a230638b13a18847ec72dbd27084b19b2db9fc60ce4e35ce1df93dc6d2270fb12887fd3323241444d45e2e6dc1044e6528bbc92da13f3e2c2b5b8165e6701d05d10a516f9e0186b4c642da2aa36d7bee3cc9fdc335c6bf490cf612c78e90ac299d8b796a301c6b64a932161559642b6c2d110cb37f89facfb95d5225abf15650bbc488918f40ec0b5b3200bb51ff3b26f7717c69e3117da1b1e78b2723ad96268196a5b90fa19fc0d3e7193749182582305b220d0b10a893882efee2f52e1f518a94216ddfde785dc64a430b1e40a458e035e0957cdb47d2694540e5954908a3db963a18014f3b039a59ad7e36e375f2da6030224e21a7fc368d09b911c86e5ed0a6826bbead358aaa5fa6a8d6de3ed1b2c03cd1803e9a20af367badbf0f8398613eb18f176932a970d8faa5fb3e1084c13e80985ed2f2bc8b40f9678f9c6b9c06b78eaff781fb0cebe251d3b803288fc9a5f0e3521c72bb5bda8d56d42fe82fe22c2cca2bab39f50c98a830f55fd92a69b9f82ffd4d3666770a9d67bce8d17a336c7fcef0f72ecb9098c55d36fba7d1926b91dda03ce015d9c2dab5789ba4e06e92374631a2aa3e2d3bbe8cc418b5158bd782fa9f7a934b006ab68ddff40d68912686259ee1d4b237faefc836abce067bea39fcba8190728e554a0e6b871876a70acd5f54bff40570ff6fdea36b07b23d66464810d7346c0fd1ae15338deecf6435938e1dec0e050ff405ea2c920a47c5cfb3d28c60b58a237b2f585e6046718c86f4c174d938be859454c0620a3e45db73b9120013b588916f4c6bcc4d10031d292850aeb51be2eb5d9bb84de911ccb0e583277c2f49084466d4c56bd276cbbf2d300484da635e2d37adfedb86cb16e8df8cfb18607a56ef4a5e7b57051102b166ec1c5312920ac5a5775e6b0b4ef935fd9a210d2e245a2611fdacce530079dbe3da30df27f1a758b4ed7d22f38ae0a96b556c0df0ebb7353f034d1c704252a00442b2160ade3c7d167f10f20b613a7a9dda06ae98b08e108a209bba8cfb8aca037cc83ca78ceca58f109c0ea7ae10e82474b071d261a5edfc27928c3a928949e32056eab09808542908f72d59101f2b86439e9fc67f97330dd7fb184be394dbe63c92b005be7cd567874e9903b927a76c1b709cbbaba204c679ea0a6aae1adc158cba623c1650e13fed834f413feb644e4c767255b25270f417ac80bb48e172335041d5b2b9f468eb0eaba4a9a4288bfcfeb1421efa1394a9e46c0d5e1e2d549a6ea4644b09ea2feaef5aba678ad24032ff4bee46ce1e4bbe0d06fbd7a754b1c4ac92a3093b103c78e4b5aff6e3c91fccc72d4c51e24d81e50ac1ac0b236c0cd635801746e5f84fde70f8adf69bac0c983440004c7155461a7e3cf9c38594a7f96ccafedd634126d6e85696625e8ef65ce11c051dbd66af7f448837b2871ca21f6aa5521c108ee1ab88ebab414f1e60cbddc0d07dfb98720ab7e8ec3bc1a145b1ace1807379b79123d60da7e7525f7f15e2f71341774dd11f76f3d6b179613174cb703091c11ca173a41d56111deb81235e9c9297a82621905521103d11a421f7dc6a62815ac14675de433e8a030db12505dda28b3cdd7098436c0bea1b30ae7fbd728a7bdd7fa7e96946774ca3f9a00eac6fb71ad49b597c55bca7ca6ba7fc6883ad000a29ba7be6765af00da3573a34eb29c1ec117f76103d508825c1a2f74fd04b07b0af10842fe3e54778220b4b98d14ee1919dd542ae59c7febef84d13f8b58853935736fbbd79ea4747bdbb91421a7af922378a522382b6aa96db3a72d18cc144f6c5151a9cfc677cc2933188f78c78953ed345cee4f9a55bee94ef23a37ef4caafba79aff21aa9f34d753b3f1fb85a7a30028a41b1be9099a2711c62fbdd1f9fa02d1ddde2bc859a84c26285a5243d429136ae19c9053057e99a66cfa279484d2a9ffd4f2a87837a215d3c2a64967b30e2188ecf1e71f78f221fdef3eeb7b6e260071144f7e6dc6fc511c29dc9f05a2e351de14520d474b12566800f2cc80eabcd6ab6da47ffa4fee7b6cff648dff503b25c99ae9293f71638ef158b8b75c1dc7ae07a6a85bce1f92c4e4c9ff501136a01c444b9699bf04466a577a6ba3d3699eb7bcdbf3209142f8891387f1243a3cf22b1a2f509c475c1ee9c6e7f3ed4bd833432740237d932ac8d60fa0639fed912264347fb255da9729f2e9f07be78a4be7b3723233edda69bf69aa08857e47f413c0500942e2e136d79e21d35abeab638dd7128602a0854f2f73167794418e33d5d07dc9c226bf43822a16481f04a77595220185aa2b4b172a607fb31ac624ac648c31207071274be3cc2a2eed64516efaa9aaab1a62b18dfe1819ef4d6e6cbf75aaed931bbebbc8ee9264337693a20ebef52bf54ea3d2a86ce11e8a36d", 0x2000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e0c000310"], 0xf) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c8000c0008000100020804"], 0x11) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x0, 0x0, 0x2}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x4b}]}, &(0x7f0000000300)='syzkaller\x00', 0x7, 0x92, &(0x7f0000000240)=""/146, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r5, &(0x7f0000000240)=ANY=[], 0xa) close(r6) r7 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'veth0_to_bridge\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev}, 0x14) r9 = syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00058639aa6f0bfbe4b28434ef119376977b00fffbcec7a5fc1f5a72d4fe24156a9f971990e4f372b7"], 0x0, 0x17d, &(0x7f0000001ac0)="$eJzsmLFP+kAUx7/vyg/yMy6uLg4SxcHSFjUuxLA5mogaNwlUghYx0EGYdPH/cHZwdvOPMM7qYFwY3Uxqej3oQQR10MT4PsPj+7h313evyXcoGIb5szw+vNyvFe+EAWASaaTU/89GXCO0+tfb83Jraj1/OfeUv041robPIwBB8PnnJwDcFAz4Kg+Cwd1p9VuE6OstCCwovQOCqfQeBLaVdkHYVfpA042w3jT3a55rlhteJRRWGOwwOGHIDffXPSNUtP5IW2+1O4clz3Ob3yg+ml+3IJDX+tPfV282ljY/GwK20jkQNpVeRao3m2gk2v2nE/H5xg/fnwULFr9NxP4UXBDmNX9KaP6R9evH2Va7s1irl6pu1T1ynNyKtWRZy05WGlEUx/jff+lPE9r5/0bUJimJk5LvN+0o9nMniu85rpD+J5CZjfLQ+5Mju4nWSe0jqTLGmHKGYRiGYRiGYRiGYRiGYZgvMAOSX0EldIo4GcDZkNVvAQAA///an3MA") fstatfs(r9, &(0x7f0000000300)=""/232) splice(r4, 0x0, r6, 0x0, 0x19404, 0x0) 35.177322699s ago: executing program 3 (id=1619): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) syslog(0x0, 0x0, 0x0) 35.051652893s ago: executing program 1 (id=1620): remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0xa00, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000a40)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000880)={[{@noquota}, {@nodiscard}, {@noquota}, {@init_itable}, {@oldalloc}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}], [{@appraise}, {@flag='silent'}]}, 0x10, 0x4dc, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x1) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRES8=0x0, @ANYRES32], 0x3, 0x6a4, &(0x7f0000000100)="$eJzs3U9sHFcdB/DvbDbrbJBS918aEFKtRqqgEYmdVUmQkBoQQjlEKIJLr1biNFY2aeW4KK0Q2QAFiRMn1AOHIhQOPSGEkMoJUc5ISFw4+R6JG4ccAKOZnV2v7Y1jJ7HXbT8faTzv7Zv33m9+nT+7s402wGfW+ddzsJci509cuFXWV+52uit3O9cH5SRTSRpJs79K0U6Kj5Nz6S/5fPliPVzxoHlevfdR0Xz/w06/1qyXavvGVv02GbtlLzk0rBxIMtMv/mfbw24ar1qqcS6tjfeIimHcZcKODxIHk7a6SW+tsfHQ7ts/b4F963b/vrnJdHI4/btr+T4g9dXh4VeGydvy2tTbuzgAAABgt4z9LD/qqfu5n1s5sjfhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKdD0f/NwKJeGoPyTIrB7/+3Rn5TvzXhcB/Te1eq1XefmnQgAAAAAAAAAPBYXryf+7mVI4P6alF95/9SVXmu+vu5vJ2bWchSTuZW5rOc5SxlLsn0yECtW/PLy0tzm3v+MmXP1dXV23XP02N7nl4fV29joOP+T4NNGwEAAAAAAADAZ9aPcn7t+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgPiuRAf1Utzw3K02k0kxxK0ipmhpu3JhrsE/DnSQcAAAAAu69dr48U/+sXVovqM//R6nP/obydG1nOYpbTzUIuV88C+p/6G3/vdbordzvXy2XzwN/4147iqEZM/9nD+Jlnqy2eH/Y4n2/nezmRmVzMUhbz/cxnOQuZybeq0nyKTNdPL6ZX7rYziHVzvOfW1S5ujO3FkXIZ37EqknauZLGK7WQutQahN+rtjo3M9sdWsmHGO2V2itdq28zR5Xpd7tEv6vX+MF3t+cFhRmbr3JfZeHo075tzv8PjZONMc2kMn0E9tzZLWd040yPl/HC9LnP9093N+Q4fpa3PRO/nZW1w9B3dOufJl//xl4tXGzeuXb1y88T+OYwe0cZjojOSiRe2lYlumYneY2Ti0OPE/+S06mz0r6I7u1q+VPU9ksV8J2/mchZyJrOZy9nM5ms5nU5Oj+T1+a3zWp1rjZ2da8e/VBfKe9LPRu5Ne2bqQQ1lXp8eyevolW66aht9ZS1Lz2wjS0Ur47P0z7GhNL9QF8o5fjxyx5m8jZmYG8nEs1tn4tf/XU1ys3vj2tLV+be2Od/L9bo8bd9bf23+zRPZoZ2rd7c8Xp4p/2Olf9sYPTrKtmcHbRvy1aq/cWnWg61ra6U6n/ttDztTy5GO3hk3Ur/thbGzdKq2YyNt697l5M10h+9CANjHDr9yuNW+1/5b+4P2T9pX2xcOfXPq7NQXWzn41+afDvyu8dvG14tX8kF+mCOTjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Nbr7z7rX5bndhaR8W0njCA94Z2zRIRf+V1v7Y909qYWqrI+r3Sbbo3ppEzO0k+yJ1ae7BXFMZ03Rh+Eo7aQzjSXJtn/zAHbAbTi1ff+vUzXfe/cri9fk3Ft5YuHH67JnXznS+Onf71JXF7sJs/++kowR2w9rbgElHAgAAAAAAAAAAAGzXXvzzhjHTFr0J7CsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwyXT+9Rzspcjc7MnZsr5yt9Mtl0F5bctmkkaS4gdJ8XFyLv0l0yPDFQ+a59V7H/3q5fc/7KyN1Rxs39jQ7w//Xl3d4V706iUzSQ7U64eb2tZ4l0bG6+0wsL5iuIdlwo4PEgeT9v8AAAD//x5LB84=") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c02, &(0x7f0000000140)) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 34.478087569s ago: executing program 3 (id=1623): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, 0x0, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x64) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') lseek(r1, 0x10000, 0x0) 33.430822666s ago: executing program 3 (id=1625): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1}, 0x4) ptrace$getregset(0x4205, r0, 0x202, 0x0) 33.089982152s ago: executing program 1 (id=1627): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0xc0, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb2, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @multicast1, {[@cipso={0x86, 0x70, 0x0, [{0x0, 0xc, "e2ffb28c599d1681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x11, "240011000300"/15}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x3, [{0x0, 0x6, "7f36c525"}]}]}}, "00060088bb35"}}}}}, 0x0) 32.516303273s ago: executing program 3 (id=1631): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) timerfd_create(0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) epoll_create1(0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x28) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 31.751790711s ago: executing program 1 (id=1635): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, 0x0, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x64) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') lseek(r1, 0x10000, 0x0) 29.626807643s ago: executing program 3 (id=1639): rmdir(0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000300)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 11.110782371s ago: executing program 0 (id=1689): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x185183, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000718000/0x3000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x4, 0x20031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c17000/0x3000)=nil, 0x930, 0x0, 0x10, 0xffffffffffffffff, 0x20) write$eventfd(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0x80111500, 0x20000000) write$eventfd(r2, &(0x7f0000000000), 0xfffffdef) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae03, 0xbb) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x541b, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r5, 0x4010aeab, 0x0) 9.927508865s ago: executing program 2 (id=1692): r0 = mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x3, 0x13, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000001000/0x2000)=nil, 0x930, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4020ae46, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000000000000000000000000000ff"]) close(r3) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca) 9.38696131s ago: executing program 0 (id=1693): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x64) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') lseek(r1, 0x10000, 0x0) 8.355348275s ago: executing program 0 (id=1694): mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) r0 = mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x3, 0x13, r6, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000001000/0x2000)=nil, 0x930, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000000)={0x0, 0x14800, 0x0, 0x0, 0x5}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x3000007, 0x2012, r11, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x2000007, 0x2012, r11, 0x0) ioctl$KVM_SET_GSI_ROUTING(r8, 0x4020ae46, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000000000000000000000000000ff7f"]) close(r2) 7.15815722s ago: executing program 4 (id=1695): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/44, 0x2c}], 0x1}, 0x40010120) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000000), 0x4) r2 = dup3(r0, r1, 0x0) sendmsg$tipc(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x11) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 6.342172365s ago: executing program 4 (id=1696): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) 5.747289637s ago: executing program 2 (id=1697): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x280000f, 0x11, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000000c0)="35ba658a487c56c733e03c24ecd8dc66ff00800000000059040000f50014cc08001e0600fcffffff00012000", 0x0, 0xfffffffffffffd09) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) mmap$KVM_VCPU(&(0x7f0000ff4000/0x4000)=nil, 0x930, 0x0, 0x13, r2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)) 5.09923898s ago: executing program 4 (id=1698): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0xf8, 0x5, 0x0, 0x9, 0xfe, 0x0, 0x0, 0x3, 0x20, 0x4, 0x4}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xc0189436, 0x20004000) ioctl$KVM_GET_ONE_REG(r2, 0x4018aee3, &(0x7f0000000140)) r4 = openat$kvm(0x0, &(0x7f0000000000), 0x131000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0xc, 0x4f832, 0xffffffffffffffff, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4010aeb5, 0x0) 4.749655867s ago: executing program 0 (id=1699): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000fea000/0x14000)=nil, 0x930, 0x0, 0x2012, r2, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x2012, r2, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x0, 0x11, r5, 0x0) mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, 0x930, 0x0, 0x12, r5, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f000000f000/0x1000)=nil, 0x930, 0x0, 0x12, r8, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) munmap(&(0x7f0000feb000/0x13000)=nil, 0x13000) 3.481662899s ago: executing program 2 (id=1700): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp\x00') socket$inet(0x2, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2000, &(0x7f000003d000/0x2000)=nil}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=r1, @ANYRES16=r2], 0x20}, 0x1, 0xc00000000000000, 0x0, 0x400400c}, 0x0) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="4c0003"], 0xd) socket$nl_generic(0x10, 0x3, 0x10) 2.843736636s ago: executing program 4 (id=1701): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x80111500, 0x20000000) write$eventfd(r1, &(0x7f0000000000), 0xfffffdef) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mmap$KVM_VCPU(&(0x7f0000eb2000/0x3000)=nil, 0x930, 0x0, 0x32e7851d6de9e532, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000) 2.575276287s ago: executing program 2 (id=1702): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000080)=@arm64_sys={0x603000000013c028, &(0x7f0000000340)=0x2}) 2.306797789s ago: executing program 0 (id=1703): socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 2.182323802s ago: executing program 4 (id=1704): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x2710, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x1fe, 0x0, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) munmap(&(0x7f0000fed000/0x4000)=nil, 0x4000) 1.407493669s ago: executing program 0 (id=1705): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001680)="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", 0x7fb) 1.278350676s ago: executing program 2 (id=1706): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) 1.196770181s ago: executing program 4 (id=1707): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x54, 0x30, 0x5, 0x10, 0xdb0, 0x6869, 0x73b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf9, 0x0, 0x0, 0xb5, 0xe5, 0x49}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0x65, 0xd9, 0x91, 0x8, 0x6e0, 0xf110, 0xbf25, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x12, 0x80, 0x0, 0xd8, 0x7e, 0xef}}]}}]}}, 0x0) 0s ago: executing program 2 (id=1708): syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x20c0) kernel console output (not intermixed with test programs): 5-1: config 0 descriptor?? [ 1371.687409][ T10] smsc95xx v2.0.0 [ 1372.343920][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1372.355225][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1372.537988][ T9642] Bluetooth: hci3: command tx timeout [ 1372.586396][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1372.602869][ T10] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 1372.912306][T16424] chnl_net:caif_netlink_parms(): no params data found [ 1373.171337][T16565] loop2: detected capacity change from 0 to 512 [ 1373.251693][T16565] EXT4-fs: Ignoring removed oldalloc option [ 1373.310003][T16565] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.1321: Parent and EA inode have the same ino 15 [ 1373.393827][T16565] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.1321: Parent and EA inode have the same ino 15 [ 1373.411433][T16565] EXT4-fs (loop2): 1 orphan inode deleted [ 1373.427907][T16565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1374.054901][ T9315] usb 5-1: USB