last executing test programs: 6.83611515s ago: executing program 1 (id=1453): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140), 0x208e24b) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x1ff) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = epoll_create1(0x0) r5 = dup(r4) r6 = socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000000c0)={0x80000001}) bind$unix(r6, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(r6, 0x0) shutdown(r6, 0x0) epoll_wait(r5, &(0x7f0000000000)=[{}], 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f00000001c0)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}}) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x90) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) 5.866051171s ago: executing program 3 (id=1464): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040), 0x4) 5.696869266s ago: executing program 0 (id=1467): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f00000000c0)={[{@grpid}, {@grpquota}, {@grpid}, {@errors_remount}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) renameat2(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00', 0x2) 5.696019066s ago: executing program 1 (id=1468): syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000480)='./file0\x00', 0x18090, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES32, @ANYRES8, @ANYRES16=0x0, @ANYRES64], 0x8, 0x2ee, &(0x7f00000004c0)="$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") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socket$packet(0x11, 0x0, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x4800003e, r5, 0x0) r7 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) close_range(r4, 0xffffffffffffffff, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r8, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r9, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x16) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000002580)=""/107}) 5.665273618s ago: executing program 3 (id=1469): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) 5.583979895s ago: executing program 0 (id=1471): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xfffff59e}]}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x40305839, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3, 0x8b}, @noop]}}}], 0x38}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020400) unshare(0x2c060000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r5, 0x0, 0x0, 0x0, &(0x7f0000006a80)={0x0, 0x3938700}) 5.489577922s ago: executing program 4 (id=1472): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91", 0x3) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40040) tkill(0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x10, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141400}}, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) 5.379458092s ago: executing program 3 (id=1474): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = userfaultfd(0x801) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) dup2(r2, r1) write$cgroup_pressure(r0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 5.274807281s ago: executing program 0 (id=1476): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, 0x0, 0xffffff6a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0x6d05, 0x0) 5.176040179s ago: executing program 3 (id=1478): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x24}}, 0x0) 5.04719399s ago: executing program 0 (id=1479): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040), 0x4) 3.48452039s ago: executing program 3 (id=1480): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000300), 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000), 0x2) 3.302401925s ago: executing program 4 (id=1481): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f00000000c0)={[{@grpid}, {@grpquota}, {@grpid}, {@errors_remount}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) renameat2(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000180)='./bus\x00', 0x2) 3.129209749s ago: executing program 0 (id=1482): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mq_notify(0xffffffffffffffff, 0x0) 3.088683183s ago: executing program 1 (id=1483): socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x40, 0x8f}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}}, 0x0) 2.76556891s ago: executing program 1 (id=1486): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000080)={0x5}) close_range(r3, 0xffffffffffffffff, 0x0) 2.457494535s ago: executing program 4 (id=1487): r0 = add_key$keyring(&(0x7f0000002400), &(0x7f0000002440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000001380)='big_key\x00', 0x0, &(0x7f0000001400)="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", 0xfffff, r0) 2.456980545s ago: executing program 2 (id=1488): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f0000000780)="3f030300031b12000000000089e9aaa911d7c2ff0700810000008100642c4a1b78610000", 0x24, 0x0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="ff9900000300"}, 0x14) 1.575058259s ago: executing program 1 (id=1489): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f00000000c0), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000180)={0x2e, 0x4, 0x0, {0x1, 0xfffffffffffffffa, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2e) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') shmget$private(0x0, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil) listen(0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r5 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f00000005c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) r6 = dup(r5) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, 0x0, 0x0) 1.5624078s ago: executing program 2 (id=1490): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000300), 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write(r0, &(0x7f0000000480)="d6aa85d950918237e8d3e2677c5a38ea2008f58dfe6a446681c67af4dcc22afbe561ef79eaedbe46641bdb25d2b99d5b55351a3467c2a77c9c", 0x39) 1.391128515s ago: executing program 0 (id=1491): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0}, 0x0) 584.950832ms ago: executing program 1 (id=1492): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x0, 0xfffffffd}, 0x8) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000001c0)='./file0/file0\x00', 0x80000c, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESOCT=r0, @ANYRES8=r1], 0x1, 0x6ee, &(0x7f0000001080)="$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") r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=r3, @multicast1}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x8}}, 0xb8}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x3, &(0x7f00000000c0), 0x0) execveat(0xffffffffffffffff, &(0x7f0000004340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000040)=0xa, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2a14000, &(0x7f00000004c0)={[{@user_xattr}, {@block_validity}, {@discard}, {@errors_continue}, {@block_validity}, {@i_version}, {}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x2000000000006}}, {@noquota}, {@stripe={'stripe', 0x3d, 0xff}}, {@abort}, {@grpjquota}, {@user_xattr}, {@grpid}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00008d7000/0x2000)=nil) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x14) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) 584.093022ms ago: executing program 4 (id=1493): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040), 0x4) 581.648192ms ago: executing program 3 (id=1494): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097bf40008003950323030ff2e4c"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r8, &(0x7f00000016c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000bc0)={0x10}, 0x10) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC=r9]) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r12 = socket(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r12, 0x890b, &(0x7f0000000300)={@loopback, @private0, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8400c6, r11}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=@newsa={0x194, 0x10, 0x200, 0x70bd2b, 0x25dfdbfd, {{@in6=@dev={0xfe, 0x80, '\x00', 0x19}, @in=@empty, 0x4e23, 0x4, 0x4e24, 0x101, 0xa, 0x20, 0x80, 0xc40c3504fe915a1f, r5, r9}, {@in=@private=0xa010102, 0x4d3, 