disconnect, device number 22 [ 1374.615406][ T9642] Bluetooth: hci3: command tx timeout [ 1374.925754][T16587] loop2: detected capacity change from 512 to 0 [ 1374.996556][T16602] EXT4-fs error (device loop2): __ext4_new_inode:1070: comm syz.2.1321: reserved inode found cleared - inode=1 [ 1375.008921][T16602] syz.2.1321: attempt to access beyond end of device [ 1375.008921][T16602] loop2: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 1375.022605][T16602] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 1375.031360][T16602] EXT4-fs (loop2): I/O error while writing superblock [ 1375.098925][ T9642] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1375.108036][ T9642] Bluetooth: hci5: Injecting HCI hardware error event [ 1375.120866][ T9642] Bluetooth: hci5: hardware error 0x00 [ 1376.118760][T16628] overlayfs: missing 'workdir' [ 1376.440766][T16424] bridge0: port 1(bridge_slave_0) entered blocking state [ 1376.448733][T16424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.456903][T16424] bridge_slave_0: entered allmulticast mode [ 1376.466536][T16424] bridge_slave_0: entered promiscuous mode [ 1376.700405][ T5186] Bluetooth: hci3: command tx timeout [ 1376.749838][T16424] bridge0: port 2(bridge_slave_1) entered blocking state [ 1376.757932][T16424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.766270][T16424] bridge_slave_1: entered allmulticast mode [ 1376.777019][T16424] bridge_slave_1: entered promiscuous mode [ 1376.848028][ T5186] Bluetooth: hci5: unexpected event for opcode 0x1003 [ 1376.962444][T16424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1377.015330][T16424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1377.118171][T16652] loop1: detected capacity change from 0 to 16 [ 1377.134484][T16652] erofs: (device loop1): mounted with root inode @ nid 36. [ 1377.178537][ T9642] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1377.457022][T16424] team0: Port device team_slave_0 added [ 1377.699659][T16424] team0: Port device team_slave_1 added [ 1378.683843][T16424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1378.691296][T16424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1378.717878][T16424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1378.776974][ T9642] Bluetooth: hci3: command tx timeout [ 1378.895178][ T8577] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1378.965399][T16424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1378.972619][T16424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1378.999332][T16424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1379.117930][ T8577] usb 2-1: Using ep0 maxpacket: 32 [ 1379.130207][ T8577] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1379.138858][ T8577] usb 2-1: config 0 has no interface number 0 [ 1379.244265][ T8577] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1379.259756][ T8577] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.269503][ T8577] usb 2-1: Product: syz [ 1379.273988][ T8577] usb 2-1: Manufacturer: syz [ 1379.278947][ T8577] usb 2-1: SerialNumber: syz [ 1379.422600][ T8577] usb 2-1: config 0 descriptor?? [ 1379.503353][ T8577] smsc95xx v2.0.0 [ 1379.881821][T16424] hsr_slave_0: entered promiscuous mode [ 1379.904256][ T8577] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1379.915851][ T8577] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1380.021330][T16424] hsr_slave_1: entered promiscuous mode [ 1380.138936][ T8577] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1380.151073][ T8577] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 1380.181464][T16424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1380.189864][T16424] Cannot create hsr debugfs directory [ 1381.458349][T16424] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.728106][T16424] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.916160][ T10] usb 2-1: USB disconnect, device number 16 [ 1381.955390][T16424] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.033638][T16864] overlayfs: missing 'workdir' [ 1382.287504][T16424] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.861298][T16424] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1382.986488][T16424] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1383.102065][T16424] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1383.252547][T16424] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1383.520154][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1383.528725][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1383.829573][T16909] loop1: detected capacity change from 0 to 16 [ 1383.909683][T16909] erofs: (device loop1): mounted with root inode @ nid 36. [ 1384.403655][ T3451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1384.412063][ T3451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1384.734496][ T5186] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1384.748007][ T5186] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1384.758212][ T5186] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1384.899251][ T5186] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1384.938847][ T5186] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1384.952340][ T5186] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1385.131812][T16927] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1343'. [ 1385.141205][T16927] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1343'. [ 1385.442185][T16424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1385.839729][T16424] 8021q: adding VLAN 0 to HW filter on device team0 [ 1385.854486][ T3451] kworker/u8:22: attempt to access beyond end of device [ 1385.854486][ T3451] loop0: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 1385.869591][ T3451] kworker/u8:22: attempt to access beyond end of device [ 1385.869591][ T3451] loop0: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 1385.884270][ T3451] kworker/u8:22: attempt to access beyond end of device [ 1385.884270][ T3451] loop0: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 1385.898395][ T3451] kworker/u8:22: attempt to access beyond end of device [ 1385.898395][ T3451] loop0: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 1385.915419][ T3451] kworker/u8:22: attempt to access beyond end of device [ 1385.915419][ T3451] loop0: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 1385.930421][ T3451] kworker/u8:22: attempt to access beyond end of device [ 1385.930421][ T3451] loop0: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 1385.945398][ T3451] kworker/u8:22: attempt to access beyond end of device [ 1385.945398][ T3451] loop0: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 1385.959305][ T6827] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.959773][ T6827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1385.966691][ T3451] kworker/u8:22: attempt to access beyond end of device [ 1385.966691][ T3451] loop0: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 1385.989974][ T3451] kworker/u8:22: attempt to access beyond end of device [ 1385.989974][ T3451] loop0: rw=12288, sector=14, nr_sectors = 2 limit=0 [ 1386.004375][ T3451] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4526: inode #12: block 7: comm kworker/u8:22: unable to read itable block [ 1386.021598][ T3451] kworker/u8:22: attempt to access beyond end of device [ 1386.021598][ T3451] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 1386.036505][ T3451] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 1386.045561][ T3451] EXT4-fs (loop0): I/O error while writing superblock [ 1386.303058][ T6827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.310666][ T6827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1386.542809][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 1386.550734][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1386.671552][T16261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1386.810488][T16261] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 1386.819613][T16261] EXT4-fs (loop0): I/O error while writing superblock [ 1387.085190][T17035] loop3: detected capacity change from 0 to 1024 [ 1387.100952][ T5186] Bluetooth: hci4: command tx timeout [ 1387.216357][ T8577] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1387.458852][T16916] chnl_net:caif_netlink_parms(): no params data found [ 1387.468671][ T8577] usb 2-1: Using ep0 maxpacket: 32 [ 1387.502601][T17035] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 1387.567517][ T8577] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1387.576100][ T8577] usb 2-1: config 0 has no interface number 0 [ 1387.600424][T17035] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 1387.708851][ T8577] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1387.718528][ T8577] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.726929][ T8577] usb 2-1: Product: syz [ 1387.731294][ T8577] usb 2-1: Manufacturer: syz [ 1387.736366][ T8577] usb 2-1: SerialNumber: syz [ 1388.005752][ T8577] usb 2-1: config 0 descriptor?? [ 1388.023953][ T8840] hfsplus: b-tree write err: -5, ino 4 [ 1388.070461][ T8577] smsc95xx v2.0.0 [ 1388.541761][ T8577] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1388.554089][ T8577] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1388.799092][ T8577] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1388.811054][ T8577] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 1389.175829][ T5186] Bluetooth: hci4: command tx timeout [ 1390.333246][ T10] usb 2-1: USB disconnect, device number 17 [ 1390.784001][T16916] bridge0: port 1(bridge_slave_0) entered blocking state [ 1390.792207][T16916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1390.802260][T16916] bridge_slave_0: entered allmulticast mode [ 1390.812050][T16916] bridge_slave_0: entered promiscuous mode [ 1391.165083][T16424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1391.225677][ T6827] bridge_slave_1: left allmulticast mode [ 1391.238730][ T6827] bridge_slave_1: left promiscuous mode [ 1391.246998][ T6827] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.276429][ T5186] Bluetooth: hci4: command tx timeout [ 1391.368828][ T6827] bridge_slave_0: left allmulticast mode [ 1391.375023][ T6827] bridge_slave_0: left promiscuous mode [ 1391.381722][ T6827] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.247159][T17145] loop3: detected capacity change from 0 to 1024 [ 1392.303801][ T6827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1392.447862][ T6827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1392.521138][ T6827] bond0 (unregistering): Released all slaves [ 1392.659570][T16916] bridge0: port 2(bridge_slave_1) entered blocking state [ 1392.671479][T16916] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.679814][T16916] bridge_slave_1: entered allmulticast mode [ 1392.689296][T16916] bridge_slave_1: entered promiscuous mode [ 1392.895749][ T713] hfsplus: b-tree write err: -5, ino 4 [ 1393.337778][ T5186] Bluetooth: hci4: command tx timeout [ 1393.503396][T16916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1393.733824][ T9315] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1393.772970][T16916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1393.870671][ T6827] hsr_slave_0: left promiscuous mode [ 1393.931943][ T6827] hsr_slave_1: left promiscuous mode [ 1393.985274][ T6827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1393.985306][ T9315] usb 2-1: Using ep0 maxpacket: 32 [ 1394.001976][ T9315] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1394.002130][ T9315] usb 2-1: config 0 has no interface number 0 [ 1394.018415][ T6827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1394.070398][ T9315] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1394.080227][ T9315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.088694][ T9315] usb 2-1: Product: syz [ 1394.093099][ T9315] usb 2-1: Manufacturer: syz [ 1394.100696][ T9315] usb 2-1: SerialNumber: syz [ 1394.155229][ T6827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1394.163128][ T6827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1394.192671][ T9315] usb 2-1: config 0 descriptor?? [ 1394.256881][ T9315] smsc95xx v2.0.0 [ 1394.280702][ T6827] veth1_macvtap: left promiscuous mode [ 1394.286925][ T6827] veth0_macvtap: left promiscuous mode [ 1394.293203][ T6827] veth1_vlan: left promiscuous mode [ 1394.299221][ T6827] veth0_vlan: left promiscuous mode [ 1394.916130][ T9315] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1394.932240][ T9315] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1395.154908][ T9315] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1395.168775][ T9315] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 1395.794215][ T6827] team0 (unregistering): Port device team_slave_1 removed [ 1395.877478][ T6827] team0 (unregistering): Port device team_slave_0 removed [ 1395.897441][T17217] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1364'. [ 1395.907420][T17217] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1364'. [ 1396.632481][T16916] team0: Port device team_slave_0 added [ 1396.768546][T16916] team0: Port device team_slave_1 added [ 1396.792767][ T1922] usb 2-1: USB disconnect, device number 18 [ 1397.355514][T16916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1397.362848][T16916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1397.393855][T16916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1397.423008][T16424] veth0_vlan: entered promiscuous mode [ 1397.523131][ T1922] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1397.593983][T16424] veth1_vlan: entered promiscuous mode [ 1397.618822][T16916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1397.627020][T16916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1397.654208][T16916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1397.735417][ T1922] usb 5-1: device descriptor read/64, error -71 [ 1397.976106][ T1922] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1398.155084][ T6827] bio_check_eod: 1 callbacks suppressed [ 1398.155170][ T6827] kworker/u8:1: attempt to access beyond end of device [ 1398.155170][ T6827] loop2: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 1398.175387][ T6827] kworker/u8:1: attempt to access beyond end of device [ 1398.175387][ T6827] loop2: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 1398.190846][ T6827] kworker/u8:1: attempt to access beyond end of device [ 1398.190846][ T6827] loop2: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 1398.210296][ T6827] kworker/u8:1: attempt to access beyond end of device [ 1398.210296][ T6827] loop2: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 1398.225933][ T6827] kworker/u8:1: attempt to access beyond end of device [ 1398.225933][ T6827] loop2: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 1398.240263][ T6827] kworker/u8:1: attempt to access beyond end of device [ 1398.240263][ T6827] loop2: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 1398.254560][ T6827] kworker/u8:1: attempt to access beyond end of device [ 1398.254560][ T6827] loop2: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 1398.269395][ T6827] kworker/u8:1: attempt to access beyond end of device [ 1398.269395][ T6827] loop2: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 1398.283563][ T6827] kworker/u8:1: attempt to access beyond end of device [ 1398.283563][ T6827] loop2: rw=12288, sector=14, nr_sectors = 2 limit=0 [ 1398.302207][ T6827] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4526: inode #12: block 7: comm kworker/u8:1: unable to read itable block [ 1398.318040][ T6827] kworker/u8:1: attempt to access beyond end of device [ 1398.318040][ T6827] loop2: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 1398.332000][ T6827] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 1398.340786][ T6827] EXT4-fs (loop2): I/O error while writing superblock [ 1398.348292][ T1922] usb 5-1: device descriptor read/64, error -71 [ 1398.435202][T16916] hsr_slave_0: entered promiscuous mode [ 1398.453508][T16916] hsr_slave_1: entered promiscuous mode [ 1398.465879][ T1922] usb usb5-port1: attempt power cycle [ 1398.481320][T16916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1398.489444][T16916] Cannot create hsr debugfs directory [ 1398.596528][T16565] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1398.790552][T16565] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 1398.799509][T16565] EXT4-fs (loop2): I/O error while writing superblock [ 1398.824552][ T1922] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1398.845231][T16424] veth0_macvtap: entered promiscuous mode [ 1398.891908][ T1922] usb 5-1: device descriptor read/8, error -71 [ 1399.067706][T16424] veth1_macvtap: entered promiscuous mode [ 1399.206223][ T1922] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1399.312954][ T1922] usb 5-1: device descriptor read/8, error -71 [ 1399.388465][T16424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1399.399578][T16424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.409809][T16424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1399.421049][T16424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.436250][T16424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1399.447357][T16424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.457516][T16424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1399.468426][T16424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.483555][T17363] loop3: detected capacity change from 0 to 512 [ 1399.483967][T16424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1399.530760][ T1922] usb usb5-port1: unable to enumerate USB device [ 1399.567801][T17363] EXT4-fs: Ignoring removed oldalloc option [ 1399.661394][T16424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1399.672498][T16424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.683339][T16424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1399.694186][T16424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.704462][T16424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1399.715616][T16424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.726008][T16424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1399.743055][T16424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.758312][T16424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1399.845191][T17363] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.1371: Parent and EA inode have the same ino 15 [ 1399.940243][T17363] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.1371: Parent and EA inode have the same ino 15 [ 1399.995421][T17363] EXT4-fs (loop3): 1 orphan inode deleted [ 1400.002646][T17363] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1400.111979][T16424] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.122288][T16424] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.131597][T16424] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.144554][T16424] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.571316][T16916] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.722757][T17391] Bluetooth: MGMT ver 1.23 [ 1401.034276][T16916] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.157249][ T1922] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1401.254461][T16916] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.405154][ T1922] usb 5-1: Using ep0 maxpacket: 32 [ 1401.491270][ T1922] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1401.500371][ T1922] usb 5-1: config 0 has no interface number 0 [ 1401.597195][T16916] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.684299][ T1922] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1401.693781][ T1922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.702322][ T1922] usb 5-1: Product: syz [ 1401.706853][ T1922] usb 5-1: Manufacturer: syz [ 1401.711754][ T1922] usb 5-1: SerialNumber: syz [ 1401.775990][T17406] loop3: detected capacity change from 512 to 0 [ 1401.895891][ T1922] usb 5-1: config 0 descriptor?? [ 1401.939470][ T1922] smsc95xx v2.0.0 [ 1402.465671][ T1922] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1402.477845][ T1922] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1402.631954][T16916] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1402.721066][ T1922] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1402.733012][ T1922] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 1402.885266][T16916] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1402.959068][T16916] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1403.040622][ T3052] bridge_slave_1: left allmulticast mode [ 1403.046812][ T3052] bridge_slave_1: left promiscuous mode [ 1403.053278][ T3052] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.174546][ T3052] bridge_slave_0: left allmulticast mode [ 1403.181724][ T3052] bridge_slave_0: left promiscuous mode [ 1403.188184][ T3052] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.066988][ T3052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1404.104390][ T3052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1404.131580][ T3052] bond0 (unregistering): Released all slaves [ 1404.276996][ T1922] usb 5-1: USB disconnect, device number 27 [ 1404.290156][T16916] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1404.422662][ T3052] tipc: Disabling bearer [ 1404.428891][ T3052] tipc: Left network mode [ 1405.143346][ T3052] hsr_slave_0: left promiscuous mode [ 1405.176539][ T3052] hsr_slave_1: left promiscuous mode [ 1405.201594][ T3052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1405.209936][ T3052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1405.257365][ T3052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1405.269820][ T3052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1405.318628][ T3052] veth1_macvtap: left promiscuous mode [ 1405.324498][ T3052] veth0_macvtap: left promiscuous mode [ 1405.331039][ T3052] veth1_vlan: left promiscuous mode [ 1405.336900][ T3052] veth0_vlan: left promiscuous mode [ 1406.149078][ T1922] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1406.277540][ T3052] team0 (unregistering): Port device team_slave_1 removed [ 1406.355058][ T3052] team0 (unregistering): Port device team_slave_0 removed [ 1406.486035][ T1922] usb 2-1: device descriptor read/64, error -71 [ 1406.815160][ T1922] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1406.980897][ T1922] usb 2-1: device descriptor read/64, error -71 [ 1407.113576][ T1922] usb usb2-port1: attempt power cycle [ 1407.260407][ T713] Bluetooth: Error in BCSP hdr checksum [ 1407.381869][T16916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1407.497292][ T1922] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1407.530821][ T3052] Bluetooth: Error in BCSP hdr checksum [ 1407.558202][T16916] 8021q: adding VLAN 0 to HW filter on device team0 [ 1407.607621][ T1922] usb 2-1: device descriptor read/8, error -71 [ 1407.668389][ T6827] bridge0: port 1(bridge_slave_0) entered blocking state [ 1407.676268][ T6827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1407.721197][ T6827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1407.729033][ T6827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1407.845143][ T1922] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1407.897125][ T1922] usb 2-1: device descriptor read/8, error -71 [ 1408.010549][ T1922] usb usb2-port1: unable to enumerate USB device [ 1409.015853][ T9642] Bluetooth: hci1: command 0x1003 tx timeout [ 1409.023063][ T5186] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1409.446823][T16916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1410.157559][ T1922] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1410.172726][T16916] veth0_vlan: entered promiscuous mode [ 1410.321038][ T713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1410.329283][ T713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1410.451447][ T1922] usb 5-1: Using ep0 maxpacket: 32 [ 1410.460609][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1410.468899][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1410.518461][ T1922] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1410.527597][ T1922] usb 5-1: config 0 has no interface number 0 [ 1410.582665][T16916] veth1_vlan: entered promiscuous mode [ 1410.617850][ T9642] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1410.631624][ T9642] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1410.642341][ T9642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1410.660886][ T1922] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1410.670670][ T1922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.679699][ T1922] usb 5-1: Product: syz [ 1410.684147][ T1922] usb 5-1: Manufacturer: syz [ 1410.692443][ T1922] usb 5-1: SerialNumber: syz [ 1410.706559][ T1922] usb 5-1: config 0 descriptor?? [ 1410.725418][ T9642] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1410.739154][ T1922] smsc95xx v2.0.0 [ 1410.758753][ T9642] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1410.799678][ T9642] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1411.236680][ T1922] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1411.249222][ T1922] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1411.501734][ T1922] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1411.518600][ T1922] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 1411.547103][T16916] veth0_macvtap: entered promiscuous mode [ 1411.674207][T16916] veth1_macvtap: entered promiscuous mode [ 1411.859227][T16916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1411.870853][T16916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1411.882178][T16916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1411.896436][T16916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1411.907580][T16916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1411.923208][T16916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1411.935274][T16916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1411.947265][T16916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1411.964403][T16916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1412.276074][T16916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1412.286928][T16916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.297349][T16916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1412.308257][T16916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.318604][T16916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1412.333691][T16916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.346585][T16916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1412.357897][T16916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.373347][T16916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1412.708920][T16916] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.718103][T16916] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.727406][T16916] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.740013][T16916] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.878510][ T10] usb 5-1: USB disconnect, device number 28 [ 1412.935548][ T5186] Bluetooth: hci1: command tx timeout [ 1413.368441][T17544] chnl_net:caif_netlink_parms(): no params data found [ 1413.775102][ T9315] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1413.947419][ T9315] usb 5-1: device descriptor read/64, error -71 [ 1414.245545][ T9315] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1414.436546][ T9315] usb 5-1: device descriptor read/64, error -71 [ 1414.556193][ T9315] usb usb5-port1: attempt power cycle [ 1414.944357][ T9315] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1415.027411][ T5186] Bluetooth: hci1: command tx timeout [ 1415.067861][ T9315] usb 5-1: device descriptor read/8, error -71 [ 1415.347244][T17544] bridge0: port 1(bridge_slave_0) entered blocking state [ 1415.355583][T17544] bridge0: port 1(bridge_slave_0) entered disabled state [ 1415.364977][T17544] bridge_slave_0: entered allmulticast mode [ 1415.375103][T17544] bridge_slave_0: entered promiscuous mode [ 1415.404777][ T9315] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1415.458503][ T9315] usb 5-1: device descriptor read/8, error -71 [ 1415.498757][T17544] bridge0: port 2(bridge_slave_1) entered blocking state [ 1415.513850][T17544] bridge0: port 2(bridge_slave_1) entered disabled state [ 1415.522975][T17544] bridge_slave_1: entered allmulticast mode [ 1415.532575][T17544] bridge_slave_1: entered promiscuous mode [ 1415.576547][ T9315] usb usb5-port1: unable to enumerate USB device [ 1415.957844][T17544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1416.007854][T17544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1416.163116][T17544] team0: Port device team_slave_0 added [ 1416.221308][T17544] team0: Port device team_slave_1 added [ 1416.696510][T17544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1416.703723][T17544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1416.732865][T17544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1416.963795][T17544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1416.971684][T17544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1416.998559][T17544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1417.095128][ T5186] Bluetooth: hci1: command tx timeout [ 1417.467077][ T1922] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1417.508303][T17544] hsr_slave_0: entered promiscuous mode [ 1417.577266][T17544] hsr_slave_1: entered promiscuous mode [ 1417.616161][T17544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1417.625214][T17544] Cannot create hsr debugfs directory [ 1417.645118][ T1922] usb 2-1: Using ep0 maxpacket: 32 [ 1417.667594][ T1922] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1417.678320][ T1922] usb 2-1: config 0 has no interface number 0 [ 1417.768268][ T1922] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1417.777841][ T1922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.786499][ T1922] usb 2-1: Product: syz [ 1417.790826][ T1922] usb 2-1: Manufacturer: syz [ 1417.795712][ T1922] usb 2-1: SerialNumber: syz [ 1417.877098][ T1922] usb 2-1: config 0 descriptor?? [ 1417.983001][ T1922] smsc95xx v2.0.0 [ 1418.341833][ T1922] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1418.353600][ T1922] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1418.413458][T17926] loop4: detected capacity change from 0 to 512 [ 1418.477693][T17926] EXT4-fs: Ignoring removed oldalloc option [ 1418.579516][ T1922] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1418.591548][ T1922] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 1418.678772][T17926] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1404: Parent and EA inode have the same ino 15 [ 1418.713594][T17926] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1404: Parent and EA inode have the same ino 15 [ 1418.810483][T17926] EXT4-fs (loop4): 1 orphan inode deleted [ 1418.824510][T17926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1419.175810][ T5186] Bluetooth: hci1: command tx timeout [ 1419.266524][T17544] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.523645][T17544] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.729402][T17544] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.980765][T17544] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.045155][T17964] loop4: detected capacity change from 512 to 0 [ 1420.583367][ T1922] usb 2-1: USB disconnect, device number 23 [ 1420.773901][T17544] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1421.040478][T17544] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1421.103497][T17544] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1421.213585][T17544] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1422.337387][ T1922] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1422.537542][ T1922] usb 2-1: device descriptor read/64, error -71 [ 1422.786609][ T1922] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1422.985998][ T1922] usb 2-1: device descriptor read/64, error -71 [ 1423.101586][ T1922] usb usb2-port1: attempt power cycle [ 1423.197114][T17544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1423.494906][ T1922] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1423.606078][ T1922] usb 2-1: device descriptor read/8, error -71 [ 1423.648873][T17544] 8021q: adding VLAN 0 to HW filter on device team0 [ 1423.755742][ T6827] bridge0: port 1(bridge_slave_0) entered blocking state [ 1423.763367][ T6827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1423.846350][ T3052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1423.854430][ T3052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1423.870836][ T1922] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1423.937243][ T1922] usb 2-1: device descriptor read/8, error -71 [ 1423.985684][ T6827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1423.993402][ T6827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1424.064505][ T1922] usb usb2-port1: unable to enumerate USB device [ 1424.179834][ T3451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.188589][ T3451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1424.343990][ T59] bio_check_eod: 1 callbacks suppressed [ 1424.344076][ T59] kworker/u8:4: attempt to access beyond end of device [ 1424.344076][ T59] loop3: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 1424.366390][ T59] kworker/u8:4: attempt to access beyond end of device [ 1424.366390][ T59] loop3: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 1424.382074][ T59] kworker/u8:4: attempt to access beyond end of device [ 1424.382074][ T59] loop3: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 1424.397159][ T59] kworker/u8:4: attempt to access beyond end of device [ 1424.397159][ T59] loop3: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 1424.416978][ T59] kworker/u8:4: attempt to access beyond end of device [ 1424.416978][ T59] loop3: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 1424.421284][T17544] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1424.433866][ T59] kworker/u8:4: attempt to access beyond end of device [ 1424.433866][ T59] loop3: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 1424.459232][ T59] kworker/u8:4: attempt to access beyond end of device [ 1424.459232][ T59] loop3: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 1424.473963][ T59] kworker/u8:4: attempt to access beyond end of device [ 1424.473963][ T59] loop3: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 1424.488244][ T59] kworker/u8:4: attempt to access beyond end of device [ 1424.488244][ T59] loop3: rw=12288, sector=14, nr_sectors = 2 limit=0 [ 1424.502249][ T59] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4526: inode #12: block 7: comm kworker/u8:4: unable to read itable block [ 1424.522031][ T59] kworker/u8:4: attempt to access beyond end of device [ 1424.522031][ T59] loop3: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 1424.538893][ T59] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 1424.547965][ T59] EXT4-fs (loop3): I/O error while writing superblock [ 1424.841923][T17363] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1424.987278][T17363] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 1424.996871][T17363] EXT4-fs (loop3): I/O error while writing superblock [ 1426.226229][T18060] [U] ™˜ðN¦m8W$[Oc [ 1426.230193][T18060] [U] ¨mãì3lT‰uÇhš1Ïï£Ì Àáî|‹+$7ºÃ¼o|ˆ/ëÐò¾õ³ [ 1426.237030][T18060] [U] bw¸¬k‡k)9n$.ȶb¾.¥à°•ýê_e7Qé‡\9õ¨^®·Qdn8ZòuòÇÅTšHú¹òAM—"u}›ÚcnëÃÍÿ;²&˜ýØöŸ¨<§üþ, [ 1426.247673][T18060] [U] Ò~’ó[!gnVÀ[¶ž£IÉf [ 1426.252180][T18060] [U] g.ÏÖr.ÚOJÛ³f…+·gL0jn,ÙJV›º®–Fʘ ó˜+ƒ–ÿQq—mèX B§”_z)ÊŠåt³ôJuÆÕÚÖ¶¤@*ØX[YâOˆJ™'•¶ø£ý‰x¡Ö}ð×VL6u°>JyqUÕÏûWºêa«Ø@‘ŒnS-•£@ [ 1426.411552][T18065] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1417'. [ 1426.878192][T18064] [U] hвëEJô–ÚR-§aÓmä‡çžÆ³$sæ?7YèAüM[. [ 1427.011932][T17544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1427.898216][T17544] veth0_vlan: entered promiscuous mode [ 1428.045206][T17544] veth1_vlan: entered promiscuous mode [ 1428.800553][T17544] veth0_macvtap: entered promiscuous mode [ 1428.847050][ T59] bridge_slave_1: left allmulticast mode [ 1428.853131][ T59] bridge_slave_1: left promiscuous mode [ 1428.867115][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.976137][ T59] bridge_slave_0: left allmulticast mode [ 1428.982021][ T59] bridge_slave_0: left promiscuous mode [ 1428.988603][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.970476][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1430.103680][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1430.133388][ T9642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1430.163288][ T9642] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1430.176330][ T59] bond0 (unregistering): Released all slaves [ 1430.195951][ T9642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1430.266454][ T9642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1430.302633][ T9642] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1430.311558][ T9642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1430.527104][T17544] veth1_macvtap: entered promiscuous mode [ 1430.540816][T18113] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1427'. [ 1431.547229][ T59] hsr_slave_0: left promiscuous mode [ 1431.582359][ T59] hsr_slave_1: left promiscuous mode [ 1431.649090][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1431.657190][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1431.725564][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1431.733565][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1431.842111][ T59] veth1_macvtap: left promiscuous mode [ 1431.848722][ T59] veth0_macvtap: left promiscuous mode [ 1431.855051][ T59] veth1_vlan: left promiscuous mode [ 1431.860559][ T59] veth0_vlan: left promiscuous mode [ 1431.898316][T18197] loop0: detected capacity change from 0 to 16 [ 1432.036275][T18197] erofs: (device loop0): mounted with root inode @ nid 36. [ 1432.301611][T18199] loop1: detected capacity change from 0 to 512 [ 1432.339496][T18199] EXT4-fs: Ignoring removed oldalloc option [ 1432.399624][ T5186] Bluetooth: hci2: command tx timeout [ 1432.427885][T18199] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.1432: Parent and EA inode have the same ino 15 [ 1432.495934][T18199] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.1432: Parent and EA inode have the same ino 15 [ 1432.675785][T18199] EXT4-fs (loop1): 1 orphan inode deleted [ 1432.683492][T18199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1433.268913][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1433.303464][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1433.787450][T17544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1433.799933][T17544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1433.811731][T17544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1433.823799][T17544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1433.837423][T17544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1433.849996][T17544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1433.860422][T17544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1433.871349][T17544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1433.887220][T17544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1434.169591][T18212] loop1: detected capacity change from 512 to 0 [ 1434.180702][T17544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1434.191642][T17544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.201714][T17544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1434.212376][T17544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.222455][T17544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1434.233292][T17544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.248840][T17544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1434.260545][T17544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.274031][T17544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1434.296666][T18248] bio_check_eod: 2 callbacks suppressed [ 1434.296742][T18248] syz.1.1432: attempt to access beyond end of device [ 1434.296742][T18248] loop1: rw=12288, sector=72, nr_sectors = 2 limit=0 [ 1434.317148][T18248] EXT4-fs warning (device loop1): dx_probe:823: inode #12: lblock 0: comm syz.1.1432: error -5 reading directory block [ 1434.465669][ T5186] Bluetooth: hci2: command tx timeout [ 1434.530554][T17544] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.540091][T17544] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.556070][T17544] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.567074][T17544] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.659853][T18212] syz.1.1432: attempt to access beyond end of device [ 1434.659853][T18212] loop1: rw=12288, sector=72, nr_sectors = 2 limit=0 [ 1434.674121][T18212] EXT4-fs warning (device loop1): dx_probe:823: inode #12: lblock 0: comm syz.1.1432: error -5 reading directory block [ 1434.932173][T18254] overlayfs: missing 'lowerdir' [ 1434.947090][T18103] chnl_net:caif_netlink_parms(): no params data found [ 1435.453855][T18277] loop0: detected capacity change from 0 to 512 [ 1435.647731][T18277] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1435.811571][T18277] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 1435.904894][T18277] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1435.917276][T18277] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1435: bg 0: block 361: padding at end of block bitmap is not set [ 1436.025860][T18277] EXT4-fs (loop0): Remounting filesystem read-only [ 1436.079059][T18277] EXT4-fs (loop0): 1 truncate cleaned up [ 1436.089542][T18277] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1436.447516][T16424] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1436.539842][ T5186] Bluetooth: hci2: command tx timeout [ 1436.717275][T18296] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1438'. [ 1437.470299][T18312] loop2: detected capacity change from 0 to 256 [ 1437.636169][T18103] bridge0: port 1(bridge_slave_0) entered blocking state [ 1437.644195][T18103] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.663523][T18103] bridge_slave_0: entered allmulticast mode [ 1437.680761][T18103] bridge_slave_0: entered promiscuous mode [ 1437.776309][ T29] audit: type=1326 audit(1727442087.840:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18311 comm="syz.2.1440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 1437.799577][ T29] audit: type=1326 audit(1727442087.850:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18311 comm="syz.2.1440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 1437.822831][ T29] audit: type=1326 audit(1727442087.850:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18311 comm="syz.2.1440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 1437.849329][ T29] audit: type=1326 audit(1727442087.870:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18311 comm="syz.2.1440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 1437.874222][ T29] audit: type=1326 audit(1727442087.870:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18311 comm="syz.2.1440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 1437.897502][ T29] audit: type=1326 audit(1727442087.870:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18311 comm="syz.2.1440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 1437.920319][ T29] audit: type=1326 audit(1727442087.870:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18311 comm="syz.2.1440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 1437.943184][ T29] audit: type=1326 audit(1727442087.880:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18311 comm="syz.2.1440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 1438.021151][T18103] bridge0: port 2(bridge_slave_1) entered blocking state [ 1438.033678][T18103] bridge0: port 2(bridge_slave_1) entered disabled state [ 1438.042369][T18103] bridge_slave_1: entered allmulticast mode [ 1438.050911][T18103] bridge_slave_1: entered promiscuous mode [ 1438.154996][T16916] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 1438.162988][T16916] FAT-fs (loop2): Filesystem has been set read-only [ 1438.210820][T16916] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 1438.400589][T18103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1438.475528][T18103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1438.491613][ T29] audit: type=1326 audit(1727442088.090:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18311 comm="syz.2.1440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 1438.515902][ T29] audit: type=1326 audit(1727442088.090:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18311 comm="syz.2.1440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 1438.637808][ T5186] Bluetooth: hci2: command tx timeout [ 1438.707269][T18103] team0: Port device team_slave_0 added [ 1438.828566][ T3052] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.930560][T18103] team0: Port device team_slave_1 added [ 1439.026375][T18388] loop0: detected capacity change from 0 to 16 [ 1439.066256][ T3052] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.240727][T18388] erofs: (device loop0): mounted with root inode @ nid 36. [ 1439.600904][ T3052] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.063957][ T3052] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.213626][T18103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1440.221236][T18103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1440.247963][T18103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1440.620545][T18103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1440.628045][T18103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1440.655006][T18103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1440.737444][ T3052] bridge_slave_1: left allmulticast mode [ 1440.743379][ T3052] bridge_slave_1: left promiscuous mode [ 1440.750201][ T3052] bridge0: port 2(bridge_slave_1) entered disabled state [ 1440.958335][T18435] overlayfs: missing 'lowerdir' [ 1441.022840][ T3052] bridge_slave_0: left allmulticast mode [ 1441.029209][ T3052] bridge_slave_0: left promiscuous mode [ 1441.035669][ T3052] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.569648][ T2999] kworker/u8:11: attempt to access beyond end of device [ 1441.569648][ T2999] loop4: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 1441.583718][ T2999] kworker/u8:11: attempt to access beyond end of device [ 1441.583718][ T2999] loop4: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 1441.598073][ T2999] kworker/u8:11: attempt to access beyond end of device [ 1441.598073][ T2999] loop4: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 1441.616783][ T2999] kworker/u8:11: attempt to access beyond end of device [ 1441.616783][ T2999] loop4: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 1441.632278][ T2999] kworker/u8:11: attempt to access beyond end of device [ 1441.632278][ T2999] loop4: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 1441.646501][ T2999] kworker/u8:11: attempt to access beyond end of device [ 1441.646501][ T2999] loop4: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 1441.660821][ T2999] kworker/u8:11: attempt to access beyond end of device [ 1441.660821][ T2999] loop4: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 1441.674825][ T2999] kworker/u8:11: attempt to access beyond end of device [ 1441.674825][ T2999] loop4: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 1441.688858][ T2999] kworker/u8:11: attempt to access beyond end of device [ 1441.688858][ T2999] loop4: rw=12288, sector=14, nr_sectors = 2 limit=0 [ 1441.702807][ T2999] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4526: inode #12: block 7: comm kworker/u8:11: unable to read itable block [ 1441.720960][ T2999] kworker/u8:11: attempt to access beyond end of device [ 1441.720960][ T2999] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 1441.736818][ T2999] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 1441.745525][ T2999] EXT4-fs (loop4): I/O error while writing superblock [ 1441.755573][ T9642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1441.764953][ T9642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1441.774155][ T9642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1441.787412][ T9642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1441.798539][ T9642] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1441.863915][ T9642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1441.984967][T17926] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1442.009640][T17926] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 1442.018390][T17926] EXT4-fs (loop4): I/O error while writing superblock [ 1442.105962][ T3052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1442.197126][ T3052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1442.247173][ T3052] bond0 (unregistering): Released all slaves [ 1443.224437][T18103] hsr_slave_0: entered promiscuous mode [ 1443.331249][T18103] hsr_slave_1: entered promiscuous mode [ 1443.553161][T18504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1448'. [ 1443.975213][ T5186] Bluetooth: hci4: command tx timeout [ 1444.245722][ T3052] hsr_slave_0: left promiscuous mode [ 1444.307514][ T3052] hsr_slave_1: left promiscuous mode [ 1444.356041][ T3052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1444.363804][ T3052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1444.427348][ T3052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1444.435482][ T3052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1444.528757][ T3052] veth1_macvtap: left promiscuous mode [ 1444.535205][ T3052] veth0_macvtap: left promiscuous mode [ 1444.541048][ T3052] veth1_vlan: left promiscuous mode [ 1444.546628][ T3052] veth0_vlan: left promiscuous mode [ 1445.105090][ T9642] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1445.133526][ T9642] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1445.147901][ T9642] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1445.161577][ T9642] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1445.183661][ T9642] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1445.203616][ T9642] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1446.055054][ T9642] Bluetooth: hci4: command tx timeout [ 1446.159543][ T3052] team0 (unregistering): Port device team_slave_1 removed [ 1446.227202][ T3052] team0 (unregistering): Port device team_slave_0 removed [ 1446.869386][T18570] netlink: 'syz.0.1451': attribute type 13 has an invalid length. [ 1446.902765][T18570] gretap0: refused to change device tx_queue_len [ 1447.381909][ T9642] Bluetooth: hci6: command tx timeout [ 1447.851248][T18103] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.934302][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 1447.941495][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1448.143087][ T5186] Bluetooth: hci4: command tx timeout [ 1448.198334][T18714] loop0: detected capacity change from 0 to 16 [ 1448.202012][T18103] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.257198][T18714] erofs: (device loop0): mounted with root inode @ nid 36. [ 1448.358787][T18438] chnl_net:caif_netlink_parms(): no params data found [ 1448.436427][T18103] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.671856][T18103] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.101400][ T2999] bridge_slave_1: left allmulticast mode [ 1449.108866][ T2999] bridge_slave_1: left promiscuous mode [ 1449.116893][ T2999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.209396][ T2999] bridge_slave_0: left allmulticast mode [ 1449.216293][ T2999] bridge_slave_0: left promiscuous mode [ 1449.223007][ T2999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.250879][T18817] overlayfs: missing 'lowerdir' [ 1449.414994][ T5186] Bluetooth: hci6: command tx timeout [ 1449.858511][ T2999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1449.877562][ T2999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1449.896948][ T2999] bond0 (unregistering): Released all slaves [ 1450.069312][T18553] chnl_net:caif_netlink_parms(): no params data found [ 1450.251823][ T5186] Bluetooth: hci4: command tx timeout [ 1450.364040][T16670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1450.372801][T16670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1450.593006][T18838] loop0: detected capacity change from 0 to 512 [ 1450.657746][T18103] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1450.735426][T18838] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.1454: Invalid inode bitmap blk 4 in block_group 0 [ 1450.833247][T18838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1450.920761][T18103] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1450.926114][T16670] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1450.937142][T16670] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1451.055155][ T2999] hsr_slave_0: left promiscuous mode [ 1451.087361][ T2999] hsr_slave_1: left promiscuous mode [ 1451.113470][ T2999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1451.121537][ T2999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1451.155723][ T2999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1451.163522][ T2999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1451.207308][ T2999] veth1_macvtap: left promiscuous mode [ 1451.213391][ T2999] veth0_macvtap: left promiscuous mode [ 1451.219622][ T2999] veth1_vlan: left promiscuous mode [ 1451.225948][ T2999] veth0_vlan: left promiscuous mode [ 1451.417233][T16424] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1451.494870][ T5186] Bluetooth: hci6: command tx timeout [ 1451.913415][ T2999] team0 (unregistering): Port device team_slave_1 removed [ 1451.973003][ T2999] team0 (unregistering): Port device team_slave_0 removed [ 1452.195391][T18103] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1452.482460][T18889] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1455'. [ 1452.548567][T18103] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1452.769645][T18438] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.782723][T18438] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.791030][T18438] bridge_slave_0: entered allmulticast mode [ 1452.800457][T18438] bridge_slave_0: entered promiscuous mode [ 1452.988355][T18438] bridge0: port 2(bridge_slave_1) entered blocking state [ 1452.996568][T18438] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.004951][T18438] bridge_slave_1: entered allmulticast mode [ 1453.014492][T18438] bridge_slave_1: entered promiscuous mode [ 1453.576416][ T5186] Bluetooth: hci6: command tx timeout [ 1453.780463][T18438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1453.978286][T18438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1454.007080][T18553] bridge0: port 1(bridge_slave_0) entered blocking state [ 1454.015105][T18553] bridge0: port 1(bridge_slave_0) entered disabled state [ 1454.023063][T18553] bridge_slave_0: entered allmulticast mode [ 1454.032822][T18553] bridge_slave_0: entered promiscuous mode [ 1454.161405][T18553] bridge0: port 2(bridge_slave_1) entered blocking state [ 1454.171992][T18553] bridge0: port 2(bridge_slave_1) entered disabled state [ 1454.180297][T18553] bridge_slave_1: entered allmulticast mode [ 1454.189534][T18553] bridge_slave_1: entered promiscuous mode [ 1454.313850][T18438] team0: Port device team_slave_0 added [ 1454.395363][T18438] team0: Port device team_slave_1 added [ 1454.513282][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1454.522541][ T29] audit: type=1326 audit(1727442104.590:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18990 comm="syz.0.1458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 1454.658068][ T29] audit: type=1326 audit(1727442104.670:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18990 comm="syz.0.1458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 1454.681980][ T29] audit: type=1326 audit(1727442104.670:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18990 comm="syz.0.1458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 1454.706359][ T29] audit: type=1326 audit(1727442104.670:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18990 comm="syz.0.1458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 1454.827812][T18553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1455.041470][T18553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1455.060191][T18438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1455.068983][T18438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1455.095834][T18438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1455.342413][T19071] overlayfs: missing 'lowerdir' [ 1455.362506][T18438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1455.370349][T18438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1455.397561][T18438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1455.626890][T18553] team0: Port device team_slave_0 added [ 1455.781387][T18553] team0: Port device team_slave_1 added [ 1456.177384][T19113] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1462'. [ 1456.252514][T18438] hsr_slave_0: entered promiscuous mode [ 1456.272101][T18438] hsr_slave_1: entered promiscuous mode [ 1456.284271][T18438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1456.292359][T18438] Cannot create hsr debugfs directory [ 1456.307690][T18553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1456.316237][T18553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1456.343085][T18553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1456.512518][T18103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1456.523656][T18553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1456.531156][T18553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1456.560317][T18553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1456.975532][T18103] 8021q: adding VLAN 0 to HW filter on device team0 [ 1457.328068][T18553] hsr_slave_0: entered promiscuous mode [ 1457.367127][T18553] hsr_slave_1: entered promiscuous mode [ 1457.407845][T18553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1457.416221][T18553] Cannot create hsr debugfs directory [ 1457.446190][T16670] bridge0: port 1(bridge_slave_0) entered blocking state [ 1457.454130][T16670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1457.772294][T16670] bridge0: port 2(bridge_slave_1) entered blocking state [ 1457.780550][T16670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1459.204456][T19316] loop3: detected capacity change from 0 to 512 [ 1459.247435][T19316] EXT4-fs (loop3): blocks per group (71) and clusters per group (32768) inconsistent [ 1459.691558][T18553] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.905472][T19352] overlayfs: missing 'lowerdir' [ 1459.931983][T18553] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.985248][ T59] bio_check_eod: 1 callbacks suppressed [ 1459.985330][ T59] kworker/u8:4: attempt to access beyond end of device [ 1459.985330][ T59] loop1: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 1460.005574][ T59] kworker/u8:4: attempt to access beyond end of device [ 1460.005574][ T59] loop1: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 1460.020128][ T59] kworker/u8:4: attempt to access beyond end of device [ 1460.020128][ T59] loop1: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 1460.035033][ T59] kworker/u8:4: attempt to access beyond end of device [ 1460.035033][ T59] loop1: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 1460.050928][ T59] kworker/u8:4: attempt to access beyond end of device [ 1460.050928][ T59] loop1: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 1460.065703][ T59] kworker/u8:4: attempt to access beyond end of device [ 1460.065703][ T59] loop1: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 1460.082460][ T59] kworker/u8:4: attempt to access beyond end of device [ 1460.082460][ T59] loop1: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 1460.097047][ T59] kworker/u8:4: attempt to access beyond end of device [ 1460.097047][ T59] loop1: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 1460.110998][ T59] kworker/u8:4: attempt to access beyond end of device [ 1460.110998][ T59] loop1: rw=12288, sector=14, nr_sectors = 2 limit=0 [ 1460.124928][ T59] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4526: inode #12: block 7: comm kworker/u8:4: unable to read itable block [ 1460.141165][ T59] kworker/u8:4: attempt to access beyond end of device [ 1460.141165][ T59] loop1: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 1460.157504][ T59] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 1460.166919][ T59] EXT4-fs (loop1): I/O error while writing superblock [ 1460.401592][T18199] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1460.434278][T18553] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1460.514919][T18199] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 1460.523600][T18199] EXT4-fs (loop1): I/O error while writing superblock [ 1460.716840][T18553] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1460.922875][T18103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1461.054987][T19370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1471'. [ 1461.564001][T18553] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1461.655648][T18438] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1461.710513][T18553] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1461.828124][T18438] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1461.905287][T18553] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1461.978354][T18438] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1462.064990][T18553] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1462.147781][T18438] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1462.979511][ T2999] bridge_slave_1: left allmulticast mode [ 1462.985662][ T2999] bridge_slave_1: left promiscuous mode [ 1462.992248][ T2999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.117888][ T2999] bridge_slave_0: left allmulticast mode [ 1463.123818][ T2999] bridge_slave_0: left promiscuous mode [ 1463.131114][ T2999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.467540][T19425] loop0: detected capacity change from 0 to 512 [ 1463.654409][T19430] overlayfs: missing 'lowerdir' [ 1463.685775][T19425] Quota error (device loop0): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 1463.696710][T19425] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1463.707339][T19425] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.1476: Failed to acquire dquot type 1 [ 1463.851514][T19425] EXT4-fs (loop0): 1 truncate cleaned up [ 1463.859790][T19425] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1463.873056][T19425] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1464.177572][ T2999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1464.204131][T16424] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1464.277796][ T2999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1464.341348][ T2999] bond0 (unregistering): Released all slaves [ 1465.156248][T19453] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1480'. [ 1465.464302][ T2999] hsr_slave_0: left promiscuous mode [ 1465.532065][ T2999] hsr_slave_1: left promiscuous mode [ 1465.588044][ T2999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1465.595970][ T2999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1465.628537][ T2999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1465.636712][ T2999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1465.692417][ T2999] veth1_macvtap: left promiscuous mode [ 1465.698317][ T2999] veth0_macvtap: left promiscuous mode [ 1465.704216][ T2999] veth1_vlan: left promiscuous mode [ 1465.709969][ T2999] veth0_vlan: left promiscuous mode [ 1466.888374][ T2999] team0 (unregistering): Port device team_slave_1 removed [ 1466.925854][ T2999] team0 (unregistering): Port device team_slave_0 removed [ 1467.157331][T19481] overlayfs: missing 'workdir' [ 1467.692142][T18553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1467.984731][T18438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1468.068893][T18553] 8021q: adding VLAN 0 to HW filter on device team0 [ 1468.147112][T18103] veth0_vlan: entered promiscuous mode [ 1468.261466][ T713] bridge0: port 1(bridge_slave_0) entered blocking state [ 1468.269287][ T713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1468.333987][T19495] loop3: detected capacity change from 0 to 512 [ 1468.336734][T18438] 8021q: adding VLAN 0 to HW filter on device team0 [ 1468.356644][T18103] veth1_vlan: entered promiscuous mode [ 1468.386048][T19495] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1468.419026][ T713] bridge0: port 2(bridge_slave_1) entered blocking state [ 1468.427016][ T713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1468.550667][T19495] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 1468.560637][T19495] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 1468.616019][ T713] bridge0: port 1(bridge_slave_0) entered blocking state [ 1468.623827][ T713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1468.651267][T19495] EXT4-fs (loop3): 1 truncate cleaned up [ 1468.659122][T19495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1468.754251][T19495] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 4: comm syz.3.1487: lblock 0 mapped to illegal pblock 4 (length 1) [ 1468.790021][ T713] bridge0: port 2(bridge_slave_1) entered blocking state [ 1468.797790][ T713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1468.876227][T19495] EXT4-fs (loop3): Remounting filesystem read-only [ 1468.893462][T18103] veth0_macvtap: entered promiscuous mode [ 1468.946129][T19503] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1489'. [ 1469.023049][T18103] veth1_macvtap: entered promiscuous mode [ 1469.041673][T18553] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1469.052641][T18553] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1469.340342][T18103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1469.352866][T18103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1469.366225][T18103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1469.379273][T18103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1469.399675][T18103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1469.432857][T18438] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1469.445876][T18438] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1469.538027][T17544] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1469.749395][T18103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1469.762202][T18103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1469.774415][T18103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1469.786706][T18103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1469.801713][T18103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1469.954228][T18103] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.963634][T18103] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.973001][T18103] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.984431][T18103] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.752621][T18553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1471.770276][T19542] overlayfs: missing 'workdir' [ 1471.957154][T18438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1472.363846][T18438] veth0_vlan: entered promiscuous mode [ 1472.420426][T18553] veth0_vlan: entered promiscuous mode [ 1472.485749][T18438] veth1_vlan: entered promiscuous mode [ 1472.557353][T18553] veth1_vlan: entered promiscuous mode [ 1472.569787][T19551] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1497'. [ 1472.918762][T18438] veth0_macvtap: entered promiscuous mode [ 1472.979280][T18553] veth0_macvtap: entered promiscuous mode [ 1473.031594][T18438] veth1_macvtap: entered promiscuous mode [ 1473.102266][T18553] veth1_macvtap: entered promiscuous mode [ 1473.222745][T18438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1473.236093][T18438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1473.246668][T18438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1473.261196][T18438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1473.272743][T18438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1473.283717][T18438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1473.299619][T18438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1473.388273][T18553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1473.401418][T18553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1473.411771][T18553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1473.425624][T18553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1473.436340][T18553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1473.447171][T18553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1473.457386][T18553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1473.471177][T18553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1473.487073][T18553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1473.536431][T18438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1473.547364][T18438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1473.557623][T18438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1473.570689][T18438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1473.581542][T18438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1473.592412][T18438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1473.607796][T18438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1473.732708][T18553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1473.745210][T18553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1473.758587][T18553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1473.771453][T18553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1473.782215][T18553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1473.793123][T18553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1473.803327][T18553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1473.814144][T18553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1473.833869][T18553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1473.988125][T18553] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.997924][T18553] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.007243][T18553] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.016476][T18553] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.023658][T19563] loop0: detected capacity change from 0 to 512 [ 1474.076920][T18438] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.086285][T18438] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.095530][T18438] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.104678][T18438] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.209757][T19563] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.1500: Invalid inode bitmap blk 4 in block_group 0 [ 1474.346761][T19563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1474.772753][T16424] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1475.542629][T19588] loop0: detected capacity change from 0 to 1024 [ 1475.692443][T19588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1476.190122][T16424] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1477.437533][ T6827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.446381][ T6827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1477.635660][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.643938][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1478.865573][T19659] loop0: detected capacity change from 0 to 1024 [ 1478.889826][T19659] EXT4-fs: Ignoring removed nobh option [ 1479.034909][T19659] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1479.427477][T16424] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1479.853089][T19689] fuse: Bad value for 'fd' [ 1480.297495][T19696] loop0: detected capacity change from 0 to 512 [ 1480.365803][T19696] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1480.382504][T19696] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1480.447402][T19696] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1480.464351][T19700] loop3: detected capacity change from 0 to 512 [ 1480.485854][T19700] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1480.495385][T19700] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1480.495823][T19696] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #13: comm syz.0.1514: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1480.505229][T19700] EXT4-fs (loop3): blocks per group (3008) and clusters per group (32768) inconsistent [ 1480.715330][T19696] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.1514: couldn't read orphan inode 13 (err -117) [ 1480.860629][T19696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1481.106382][T19694] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 1481.137192][ T713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1481.147804][ T713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1481.204238][T19694] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 2 [ 1481.400460][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1481.408896][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1481.561523][ T2999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1481.570143][ T2999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1481.780199][T16424] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1481.902428][T19738] overlay: ./file0 is not a directory [ 1481.925384][ T1084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1481.933494][ T1084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1483.236815][T19769] fuse: Bad value for 'fd' [ 1483.475237][T19773] syz.4.1527 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1483.834984][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1483.878412][T19788] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1483.888168][T19788] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1483.927902][T19789] netlink: 'syz.2.1531': attribute type 13 has an invalid length. [ 1483.989541][T19789] gretap0: refused to change device tx_queue_len [ 1484.058276][ T10] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1484.068153][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.157994][ T10] usb 5-1: config 0 descriptor?? [ 1485.230975][ T10] asix 5-1:0.0 eth1: register 'asix' at usb-dummy_hcd.4-1, ASIX AX88178 USB 2.0 Ethernet, 76:87:c5:9d:aa:0f [ 1485.394055][ T10] usb 5-1: USB disconnect, device number 33 [ 1485.401158][ T10] asix 5-1:0.0 eth1: unregister 'asix' usb-dummy_hcd.4-1, ASIX AX88178 USB 2.0 Ethernet [ 1486.081904][T19838] process 'syz.3.1539' launched '/dev/fd/7' with NULL argv: empty string added [ 1486.620195][T19846] fuse: Bad value for 'fd' [ 1487.409922][ T29] audit: type=1326 audit(1727442137.500:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19859 comm="syz.1.1545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 1487.433989][ T29] audit: type=1326 audit(1727442137.500:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19859 comm="syz.1.1545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 1487.705726][ T29] audit: type=1326 audit(1727442137.590:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19859 comm="syz.1.1545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 1487.729107][ T29] audit: type=1326 audit(1727442137.590:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19859 comm="syz.1.1545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 1487.751994][ T29] audit: type=1326 audit(1727442137.590:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19859 comm="syz.1.1545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 1487.775313][ T29] audit: type=1326 audit(1727442137.620:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19859 comm="syz.1.1545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 1487.801559][ T29] audit: type=1326 audit(1727442137.620:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19859 comm="syz.1.1545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 1487.826386][ T29] audit: type=1326 audit(1727442137.620:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19859 comm="syz.1.1545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 1487.849072][ T29] audit: type=1326 audit(1727442137.640:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19859 comm="syz.1.1545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=401 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 1487.871739][ T29] audit: type=1326 audit(1727442137.640:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19859 comm="syz.1.1545" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000 [ 1488.745091][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1488.980272][ T10] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1488.989794][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.057926][ T10] usb 5-1: config 0 descriptor?? [ 1490.070226][ T10] asix 5-1:0.0 eth1: register 'asix' at usb-dummy_hcd.4-1, ASIX AX88178 USB 2.0 Ethernet, 76:87:c5:9d:aa:0f [ 1490.197103][ T10] usb 5-1: USB disconnect, device number 34 [ 1490.203958][ T10] asix 5-1:0.0 eth1: unregister 'asix' usb-dummy_hcd.4-1, ASIX AX88178 USB 2.0 Ethernet [ 1492.247924][T19931] raw_sendmsg: syz.2.1560 forgot to set AF_INET. Fix it! [ 1493.083501][T19935] loop1: detected capacity change from 0 to 2048 [ 1493.225530][T19935] Alternate GPT is invalid, using primary GPT. [ 1493.232829][T19935] loop1: p1 p2 p3 [ 1493.795923][ T9709] udevd[9709]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1494.037996][ T9709] udevd[9709]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 1494.138571][ T8577] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1494.157442][ T9675] udevd[9675]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 1494.181693][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1494.181775][ T29] audit: type=1326 audit(1727442144.280:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.0.1571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 1494.386591][ T29] audit: type=1326 audit(1727442144.330:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.0.1571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=27 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 1494.410045][ T29] audit: type=1326 audit(1727442144.340:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.0.1571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 1494.433503][ T29] audit: type=1326 audit(1727442144.340:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.0.1571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 1494.463085][ T29] audit: type=1326 audit(1727442144.340:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.0.1571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 1494.488156][ T29] audit: type=1326 audit(1727442144.340:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.0.1571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 1494.510782][ T29] audit: type=1326 audit(1727442144.410:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.0.1571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 1494.513101][T19973] loop4: detected capacity change from 0 to 2048 [ 1494.533567][ T29] audit: type=1326 audit(1727442144.420:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.0.1571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 1494.533797][ T29] audit: type=1326 audit(1727442144.420:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.0.1571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 1494.533999][ T29] audit: type=1326 audit(1727442144.420:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.0.1571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 1494.711021][ T8577] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1494.720815][ T8577] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.778327][ T8577] usb 3-1: config 0 descriptor?? [ 1494.883809][T19973] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1495.073406][T19973] UDF-fs: error (device loop4): udf_read_inode: (ino 1329) failed !bh [ 1495.136970][T19993] bridge0: port 2(bridge_slave_1) entered disabled state [ 1495.146986][T19993] bridge0: port 1(bridge_slave_0) entered disabled state [ 1495.300341][T19995] loop0: detected capacity change from 0 to 512 [ 1495.436049][T19995] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1573: corrupted in-inode xattr: invalid ea_ino [ 1495.468675][T19995] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.1573: couldn't read orphan inode 15 (err -117) [ 1495.495356][T19995] EXT4-fs (loop0): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1495.839225][ T8577] asix 3-1:0.0 eth1: register 'asix' at usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet, 76:87:c5:9d:aa:0f [ 1495.996226][ T8577] usb 3-1: USB disconnect, device number 14 [ 1496.003278][ T8577] asix 3-1:0.0 eth1: unregister 'asix' usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet [ 1496.059528][ T9642] Bluetooth: hci3: command 0x0406 tx timeout [ 1496.377580][T16424] EXT4-fs (loop0): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 1496.451028][T20024] loop4: detected capacity change from 0 to 512 [ 1496.552192][T20024] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1496.630335][T20024] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1496.638982][T20024] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 1496.779088][T20024] EXT4-fs (loop4): 1 truncate cleaned up [ 1496.788182][T20024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1497.081861][T20030] loop3: detected capacity change from 0 to 2048 [ 1497.278850][T20030] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1497.489706][T20030] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1497.569924][T18103] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1497.808757][T17544] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1499.771160][T20095] overlayfs: failed to resolve './file0': -2 [ 1499.786630][ T8382] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1500.018291][ T8382] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1500.028569][ T8382] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.108167][ T8382] usb 2-1: config 0 descriptor?? [ 1502.422023][T20118] syz.2.1599[20118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1502.422477][T20118] syz.2.1599[20118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1502.480522][T20118] syz.2.1599[20118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1503.330237][T20133] loop3: detected capacity change from 0 to 16 [ 1503.481043][T20133] erofs: (device loop3): mounted with root inode @ nid 36. [ 1503.832912][ T8382] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1503.843953][ T8382] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1503.855398][ T8382] asix 2-1:0.0: probe with driver asix failed with error -71 [ 1504.044098][ T8382] usb 2-1: USB disconnect, device number 28 [ 1504.674202][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 1504.674290][ T29] audit: type=1326 audit(1727442154.730:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20159 comm="syz.0.1607" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x0 [ 1504.807867][T20175] loop2: detected capacity change from 0 to 512 [ 1504.882463][T20175] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1505.144468][T20175] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 1505.153386][T20175] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 1505.193210][T20175] EXT4-fs (loop2): 1 truncate cleaned up [ 1505.206641][T20175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1505.249778][T20202] loop3: detected capacity change from 0 to 128 [ 1505.253288][ T29] audit: type=1326 audit(1727442155.340:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20168 comm="syz.2.1608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 1505.279500][ T29] audit: type=1326 audit(1727442155.340:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20168 comm="syz.2.1608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 1505.302846][ T29] audit: type=1326 audit(1727442155.340:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20168 comm="syz.2.1608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 1505.325908][ T29] audit: type=1326 audit(1727442155.340:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20168 comm="syz.2.1608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 1505.352777][ T29] audit: type=1326 audit(1727442155.340:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20168 comm="syz.2.1608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 1505.377687][ T29] audit: type=1326 audit(1727442155.340:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20168 comm="syz.2.1608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=61 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 1505.400102][ T29] audit: type=1326 audit(1727442155.340:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20168 comm="syz.2.1608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 1505.427051][ T29] audit: type=1326 audit(1727442155.340:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20168 comm="syz.2.1608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 1505.451354][ T29] audit: type=1326 audit(1727442155.340:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20168 comm="syz.2.1608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 1506.281493][T20218] netlink: 5312 bytes leftover after parsing attributes in process `syz.3.1612'. [ 1506.300433][T18438] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1507.065734][ T5186] Bluetooth: hci1: link tx timeout [ 1507.071151][ T5186] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1507.211040][T20238] loop3: detected capacity change from 0 to 16 [ 1507.259605][ T5186] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1507.268409][ T5186] Bluetooth: hci1: Injecting HCI hardware error event [ 1507.298445][T20236] loop0: detected capacity change from 0 to 512 [ 1507.307699][T20236] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1507.311890][T20238] erofs: (device loop3): mounted with root inode @ nid 36. [ 1507.332141][T20236] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1507.341034][T20236] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 1507.393580][T20236] EXT4-fs (loop0): 1 truncate cleaned up [ 1507.401441][T20236] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1507.451494][T20237] loop1: detected capacity change from 0 to 512 [ 1507.469239][ T8382] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1507.482788][T20237] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1507.491950][T20237] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1507.501770][T20237] EXT4-fs (loop1): blocks per group (3008) and clusters per group (32768) inconsistent [ 1507.675195][ T8382] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1507.685636][ T8382] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.711890][ T8382] usb 5-1: config 0 descriptor?? [ 1508.296248][T16424] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1508.328444][T20258] loop1: detected capacity change from 0 to 512 [ 1508.382781][T20258] EXT4-fs: Ignoring removed oldalloc option [ 1508.470612][T20258] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.1620: Parent and EA inode have the same ino 15 [ 1508.518982][T20258] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.1620: Parent and EA inode have the same ino 15 [ 1508.626104][T20258] EXT4-fs (loop1): 1 orphan inode deleted [ 1508.633903][T20258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1508.719016][ T8382] asix 5-1:0.0 eth1: register 'asix' at usb-dummy_hcd.4-1, ASIX AX88178 USB 2.0 Ethernet, 76:87:c5:9d:aa:0f [ 1508.801803][T20264] loop2: detected capacity change from 0 to 1024 [ 1508.869511][ T8382] usb 5-1: USB disconnect, device number 35 [ 1508.876613][ T8382] asix 5-1:0.0 eth1: unregister 'asix' usb-dummy_hcd.4-1, ASIX AX88178 USB 2.0 Ethernet [ 1508.915141][T20264] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 1508.925752][T20264] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1509.038244][T20264] JBD2: no valid journal superblock found [ 1509.044804][T20264] EXT4-fs (loop2): Could not load journal inode [ 1509.102106][ T5186] Bluetooth: hci1: command 0x0406 tx timeout [ 1509.119491][ T9642] Bluetooth: hci1: hardware error 0x00 [ 1509.255100][T20258] loop1: detected capacity change from 512 to 0 [ 1509.273438][T20294] bio_check_eod: 1 callbacks suppressed [ 1509.273524][T20294] syz.1.1620: attempt to access beyond end of device [ 1509.273524][T20294] loop1: rw=12288, sector=72, nr_sectors = 2 limit=0 [ 1509.293633][T20294] EXT4-fs warning (device loop1): dx_probe:823: inode #12: lblock 0: comm syz.1.1620: error -5 reading directory block [ 1509.409997][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 1509.418819][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1509.531428][T20258] syz.1.1620: attempt to access beyond end of device [ 1509.531428][T20258] loop1: rw=12288, sector=72, nr_sectors = 2 limit=0 [ 1509.545442][T20258] EXT4-fs warning (device loop1): dx_probe:823: inode #12: lblock 0: comm syz.1.1620: error -5 reading directory block [ 1509.850354][T18553] syz-executor: attempt to access beyond end of device [ 1509.850354][T18553] loop1: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 1509.864454][T18553] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 1510.041620][T20304] netlink: 5056 bytes leftover after parsing attributes in process `syz.4.1626'. [ 1510.473771][T16670] kworker/u8:6: attempt to access beyond end of device [ 1510.473771][T16670] loop1: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 1510.488071][T16670] kworker/u8:6: attempt to access beyond end of device [ 1510.488071][T16670] loop1: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 1510.502653][T16670] kworker/u8:6: attempt to access beyond end of device [ 1510.502653][T16670] loop1: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 1510.516762][T16670] kworker/u8:6: attempt to access beyond end of device [ 1510.516762][T16670] loop1: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 1510.535368][T16670] kworker/u8:6: attempt to access beyond end of device [ 1510.535368][T16670] loop1: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 1510.551030][T16670] kworker/u8:6: attempt to access beyond end of device [ 1510.551030][T16670] loop1: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 1510.565224][T16670] kworker/u8:6: attempt to access beyond end of device [ 1510.565224][T16670] loop1: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 1510.579325][T16670] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4526: inode #12: block 7: comm kworker/u8:6: unable to read itable block [ 1510.593684][T16670] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 1510.602450][T16670] EXT4-fs (loop1): I/O error while writing superblock [ 1510.646285][T20313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1629'. [ 1510.789766][T20065] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1510.819601][T20065] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 1510.829709][T20065] EXT4-fs (loop1): I/O error while writing superblock [ 1511.176183][ T9642] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1511.241682][ T2999] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.518661][ T2999] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.572566][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 1511.572665][ T29] audit: type=1326 audit(1727442161.660:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20334 comm="syz.0.1634" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 1511.685045][ T29] audit: type=1326 audit(1727442161.710:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20334 comm="syz.0.1634" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 1511.708138][ T29] audit: type=1326 audit(1727442161.720:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20334 comm="syz.0.1634" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 1511.730769][ T29] audit: type=1326 audit(1727442161.720:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20334 comm="syz.0.1634" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 1511.753492][ T29] audit: type=1326 audit(1727442161.750:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20334 comm="syz.0.1634" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 1511.920646][T20336] loop0: detected capacity change from 0 to 2048 [ 1511.941921][ T2999] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.038797][ T29] audit: type=1326 audit(1727442162.010:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20334 comm="syz.0.1634" exe="/root/syz-executor" sig=0 arch=40000003 syscall=91 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 1512.061719][ T29] audit: type=1326 audit(1727442162.020:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20334 comm="syz.0.1634" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 1512.088073][ T29] audit: type=1326 audit(1727442162.020:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20334 comm="syz.0.1634" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 1512.112094][ T29] audit: type=1326 audit(1727442162.040:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20334 comm="syz.0.1634" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 1512.135129][ T29] audit: type=1326 audit(1727442162.040:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20334 comm="syz.0.1634" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7fa3579 code=0x7ffc0000 [ 1512.176587][T20336] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1512.191114][T20336] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1512.250736][ T2999] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.586100][ T2999] bridge_slave_1: left allmulticast mode [ 1512.592024][ T2999] bridge_slave_1: left promiscuous mode [ 1512.617598][ T2999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1512.661619][T16424] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1512.705834][ T2999] bridge_slave_0: left allmulticast mode [ 1512.711759][ T2999] bridge_slave_0: left promiscuous mode [ 1512.721165][ T2999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1513.405938][ T2999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1513.447215][T20368] netlink: 5056 bytes leftover after parsing attributes in process `syz.4.1640'. [ 1513.502902][ T2999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1513.553200][ T2999] bond0 (unregistering): Released all slaves [ 1514.145477][T20375] overlayfs: failed to resolve './file1': -2 [ 1514.469352][ T5186] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1514.507453][ T5186] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1514.532495][ T5186] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1514.552498][ T5186] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1514.555632][T20383] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1642'. [ 1514.581826][ T5186] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1514.596755][ T5186] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1514.767947][ T2999] hsr_slave_0: left promiscuous mode [ 1514.815670][ T2999] hsr_slave_1: left promiscuous mode [ 1514.865379][ T2999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1514.873208][ T2999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1514.948050][ T2999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1514.956085][ T2999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1515.065766][ T2999] veth1_macvtap: left promiscuous mode [ 1515.071625][ T2999] veth0_macvtap: left promiscuous mode [ 1515.078002][ T2999] veth1_vlan: left promiscuous mode [ 1515.083687][ T2999] veth0_vlan: left promiscuous mode [ 1516.625101][ T2999] team0 (unregistering): Port device team_slave_1 removed [ 1516.698736][ T5186] Bluetooth: hci0: command tx timeout [ 1516.708982][ T2999] team0 (unregistering): Port device team_slave_0 removed [ 1517.425294][T20423] loop4: detected capacity change from 0 to 512 [ 1517.675063][T20423] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 1518.480498][T20505] overlayfs: failed to resolve './file1': -2 [ 1518.550770][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 1518.550853][ T29] audit: type=1326 audit(1727442168.650:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20507 comm="syz.2.1653" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x0 [ 1518.778980][ T5186] Bluetooth: hci0: command tx timeout [ 1518.953238][T20550] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1654'. [ 1519.237107][T20384] chnl_net:caif_netlink_parms(): no params data found [ 1520.856117][ T5186] Bluetooth: hci0: command tx timeout [ 1521.341605][T20384] bridge0: port 1(bridge_slave_0) entered blocking state [ 1521.349615][T20384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1521.357853][T20384] bridge_slave_0: entered allmulticast mode [ 1521.367188][T20384] bridge_slave_0: entered promiscuous mode [ 1521.551821][T20384] bridge0: port 2(bridge_slave_1) entered blocking state [ 1521.562274][T20384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1521.570542][T20384] bridge_slave_1: entered allmulticast mode [ 1521.580107][T20384] bridge_slave_1: entered promiscuous mode [ 1521.970416][T20384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1522.069578][T20384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1522.513590][T20384] team0: Port device team_slave_0 added [ 1522.598361][T20384] team0: Port device team_slave_1 added [ 1522.936285][ T5186] Bluetooth: hci0: command tx timeout [ 1522.980539][T20384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1522.988084][T20384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1523.014928][T20384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1523.036219][T20752] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1665'. [ 1523.281182][T20384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1523.288677][T20384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1523.315160][T20384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1524.029872][T20384] hsr_slave_0: entered promiscuous mode [ 1524.138383][T20384] hsr_slave_1: entered promiscuous mode [ 1524.224980][T20384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1524.232812][T20384] Cannot create hsr debugfs directory [ 1524.805982][ T9642] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1524.817422][ T9642] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1524.827128][ T9642] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1524.845112][ T9642] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1524.897980][ T9642] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1524.930892][ T9642] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1527.044919][ T9642] Bluetooth: hci5: command tx timeout [ 1527.199994][T20384] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1527.374365][T20384] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1527.493277][T20384] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1527.596123][T20384] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1527.972335][ T2999] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1528.023746][T21050] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1677'. [ 1528.075686][T20835] chnl_net:caif_netlink_parms(): no params data found [ 1528.211424][ T2999] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1528.423451][ T2999] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1528.600786][ T2999] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.103822][ T9642] Bluetooth: hci5: command tx timeout [ 1529.155324][ T2999] bridge_slave_1: left allmulticast mode [ 1529.161288][ T2999] bridge_slave_1: left promiscuous mode [ 1529.172779][ T2999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1529.209130][ T2999] bridge_slave_0: left allmulticast mode [ 1529.216675][ T2999] bridge_slave_0: left promiscuous mode [ 1529.223480][ T2999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1530.218124][ T2999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1530.240329][ T2999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1530.269003][ T2999] bond0 (unregistering): Released all slaves [ 1531.177836][ T9642] Bluetooth: hci5: command tx timeout [ 1531.694033][ T2999] hsr_slave_0: left promiscuous mode [ 1531.749307][ T2999] hsr_slave_1: left promiscuous mode [ 1531.782861][ T2999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1531.791122][ T2999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1531.801779][T21186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1688'. [ 1531.858160][ T2999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1531.866623][ T2999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1531.937744][ T2999] veth1_macvtap: left promiscuous mode [ 1531.943866][ T2999] veth0_macvtap: left promiscuous mode [ 1531.950313][ T2999] veth1_vlan: left promiscuous mode [ 1531.956604][ T2999] veth0_vlan: left promiscuous mode [ 1533.298189][ T9642] Bluetooth: hci5: command tx timeout [ 1533.527385][ T2999] team0 (unregistering): Port device team_slave_1 removed [ 1533.637330][ T2999] team0 (unregistering): Port device team_slave_0 removed [ 1534.337081][T20835] bridge0: port 1(bridge_slave_0) entered blocking state [ 1534.345248][T20835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1534.353356][T20835] bridge_slave_0: entered allmulticast mode [ 1534.363198][T20835] bridge_slave_0: entered promiscuous mode [ 1534.416043][T20384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1534.504340][T20835] bridge0: port 2(bridge_slave_1) entered blocking state [ 1534.513908][T20835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1534.522346][T20835] bridge_slave_1: entered allmulticast mode [ 1534.531856][T20835] bridge_slave_1: entered promiscuous mode [ 1535.075969][T20384] 8021q: adding VLAN 0 to HW filter on device team0 [ 1535.097540][T20835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1535.200215][ T713] bridge0: port 1(bridge_slave_0) entered blocking state [ 1535.208185][ T713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1535.258453][T20835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1535.340411][ T713] bridge0: port 2(bridge_slave_1) entered blocking state [ 1535.348341][ T713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1535.960183][T20835] team0: Port device team_slave_0 added [ 1536.133448][T20835] team0: Port device team_slave_1 added [ 1536.712315][T20835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1536.720817][T20835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1536.753646][T20835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1537.011738][T20835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1537.019541][T20835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1537.049381][T20835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1537.828587][T20835] hsr_slave_0: entered promiscuous mode [ 1537.926975][T20835] hsr_slave_1: entered promiscuous mode [ 1537.981362][T20835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1537.989343][T20835] Cannot create hsr debugfs directory [ 1539.702568][T20384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1540.931042][T20384] veth0_vlan: entered promiscuous mode [ 1541.128304][T20384] veth1_vlan: entered promiscuous mode [ 1541.266968][T20835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1541.372282][T20835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1541.473599][T20835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1541.636554][T20835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1541.743866][T20384] veth0_macvtap: entered promiscuous mode [ 1541.834495][T20384] veth1_macvtap: entered promiscuous mode [ 1542.110915][T20384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1542.122305][T20384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1542.133160][T20384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1542.145622][T20384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1542.156083][T20384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1542.172950][T20384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1542.189763][T20384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1542.308625][ T8577] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1542.352303][T20384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1542.363643][T20384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1542.376045][T20384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1542.387567][T20384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1542.397830][T20384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1542.408919][T20384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1542.426678][T20384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1542.485051][T19545] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1542.595494][ T8577] usb 1-1: Using ep0 maxpacket: 8 [ 1542.607518][ T8577] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1542.620735][ T8577] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1542.631751][ T8577] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1542.642921][ T8577] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1542.656594][ T8577] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1542.666202][ T8577] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1542.694923][T20384] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1542.704043][T20384] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1542.713425][T20384] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1542.719232][T19545] usb 5-1: Using ep0 maxpacket: 16 [ 1542.722638][T20384] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1542.818650][T19545] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1542.877194][T19545] usb 5-1: config 0 has an invalid interface number: 249 but max is 0 [ 1542.889084][T19545] usb 5-1: config 0 has no interface number 0 [ 1543.022295][T19545] usb 5-1: New USB device found, idVendor=0db0, idProduct=6869, bcdDevice=73.b3 [ 1543.032289][T19545] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.040889][T19545] usb 5-1: Product: syz [ 1543.045886][T19545] usb 5-1: Manufacturer: syz [ 1543.050756][T19545] usb 5-1: SerialNumber: syz [ 1543.108347][ T8577] usb 1-1: usb_control_msg returned -32 [ 1543.114325][ T8577] usbtmc 1-1:16.0: can't read capabilities [ 1543.200609][T19545] usb 5-1: config 0 descriptor?? [ 1543.486298][T19545] usb 5-1: USB disconnect, device number 36 [ 1543.503690][T21573] ===================================================== [ 1543.511303][T21573] BUG: KMSAN: kernel-usb-infoleak in usb_submit_urb+0x597/0x2350 [ 1543.519606][T21573] usb_submit_urb+0x597/0x2350 [ 1543.524717][T21573] usbtmc_write+0xc2c/0x1210 [ 1543.529691][T21573] vfs_write+0x487/0x1540 [ 1543.534240][T21573] ksys_write+0x24f/0x4c0 [ 1543.539455][T21573] __ia32_sys_write+0x91/0xe0 [ 1543.544369][T21573] ia32_sys_call+0x2e34/0x40d0 [ 1543.549816][T21573] __do_fast_syscall_32+0xb0/0x110 [ 1543.555342][T21573] do_fast_syscall_32+0x38/0x80 [ 1543.560452][T21573] do_SYSENTER_32+0x1f/0x30 [ 1543.565281][T21573] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1543.571886][T21573] [ 1543.574327][T21573] Uninit was created at: [ 1543.579766][T21573] __kmalloc_cache_noprof+0x4f0/0xb00 [ 1543.585514][T21573] usbtmc_write+0x3cd/0x1210 [ 1543.590420][T21573] vfs_write+0x487/0x1540 [ 1543.596880][T21573] ksys_write+0x24f/0x4c0 [ 1543.605409][T21573] __ia32_sys_write+0x91/0xe0 [ 1543.610415][T21573] ia32_sys_call+0x2e34/0x40d0 [ 1543.616912][T21573] __do_fast_syscall_32+0xb0/0x110 [ 1543.622446][T21573] do_fast_syscall_32+0x38/0x80 [ 1543.627746][T21573] do_SYSENTER_32+0x1f/0x30 [ 1543.632487][T21573] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1543.639451][T21573] [ 1543.641926][T21573] Byte 2055 of 2056 is uninitialized [ 1543.647735][T21573] Memory access of size 2056 starts at ffff88811220f000 [ 1543.655123][T21573] [ 1543.657679][T21573] CPU: 1 UID: 0 PID: 21573 Comm: syz.0.1705 Not tainted 6.11.0-syzkaller-10729-g13882369ceb9 #0 [ 1543.668613][T21573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1543.678990][T21573] ===================================================== [ 1543.686278][T21573] Disabling lock debugging due to kernel taint [ 1543.692569][T21573] Kernel panic - not syncing: kmsan.panic set ... [ 1543.699158][T21573] CPU: 1 UID: 0 PID: 21573 Comm: syz.0.1705 Tainted: G B 6.11.0-syzkaller-10729-g13882369ceb9 #0 [ 1543.711391][T21573] Tainted: [B]=BAD_PAGE [ 1543.715688][T21573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1543.726205][T21573] Call Trace: [ 1543.729671][T21573] [ 1543.732997][T21573] dump_stack_lvl+0x216/0x2d0 [ 1543.737894][T21573] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1543.744011][T21573] dump_stack+0x1e/0x30 [ 1543.748454][T21573] panic+0x4e2/0xcf0 [ 1543.752771][T21573] ? kmsan_get_metadata+0x61/0x1c0 [ 1543.758263][T21573] kmsan_report+0x2c7/0x2d0 [ 1543.763136][T21573] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1543.769837][T21573] ? kmsan_get_metadata+0x13e/0x1c0 [ 1543.775394][T21573] ? kmsan_internal_check_memory+0x48c/0x560 [ 1543.781632][T21573] ? kmsan_handle_urb+0x2c/0x40 [ 1543.786820][T21573] ? usb_submit_urb+0x597/0x2350 [ 1543.791998][T21573] ? usbtmc_write+0xc2c/0x1210 [ 1543.796998][T21573] ? vfs_write+0x487/0x1540 [ 1543.801744][T21573] ? ksys_write+0x24f/0x4c0 [ 1543.806479][T21573] ? __ia32_sys_write+0x91/0xe0 [ 1543.811541][T21573] ? ia32_sys_call+0x2e34/0x40d0 [ 1543.816726][T21573] ? __do_fast_syscall_32+0xb0/0x110 [ 1543.822487][T21573] ? do_fast_syscall_32+0x38/0x80 [ 1543.827713][T21573] ? do_SYSENTER_32+0x1f/0x30 [ 1543.832596][T21573] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1543.839379][T21573] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 1543.845453][T21573] ? kmsan_get_metadata+0x13e/0x1c0 [ 1543.850952][T21573] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1543.857635][T21573] ? kmsan_internal_poison_memory+0x7d/0x90 [ 1543.863949][T21573] ? do_fast_syscall_32+0x38/0x80 [ 1543.869633][T21573] ? kmsan_internal_poison_memory+0x49/0x90 [ 1543.875781][T21573] ? kmsan_slab_alloc+0xdf/0x160 [ 1543.880967][T21573] ? __kmalloc_cache_noprof+0x4f0/0xb00 [ 1543.886766][T21573] ? usbtmc_write+0x3cd/0x1210 [ 1543.891788][T21573] ? vfs_write+0x487/0x1540 [ 1543.897043][T21573] ? ksys_write+0x24f/0x4c0 [ 1543.901947][T21573] ? __ia32_sys_write+0x91/0xe0 [ 1543.907028][T21573] ? ia32_sys_call+0x2e34/0x40d0 [ 1543.912317][T21573] ? __do_fast_syscall_32+0xb0/0x110 [ 1543.917850][T21573] ? kmsan_get_metadata+0x13e/0x1c0 [ 1543.923510][T21573] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1543.930383][T21573] ? kmsan_get_metadata+0x13e/0x1c0 [ 1543.935872][T21573] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1543.942047][T21573] kmsan_internal_check_memory+0x48c/0x560 [ 1543.948307][T21573] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1543.954392][T21573] kmsan_handle_urb+0x2c/0x40 [ 1543.959322][T21573] usb_submit_urb+0x597/0x2350 [ 1543.964319][T21573] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1543.970583][T21573] usbtmc_write+0xc2c/0x1210 [ 1543.975436][T21573] ? __pfx_usbtmc_write+0x10/0x10 [ 1543.980687][T21573] vfs_write+0x487/0x1540 [ 1543.985213][T21573] ? kmsan_get_metadata+0x13e/0x1c0 [ 1543.990628][T21573] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1543.997166][T21573] ? kmsan_get_metadata+0x13e/0x1c0 [ 1544.002605][T21573] ksys_write+0x24f/0x4c0 [ 1544.007125][T21573] __ia32_sys_write+0x91/0xe0 [ 1544.012113][T21573] ia32_sys_call+0x2e34/0x40d0 [ 1544.017104][T21573] __do_fast_syscall_32+0xb0/0x110 [ 1544.022411][T21573] ? irqentry_exit+0x16/0x60 [ 1544.027485][T21573] do_fast_syscall_32+0x38/0x80 [ 1544.032594][T21573] do_SYSENTER_32+0x1f/0x30 [ 1544.037276][T21573] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1544.043873][T21573] RIP: 0023:0xf7fa3579 [ 1544.048150][T21573] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1544.068068][T21573] RSP: 002b:00000000f570556c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1544.076704][T21573] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020001680 [ 1544.085187][T21573] RDX: 00000000000007fb RSI: 0000000000000000 RDI: 0000000000000000 [ 1544.093386][T21573] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1544.101662][T21573] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1544.110058][T21573] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1544.118280][T21573] [ 1544.121543][T21573] Kernel Offset: disabled [ 1544.125955][T21573] Rebooting in 86400 seconds..