0x2b}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0xfffffffffffffffd, 0x3, 0x3b4b0da, 0x7d4, 0x34, 0x7fffffff, 0x0, 0xfffffffffffffff9}, {0x7, 0x8000, 0xff, 0x6}, {0x2f1b, 0xb348, 0x5}, 0x70bd28, 0x3506, 0x2, 0x0, 0x80, 0x2}, [@encap={0x1c, 0x4, {0x2, 0x4e20, 0x4e23, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}}, @lastused={0xc, 0xf, 0xb39}, @etimer_thresh={0x8, 0xc, 0x9}, @offload={0xc, 0x1c, {r11, 0x5}}, @migrate={0x50, 0x11, [{@in6=@local, @in=@rand_addr=0x64010100, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local, 0x3c, 0x4, 0x0, 0x3507, 0xa, 0xa}]}, @offload={0xc, 0x1c, {0x0, 0x3}}, @lastused={0xc, 0xf, 0xf9}]}, 0x194}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r13 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r13]) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd0, 0xd0, 0x7, [@volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @const={0xc, 0x0, 0x0, 0xa, 0x2}, @restrict={0xc}, @enum={0x5, 0xa, 0x0, 0x6, 0x4, [{0xd, 0x6}, {0xd, 0x1}, {0x7, 0x4}, {0x4, 0x735}, {0x10, 0x7ff}, {0x0, 0x7ff}, {0x2, 0xff}, {0x0, 0x9}, {0x5}, {0x10, 0x1}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x9}}, @enum={0xf, 0x1, 0x0, 0x6, 0x4, [{0x0, 0x3}]}, @volatile={0x4}, @const={0x1, 0x0, 0x0, 0xa, 0x4}, @restrict={0xc, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x2e, 0x0, 0x0, 0x7f]}}, &(0x7f0000000180)=""/113, 0xef, 0x71, 0x0, 0x434d}, 0x20) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x8, 0x8, 0x8, 0x210, 0xffffffffffffffff, 0x10000, '\x00', 0x0, r14, 0x0, 0x0, 0x5}, 0x48) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r15}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r16, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 526.701166ms ago: executing program 2 (id=1495): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xfffff59e}]}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x40305839, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3, 0x8b}, @noop]}}}], 0x38}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020400) unshare(0x2c060000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r5, 0x0, 0x0, 0x0, &(0x7f0000006a80)={0x0, 0x3938700}) 356.6597ms ago: executing program 4 (id=1496): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) socket$tipc(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000002c0)=ANY=[@ANYRES8=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000)) 314.070074ms ago: executing program 2 (id=1497): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="14000000000000002900000008000000ac0e000000000000500000000000000029000000360000000406000000000000c2040000000907100000000202012e00da000000000000000502000205020002c910fe8000000000000000000000000000180001000000449f60"], 0x1c0}}], 0x2, 0x0) 152.013808ms ago: executing program 2 (id=1498): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@cgroup=r1, 0xffffffffffffffff, 0x6}, 0x10) 149.389888ms ago: executing program 4 (id=1499): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000008005f955a75b0850401008d43b00000000000000000018190000342ce20b", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000100)={0x0, 0x6, '\x00', [@ra, @jumbo, @hao={0xc9, 0x10, @remote}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @loopback}]}, 0x40) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec0000001000010800"/20, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe"], 0xec}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000507000000000000000000000006", @ANYRES32=0x0, @ANYBLOB="0000000000001a00240012800b00010062726964676500001400028005002b0003000000080004"], 0x44}}, 0x0) 0s ago: executing program 2 (id=1500): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@private0, @in=@local, 0x4e23, 0xfffd, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x6e6bb4, 0x1}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f0000000100)=ANY=[], 0x1, 0x6a6, &(0x7f00000007c0)="$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") creat(&(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000340)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) write$binfmt_script(r1, &(0x7f0000000140), 0x9) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100ff030000000000030000850000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'team_slave_0\x00', 0x0}) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x4, &(0x7f00000003c0)=[{0x35}, {0x16, 0xfe}, {0x4, 0x0, 0xa8, 0x65}, {0x6, 0x0, 0x9, 0x8}]}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f00000001c0)={0x0, &(0x7f00000002c0)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000400)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000180)={r6}) kernel console output (not intermixed with test programs): tdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.994454][ T6921] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.006314][ T6921] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.045971][ T4481] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.125459][ T4481] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.161457][ T7182] device hsr_slave_0 entered promiscuous mode [ 346.195179][ T7182] device hsr_slave_1 entered promiscuous mode [ 346.208531][ T7182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.217384][ T7182] Cannot create hsr debugfs directory [ 346.293868][ T4481] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.313539][ T7140] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 346.348915][ T7140] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 346.366227][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.385582][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.410501][ T7140] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 346.433894][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 346.491738][ T7140] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 346.611031][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.631995][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.686342][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 346.839312][ T3686] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 346.885606][ T7232] loop4: detected capacity change from 0 to 256 [ 346.923312][ T7232] exfat: Deprecated parameter 'utf8' [ 346.978265][ T7232] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x967df478, utbl_chksum : 0xe619d30d) [ 347.239303][ T3686] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.240590][ T7140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.275629][ T3686] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 347.304999][ T3686] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 347.334251][ T3686] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 347.348032][ T7140] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.374733][ T5367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 347.383249][ T5367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 347.459233][ T3655] Bluetooth: hci3: command tx timeout [ 347.479186][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 347.487965][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 347.488046][ T7239] syz.1.852 (7239): drop_caches: 2 [ 347.498406][ T3641] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.508602][ T3641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.516413][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 347.525805][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 347.534961][ T3641] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.542137][ T3641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.559535][ T3686] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 347.568613][ T3686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.598306][ T3686] usb 1-1: Product: syz [ 347.603673][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 347.618595][ T3686] usb 1-1: Manufacturer: syz [ 347.639093][ T3686] usb 1-1: SerialNumber: syz [ 347.899622][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 347.908986][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 347.937870][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 347.967009][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 347.976987][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 348.847842][ T3686] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 348.856867][ T3686] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 348.868572][ T3686] usb 1-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 349.113715][ T7258] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 349.630218][ T3655] Bluetooth: hci3: command tx timeout [ 349.720783][ T3686] usb 1-1: USB disconnect, device number 19 [ 349.917019][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 349.926350][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 349.963264][ T7140] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 349.976820][ T7140] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 349.991769][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 350.002893][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 350.013910][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 350.023264][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 350.107578][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 350.359991][ T6970] udevd[6970]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 350.502399][ T7182] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 350.560068][ T7182] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 350.847516][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 350.858975][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 350.943943][ T7182] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 350.985496][ T7140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.819509][ T7279] syz.1.863 (7279): drop_caches: 2 [ 351.933519][ T3654] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 351.945500][ T3654] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 351.954362][ T3654] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 351.966427][ T3654] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 351.985945][ T3654] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 351.994139][ T3654] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 352.072806][ T7182] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 353.089011][ T5367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 353.098014][ T5367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 353.109618][ T7308] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 353.188007][ T7140] device veth0_vlan entered promiscuous mode [ 353.204726][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 353.220923][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 353.326286][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 353.337369][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 353.353858][ T7140] device veth1_vlan entered promiscuous mode [ 353.449391][ T14] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 353.586459][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 353.606916][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 353.624059][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 353.635209][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 353.698210][ T7288] chnl_net:caif_netlink_parms(): no params data found [ 353.705452][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 353.719773][ T7140] device veth0_macvtap entered promiscuous mode [ 353.775872][ T7140] device veth1_macvtap entered promiscuous mode [ 353.814107][ T7288] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.824446][ T7288] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.832869][ T7288] device bridge_slave_0 entered promiscuous mode [ 353.839687][ T14] usb 1-1: config 0 has no interfaces? [ 353.850951][ T4481] device hsr_slave_0 left promiscuous mode [ 353.857272][ T4481] device hsr_slave_1 left promiscuous mode [ 353.868089][ T4481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.875642][ T4481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.883968][ T4481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.892930][ T4481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.901348][ T4481] device bridge_slave_1 left promiscuous mode [ 353.907543][ T4481] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.916464][ T4481] device bridge_slave_0 left promiscuous mode [ 353.923503][ T4481] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.000327][ T14] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=97.58 [ 354.009982][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.018117][ T14] usb 1-1: Product: syz [ 354.022457][ T3654] Bluetooth: hci2: command tx timeout [ 354.028283][ T14] usb 1-1: Manufacturer: syz [ 354.034057][ T14] usb 1-1: SerialNumber: syz [ 354.048613][ T4481] device hsr_slave_0 left promiscuous mode [ 354.048995][ T14] usb 1-1: config 0 descriptor?? [ 354.064548][ T4481] device hsr_slave_1 left promiscuous mode [ 354.071631][ T4481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.079246][ T4481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.087066][ T4481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.098231][ T4481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.106947][ T4481] device bridge_slave_1 left promiscuous mode [ 354.113443][ T4481] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.128194][ T4481] device bridge_slave_0 left promiscuous mode [ 354.136359][ T4481] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.188568][ T4481] device veth1_macvtap left promiscuous mode [ 354.194755][ T4481] device veth0_macvtap left promiscuous mode [ 354.201427][ T4481] device veth1_vlan left promiscuous mode [ 354.207276][ T4481] device veth0_vlan left promiscuous mode [ 354.218303][ T4481] device veth1_macvtap left promiscuous mode [ 354.224620][ T4481] device veth0_macvtap left promiscuous mode [ 354.230915][ T4481] device veth1_vlan left promiscuous mode [ 354.236749][ T4481] device veth0_vlan left promiscuous mode [ 354.325043][ T14] usb 1-1: USB disconnect, device number 20 [ 355.713859][ T7328] syz.0.874 (7328): drop_caches: 2 [ 356.099946][ T3655] Bluetooth: hci2: command tx timeout [ 356.750524][ T7344] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 356.915276][ T7350] netlink: 'syz.0.881': attribute type 1 has an invalid length. [ 356.925106][ T7352] loop1: detected capacity change from 0 to 64 [ 357.140712][ T7356] syz.1.884 (7356): drop_caches: 2 [ 358.038833][ T7363] loop1: detected capacity change from 0 to 16 [ 358.075559][ T7363] erofs: (device loop1): mounted with root inode @ nid 36. [ 358.179204][ T3655] Bluetooth: hci2: command tx timeout [ 358.350743][ T4481] team0 (unregistering): Port device team_slave_1 removed [ 358.422383][ T4481] team0 (unregistering): Port device team_slave_0 removed [ 358.462664][ T4481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.520301][ T4481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.591960][ T7372] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 358.918814][ T7378] netlink: 'syz.1.891': attribute type 1 has an invalid length. [ 359.324943][ T4481] bond0 (unregistering): Released all slaves [ 359.875617][ T4481] team0 (unregistering): Port device team_slave_1 removed [ 359.919286][ T4481] team0 (unregistering): Port device team_slave_0 removed [ 359.970756][ T4481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.079797][ T4481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.259353][ T3655] Bluetooth: hci2: command tx timeout [ 361.317562][ T7398] netlink: 32 bytes leftover after parsing attributes in process `syz.1.896'. [ 361.561248][ T4481] bond0 (unregistering): Released all slaves [ 361.692204][ T7288] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.699690][ T7288] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.707688][ T7288] device bridge_slave_1 entered promiscuous mode [ 361.726161][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 361.735135][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 361.810288][ T7140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.824866][ T7140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.835122][ T7140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.851176][ T7140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.862963][ T7140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.873950][ T7140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.910670][ T7140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.922546][ T7288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.935046][ T5367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 361.958181][ T5367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 361.970435][ T7140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.999196][ T7140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.029188][ T7140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.049367][ T7140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.059646][ T7140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.070536][ T7140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.082979][ T7140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.093716][ T7288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.157262][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 362.166805][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 362.182000][ T7140] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.193848][ T7140] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.208668][ T7140] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.221366][ T7140] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.231342][ T7406] netlink: 'syz.1.899': attribute type 1 has an invalid length. [ 362.238206][ T7182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.336004][ T7288] team0: Port device team_slave_0 added [ 362.362812][ T7182] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.414213][ T7411] loop1: detected capacity change from 0 to 512 [ 362.414792][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 362.440391][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 362.448514][ T7411] ext4: Unknown parameter 'noacl' [ 362.452164][ T7288] team0: Port device team_slave_1 added [ 362.531884][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 362.547462][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 362.556737][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.563919][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.600171][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 362.610778][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 362.619783][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.626892][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.687239][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 362.695502][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 362.710632][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 362.732135][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 362.743032][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 362.776200][ T7288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.783644][ T7288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.811552][ T7288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.826368][ T7288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.833788][ T7288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.860431][ T7288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.877307][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 362.890746][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 362.904939][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 362.914056][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 362.922726][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 362.945862][ T7182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 362.978375][ T7182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 363.003071][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.023233][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 363.032120][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 363.040587][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.084734][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 363.189473][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.208411][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.233519][ T7288] device hsr_slave_0 entered promiscuous mode [ 363.274275][ T7288] device hsr_slave_1 entered promiscuous mode [ 363.371850][ T7288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.390375][ T7288] Cannot create hsr debugfs directory [ 363.412566][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 363.729198][ T3641] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 363.989280][ T3641] usb 2-1: Using ep0 maxpacket: 16 [ 364.109494][ T3641] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.121146][ T3641] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 364.130802][ T3641] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 364.146281][ T3641] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 364.349324][ T3641] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 364.372235][ T7435] Bluetooth: MGMT ver 1.22 [ 364.378059][ T3641] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.394951][ T3641] usb 2-1: Product: syz [ 364.399687][ T3641] usb 2-1: Manufacturer: syz [ 364.404313][ T3641] usb 2-1: SerialNumber: syz [ 364.452920][ T7288] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.534279][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 364.550027][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 364.598103][ T7288] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.494394][ T7182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.519385][ T3641] usb 2-1: 0:2 : does not exist [ 365.539438][ T3641] usb 2-1: USB disconnect, device number 7 [ 365.681093][ T7445] netlink: 'syz.1.909': attribute type 1 has an invalid length. [ 365.737458][ T7288] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.925544][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 365.951439][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 366.018829][ T7450] syz.0.912 (7450): drop_caches: 2 [ 366.061370][ T7288] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.098561][ T7182] device veth0_vlan entered promiscuous mode [ 366.120580][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 366.130319][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 366.169738][ T7182] device veth1_vlan entered promiscuous mode [ 366.191243][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 366.200216][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 366.208306][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 366.300191][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 366.334416][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 366.360186][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 366.393948][ T7182] device veth0_macvtap entered promiscuous mode [ 366.422086][ T7182] device veth1_macvtap entered promiscuous mode [ 366.531012][ T7182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.579760][ T7182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.649844][ T7182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.808385][ T7182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.889774][ T7182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.988977][ T7182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.074984][ T7182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.165374][ T7182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.266714][ T7182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.443449][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 367.469959][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 367.515272][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 367.563926][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 367.845234][ T7182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.866336][ T7182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.899107][ T7182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.919890][ T7182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.957936][ T7182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.010056][ T7182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.272961][ T7182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.288212][ T7483] syz.3.925 (7483): drop_caches: 2 [ 368.439886][ T7182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.578541][ T7182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.258031][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 369.278214][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 369.301134][ T7182] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.324286][ T7182] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.372550][ T7182] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.411663][ T7182] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.485160][ T7288] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 369.546318][ T7288] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 369.576341][ T3694] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 369.596799][ T7288] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 369.624319][ T7288] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 369.765046][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.780585][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.838047][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 369.881156][ T4585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.905841][ T4585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.929537][ T3694] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.953105][ T3694] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 369.956825][ T7288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.988509][ T3694] usb 4-1: config 1 has no interface number 0 [ 369.995026][ T3694] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.019169][ T3694] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 370.052300][ T7288] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.062580][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 370.077342][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 370.085732][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 370.116591][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 370.126319][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 370.135011][ T3723] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.142200][ T3723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.157603][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 370.166719][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 370.193628][ T3723] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.200847][ T3723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.219329][ T3694] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 370.232940][ T3694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.271687][ T3694] usb 4-1: Product: syz [ 370.284871][ T7503] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 370.286158][ T3694] usb 4-1: Manufacturer: syz [ 370.310601][ T7288] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 370.321919][ T3694] usb 4-1: SerialNumber: syz [ 370.326613][ T7288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 370.355809][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 370.365306][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 370.381725][ T3694] usb 4-1: selecting invalid altsetting 1 [ 370.390679][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 370.417986][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 370.440416][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 370.458192][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 370.477563][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 370.504419][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 370.522117][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 370.532779][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 370.541660][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 370.551591][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 370.560218][ T3723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 371.519172][ T3694] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 371.525254][ T3694] cdc_ncm 4-1:1.1: bind() failure [ 371.557678][ T7491] loop3: detected capacity change from 0 to 1024 [ 371.570763][ T7491] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 371.644296][ T3641] usb 4-1: USB disconnect, device number 14 [ 372.707894][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 372.720122][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 373.736561][ T7544] loop3: detected capacity change from 0 to 512 [ 373.788835][ T7288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.810381][ T7544] ext4: Unknown parameter 'noacl' [ 373.892883][ T6971] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 373.948070][ T7549] tc_dump_action: action bad kind [ 375.469277][ T5367] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 376.293321][ T7584] binder: 7577:7584 ioctl c00c6211 0 returned -14 [ 376.830467][ T4481] device hsr_slave_0 left promiscuous mode [ 376.858801][ T4481] device hsr_slave_1 left promiscuous mode [ 376.889398][ T4481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.896873][ T4481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.956404][ T4481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.007308][ T4481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.015703][ T4481] device bridge_slave_1 left promiscuous mode [ 377.022122][ T4481] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.040815][ T4481] device bridge_slave_0 left promiscuous mode [ 377.055094][ T4481] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.089535][ T5367] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.116628][ T5367] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 377.155414][ T5367] usb 2-1: config 1 has no interface number 0 [ 377.162643][ T5367] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.173868][ T5367] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 377.186254][ T4481] device veth1_macvtap left promiscuous mode [ 377.199329][ T4481] device veth0_macvtap left promiscuous mode [ 377.225030][ T4481] device veth1_vlan left promiscuous mode [ 377.238832][ T4481] device veth0_vlan left promiscuous mode [ 377.339372][ T5367] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 377.364136][ T5367] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.395130][ T5367] usb 2-1: Product: syz [ 377.405190][ T5367] usb 2-1: Manufacturer: syz [ 377.416491][ T5367] usb 2-1: SerialNumber: syz [ 377.480085][ T5367] usb 2-1: selecting invalid altsetting 1 [ 378.615073][ T5367] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 378.621024][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.627732][ T5367] cdc_ncm 2-1:1.1: bind() failure [ 378.671892][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.697019][ T7564] loop1: detected capacity change from 0 to 1024 [ 378.746456][ T7564] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 378.841243][ T3723] usb 2-1: USB disconnect, device number 8 [ 379.940542][ T7617] binder: 7611:7617 ioctl c00c6211 0 returned -14 [ 381.658595][ T4481] team0 (unregistering): Port device team_slave_1 removed [ 381.864294][ T4481] team0 (unregistering): Port device team_slave_0 removed [ 381.915722][ T4481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.982135][ T4481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.114601][ T4481] bond0 (unregistering): Released all slaves [ 383.198362][ T7625] netlink: 'syz.1.974': attribute type 5 has an invalid length. [ 383.300113][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 383.310130][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 383.370568][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 383.378938][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 383.408265][ T5367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 383.423245][ T5367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 383.433500][ T7288] device veth0_vlan entered promiscuous mode [ 383.454810][ T7288] device veth1_vlan entered promiscuous mode [ 383.528944][ T5367] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 383.547065][ T5367] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 383.563779][ T5367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 383.749562][ T5367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 383.761078][ T7288] device veth0_macvtap entered promiscuous mode [ 383.792661][ T7288] device veth1_macvtap entered promiscuous mode [ 384.102246][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.113373][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.789903][ T7660] binder: 7652:7660 ioctl c00c6211 0 returned -14 [ 386.156362][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.342703][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.367770][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.409180][ T14] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 386.455238][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.499084][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.528657][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.551114][ T7288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.605987][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 386.626569][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 386.652978][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 386.675543][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 386.708995][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.727869][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.739223][ T14] usb 3-1: device descriptor read/all, error -71 [ 386.746089][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.757725][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.776424][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.788132][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.804560][ T7288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.815498][ T7288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.867272][ T7288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.882621][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 386.910016][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 386.922164][ T7288] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.941963][ T7288] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.956849][ T7288] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.966371][ T7288] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.310595][ T7682] loop2: detected capacity change from 0 to 1024 [ 387.431833][ T4548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.451225][ T4548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.570428][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 387.602322][ T3731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.678541][ T7689] binder: 7683:7689 ioctl c00c6211 0 returned -14 [ 388.429157][ T3731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.605585][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 388.659438][ T6636] hfsplus: b-tree write err: -5, ino 4 [ 388.909626][ T7692] loop3: detected capacity change from 0 to 4096 [ 388.947672][ T7692] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 389.859829][ T7692] ntfs3: loop3: ino=1d, "file0" attr_set_size [ 390.092194][ T7716] loop2: detected capacity change from 0 to 2048 [ 390.280625][ T7716] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 390.305285][ T26] audit: type=1800 audit(1856684739.943:24): pid=7716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1010" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 390.338338][ T7716] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 390.362496][ T7716] EXT4-fs (loop2): Remounting filesystem read-only [ 390.439656][ T7726] binder: 7718:7726 ioctl c00c6211 0 returned -14 [ 391.365674][ T7182] EXT4-fs (loop2): unmounting filesystem. [ 392.109187][ T3688] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 392.732573][ T3688] usb 5-1: New USB device found, idVendor=286a, idProduct=dd2d, bcdDevice=93.7e [ 392.764485][ T3688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.840341][ T3688] usb 5-1: Product: syz [ 392.857821][ T3688] usb 5-1: Manufacturer: syz [ 392.867966][ T3688] usb 5-1: SerialNumber: syz [ 392.942286][ T7765] binder: 7757:7765 ioctl c00c6211 0 returned -14 [ 393.927001][ T3688] usb 5-1: config 0 descriptor?? [ 393.979922][ T3688] usb-storage 5-1:0.0: USB Mass Storage device detected [ 394.196145][ T151] usb 5-1: USB disconnect, device number 5 [ 395.832599][ T7798] loop3: detected capacity change from 0 to 2048 [ 395.943886][ T7798] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 395.970394][ T26] audit: type=1800 audit(1856684745.613:25): pid=7798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1040" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 396.002002][ T7798] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 396.086421][ T7798] EXT4-fs (loop3): Remounting filesystem read-only [ 396.238264][ T7140] EXT4-fs (loop3): unmounting filesystem. [ 397.898227][ T7848] loop1: detected capacity change from 0 to 256 [ 397.949331][ T7848] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value [ 398.333850][ T7856] tmpfs: Bad value for 'nr_inodes' [ 400.214724][ T7868] loop2: detected capacity change from 0 to 256 [ 400.397423][ T7868] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 400.774848][ T7875] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 402.309166][ T3688] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 402.397114][ T7909] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 402.589835][ T3688] usb 3-1: Using ep0 maxpacket: 16 [ 402.769929][ T7919] loop4: detected capacity change from 0 to 256 [ 402.837175][ T7919] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 403.604782][ T3688] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.637019][ T3688] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 403.677500][ T3688] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 403.701313][ T3655] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 403.709541][ T3688] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 403.749334][ T3688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.815180][ T7893] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 403.840360][ T3688] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 404.852925][ T3688] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 404.865490][ T3688] usb 3-1: USB disconnect, device number 15 [ 405.026092][ T26] audit: type=1326 audit(1856684754.663:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7946 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c43773b9 code=0x7ffc0000 [ 405.057692][ T26] audit: type=1326 audit(1856684754.663:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7946 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c43773b9 code=0x7ffc0000 [ 405.106132][ T26] audit: type=1326 audit(1856684754.663:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7946 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20c43773b9 code=0x7ffc0000 [ 405.134929][ T26] audit: type=1326 audit(1856684754.663:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7946 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c43773b9 code=0x7ffc0000 [ 405.163473][ T26] audit: type=1326 audit(1856684754.663:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7946 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c43773b9 code=0x7ffc0000 [ 405.187138][ T7945] loop3: detected capacity change from 0 to 8192 [ 405.216362][ T26] audit: type=1326 audit(1856684754.663:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7946 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f20c43773b9 code=0x7ffc0000 [ 405.336040][ T7945] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 405.481235][ T26] audit: type=1326 audit(1856684754.663:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7946 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c43773b9 code=0x7ffc0000 [ 405.717412][ T26] audit: type=1326 audit(1856684754.663:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7946 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c43773b9 code=0x7ffc0000 [ 405.723798][ T7945] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 405.758025][ T26] audit: type=1326 audit(1856684754.663:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7946 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f20c43773b9 code=0x7ffc0000 [ 405.782216][ T7945] REISERFS (device loop3): using ordered data mode [ 405.788741][ T7945] reiserfs: using flush barriers [ 405.871703][ T7945] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 405.945116][ T26] audit: type=1326 audit(1856684754.663:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7946 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c43773b9 code=0x7ffc0000 [ 405.983847][ T7945] REISERFS (device loop3): checking transaction log (loop3) [ 406.281779][ T7945] REISERFS (device loop3): Using tea hash to sort names [ 406.312352][ T7945] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 406.528766][ T7972] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 406.647608][ T7957] loop2: detected capacity change from 0 to 256 [ 406.779351][ T4997] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 406.821226][ T7957] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 407.019375][ T4997] usb 5-1: Using ep0 maxpacket: 16 [ 407.149418][ T4997] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.194163][ T4997] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 407.219594][ T7981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1108'. [ 407.229160][ T4997] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 407.248260][ T7965] loop1: detected capacity change from 0 to 32768 [ 407.269294][ T4997] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 407.278388][ T4997] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.310007][ T7965] [ 407.310007][ T7965] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 407.310007][ T7965] [ 407.319608][ T7974] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 407.340189][ T4997] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 407.408963][ T7965] find_entry called with index = 0 [ 407.425897][ T7965] read_mapping_page failed! [ 407.445643][ T7965] ERROR: (device loop1): txCommit: [ 407.445643][ T7965] [ 407.506611][ T7987] loop2: detected capacity change from 0 to 2048 [ 407.542432][ T6921] [ 407.542432][ T6921] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 407.542432][ T6921] [ 407.560338][ T4997] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 407.594379][ T6921] [ 407.594379][ T6921] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 407.594379][ T6921] [ 407.601646][ T4997] usb 5-1: USB disconnect, device number 6 [ 407.778671][ T7993] loop3: detected capacity change from 0 to 1024 [ 407.820901][ T7993] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 408.039292][ T7993] EXT4-fs (loop3): group descriptors corrupted! [ 408.207069][ T8002] tmpfs: Bad value for 'nr_inodes' [ 409.089195][ T8009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1119'. [ 409.531454][ T4997] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 409.566848][ T8024] I/O error, dev loop4, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 409.576900][ T8024] VFS: could not find a valid V7 on loop4. [ 409.970339][ T4997] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 410.056061][ T4997] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.267793][ T4997] usb 2-1: config 0 descriptor?? [ 410.346692][ T8027] loop3: detected capacity change from 0 to 1024 [ 410.354571][ T4997] cp210x 2-1:0.0: cp210x converter detected [ 410.404505][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1128'. [ 410.462246][ T8027] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 410.496646][ T8039] loop2: detected capacity change from 0 to 256 [ 410.504232][ T8039] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value [ 410.522433][ T8026] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 410.562995][ T6970] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 410.761066][ T8011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.778003][ T8011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.786462][ T4997] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 410.821909][ T8043] tmpfs: Bad value for 'nr_inodes' [ 410.999277][ T3688] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 411.282560][ T3688] usb 1-1: Using ep0 maxpacket: 16 [ 411.552236][ T4997] usb 2-1: cp210x converter now attached to ttyUSB0 [ 411.583253][ T7140] EXT4-fs (loop3): unmounting filesystem. [ 411.588602][ T3684] usb 2-1: USB disconnect, device number 9 [ 411.613157][ T3684] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 411.671143][ T3688] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.686704][ T3684] cp210x 2-1:0.0: device disconnected [ 411.695752][ T3688] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 411.708506][ T8047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1132'. [ 411.715480][ T3688] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 411.744518][ T3688] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 411.755338][ T3688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.791330][ T8037] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 411.840345][ T3688] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 411.866203][ T8052] loop2: detected capacity change from 0 to 1024 [ 411.929210][ T4997] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 412.067670][ T3688] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 412.088378][ T3688] usb 1-1: USB disconnect, device number 21 [ 412.117251][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 412.117287][ T26] audit: type=1326 audit(1856684761.753:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8055 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b99773b9 code=0x7fc00000 [ 412.262489][ T26] audit: type=1326 audit(1856684761.853:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8055 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f94b99773b9 code=0x7fc00000 [ 412.272954][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 412.284676][ C1] vkms_vblank_simulate: vblank timer overrun [ 412.482020][ T4997] usb 5-1: New USB device found, idVendor=049f, idProduct=0033, bcdDevice=67.bf [ 412.491449][ T4997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.509503][ T4997] usb 5-1: Product: syz [ 412.513714][ T4997] usb 5-1: Manufacturer: syz [ 412.517786][ T151] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 412.518345][ T4997] usb 5-1: SerialNumber: syz [ 412.544501][ T4997] usb 5-1: config 0 descriptor?? [ 412.712689][ T26] audit: type=1326 audit(1856684762.353:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8069 comm="syz.0.1142" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffba43773b9 code=0x0 [ 412.734342][ C1] vkms_vblank_simulate: vblank timer overrun [ 412.809674][ T4997] usb 5-1: USB disconnect, device number 7 [ 412.840517][ T26] audit: type=1326 audit(1856684762.483:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8055 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b99773b9 code=0x7fc00000 [ 412.899244][ T26] audit: type=1326 audit(1856684762.483:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8055 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f94b99773b9 code=0x7fc00000 [ 412.921808][ T8072] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 412.950501][ T151] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 412.959137][ T26] audit: type=1326 audit(1856684762.483:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8055 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b99773b9 code=0x7fc00000 [ 412.971826][ T151] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0xC has invalid wMaxPacketSize 0 [ 412.983510][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.013790][ T151] usb 2-1: config 0 interface 0 has no altsetting 0 [ 413.029476][ T26] audit: type=1326 audit(1856684762.483:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8055 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b99773b9 code=0x7fc00000 [ 413.051654][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.093175][ T26] audit: type=1326 audit(1856684762.483:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8055 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b99773b9 code=0x7fc00000 [ 413.102186][ T8074] loop3: detected capacity change from 0 to 256 [ 413.115353][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.135409][ T8074] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value [ 413.155161][ T26] audit: type=1326 audit(1856684762.483:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8055 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b99773b9 code=0x7fc00000 [ 413.177963][ T26] audit: type=1326 audit(1856684762.483:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8055 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b99773b9 code=0x7fc00000 [ 413.198912][ T8068] loop2: detected capacity change from 0 to 32768 [ 413.222771][ T6971] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 413.391753][ T151] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.92 [ 413.402679][ T151] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.410777][ T151] usb 2-1: Product: syz [ 413.415054][ T151] usb 2-1: Manufacturer: syz [ 413.419712][ T151] usb 2-1: SerialNumber: syz [ 413.426464][ T6970] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 413.427963][ T151] usb 2-1: config 0 descriptor?? [ 413.540220][ T8078] tmpfs: Bad value for 'nr_inodes' [ 413.712267][ T151] usbtest 2-1:0.0: couldn't get endpoints, -71 [ 413.843605][ T151] usbtest: probe of 2-1:0.0 failed with error -71 [ 414.105252][ T151] usb 2-1: USB disconnect, device number 10 [ 414.388827][ T8080] loop4: detected capacity change from 0 to 1024 [ 414.432121][ T8086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1146'. [ 414.454378][ T8085] loop3: detected capacity change from 0 to 1024 [ 414.472428][ T8080] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 414.482409][ T8085] hfsplus: unable to parse mount options [ 414.703794][ T4997] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 415.580471][ T8080] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 415.621694][ T4997] usb 3-1: Using ep0 maxpacket: 32 [ 415.640049][ T3641] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 415.741788][ T4997] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.781178][ T4997] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.819997][ T4997] usb 3-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 415.940778][ T4997] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.952806][ T7288] EXT4-fs (loop4): unmounting filesystem. [ 415.963103][ T4997] usb 3-1: config 0 descriptor?? [ 415.982060][ T3641] usb 2-1: Using ep0 maxpacket: 16 [ 416.893107][ T4997] wacom 0003:056A:00F0.0008: unknown main item tag 0x0 [ 416.900145][ T3641] usb 2-1: config 0 has no interfaces? [ 416.926506][ T4997] wacom 0003:056A:00F0.0008: hidraw0: USB HID v0.00 Device [HID 056a:00f0] on usb-dummy_hcd.2-1/input0 [ 417.059466][ T3641] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 417.068594][ T3641] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.094968][ T151] usb 3-1: USB disconnect, device number 16 [ 417.103763][ T3641] usb 2-1: Product: syz [ 417.107977][ T3641] usb 2-1: Manufacturer: syz [ 417.119164][ T3641] usb 2-1: SerialNumber: syz [ 417.134348][ T3641] r8152-cfgselector 2-1: config 0 descriptor?? [ 417.291628][ T8114] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 417.354460][ T8106] loop3: detected capacity change from 0 to 32768 [ 417.369922][ T8106] XFS: attr2 mount option is deprecated. [ 417.375703][ T8106] XFS: noikeep mount option is deprecated. [ 417.400503][ T3641] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 417.414108][ T4204] usb 2-1: config 0 descriptor?? [ 417.427641][ T8106] XFS (loop3): Mounting V5 Filesystem [ 417.464555][ T8106] XFS (loop3): Ending clean mount [ 417.472462][ T8106] XFS (loop3): Quotacheck needed: Please wait. [ 417.506082][ T8106] XFS (loop3): Quotacheck: Done. [ 417.549171][ T3688] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 417.594436][ T7140] XFS (loop3): Unmounting Filesystem [ 417.614430][ T151] usb 2-1: USB disconnect, device number 11 [ 417.639509][ T4204] usb 2-1: can't set config #0, error -71 [ 418.966375][ T3688] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 419.017361][ T3688] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0xC has invalid wMaxPacketSize 0 [ 419.060953][ T3688] usb 5-1: config 0 interface 0 has no altsetting 0 [ 419.682732][ T8144] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 419.736392][ T8144] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 419.778772][ T8144] overlayfs: empty lowerdir [ 420.020347][ T26] kauditd_printk_skb: 103 callbacks suppressed [ 420.020363][ T26] audit: type=1326 audit(1856684769.663:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8150 comm="syz.0.1170" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffba43773b9 code=0x0 [ 420.129336][ T3688] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.92 [ 420.141854][ T3688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.164021][ T3688] usb 5-1: Product: syz [ 420.178779][ T3688] usb 5-1: Manufacturer: syz [ 420.188347][ T3688] usb 5-1: SerialNumber: syz [ 420.207702][ T3688] usb 5-1: config 0 descriptor?? [ 420.329345][ T3688] usbtest 5-1:0.0: couldn't get endpoints, -71 [ 420.335662][ T3688] usbtest: probe of 5-1:0.0 failed with error -71 [ 420.349119][ T151] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 420.392209][ T3688] usb 5-1: USB disconnect, device number 8 [ 420.488573][ T8147] loop3: detected capacity change from 0 to 32768 [ 420.503016][ T8147] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1167 (8147) [ 420.543997][ T8147] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 420.575721][ T8147] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 420.588361][ T8147] BTRFS info (device loop3): setting nodatacow, compression disabled [ 420.610605][ T8147] BTRFS info (device loop3): enabling auto defrag [ 420.629496][ T8147] BTRFS info (device loop3): max_inline at 0 [ 420.635551][ T8147] BTRFS info (device loop3): using free space tree [ 420.676704][ T8153] loop2: detected capacity change from 0 to 32767 [ 420.715083][ T151] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 420.744337][ T151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.769710][ T8153] syz.2.1168: attempt to access beyond end of device [ 420.769710][ T8153] loop2: rw=4096, sector=32767, nr_sectors = 1 limit=32767 [ 420.785098][ T151] usb 2-1: config 0 descriptor?? [ 420.791467][ T8153] XFS (loop2): last sector read failed [ 420.850371][ T151] cp210x 2-1:0.0: cp210x converter detected [ 420.981432][ T26] audit: type=1326 audit(1856684770.623:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8180 comm="syz.0.1172" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffba43773b9 code=0x0 [ 420.993790][ T8157] loop4: detected capacity change from 0 to 32768 [ 421.096564][ T8157] XFS (loop4): Mounting V5 Filesystem [ 421.112665][ T7140] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 421.270907][ T8154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.289334][ T151] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 421.306656][ T8154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.342743][ T151] usb 2-1: cp210x converter now attached to ttyUSB0 [ 421.384449][ T8191] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 421.452248][ T8157] XFS (loop4): Ending clean mount [ 421.490512][ T8157] XFS (loop4): Quotacheck needed: Please wait. [ 421.596002][ T4922] usb 2-1: USB disconnect, device number 12 [ 421.618146][ T8157] XFS (loop4): Quotacheck: Done. [ 421.620609][ T4922] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 421.654180][ T4922] cp210x 2-1:0.0: device disconnected [ 421.766161][ T8200] loop3: detected capacity change from 0 to 128 [ 421.836319][ T7288] XFS (loop4): Unmounting Filesystem [ 421.992145][ T8202] syz.0.1177 (8202) used greatest stack depth: 18392 bytes left [ 422.035134][ T3689] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 422.450213][ T3689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.517120][ T3689] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 422.814159][ T3689] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 422.823672][ T3689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.846480][ T3689] usb 3-1: config 0 descriptor?? [ 422.979421][ T8212] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 423.005910][ T8212] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 423.038008][ T8212] overlayfs: empty lowerdir [ 423.072196][ T8213] loop1: detected capacity change from 0 to 128 [ 423.167967][ T8213] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 423.250661][ T8219] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 423.437808][ T3689] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 423.550343][ T3689] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 423.569839][ T8213] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038 (0x7fffffff) [ 423.701821][ T3689] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 423.751702][ T26] audit: type=1326 audit(1856684773.393:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.3.1182" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94b99773b9 code=0x0 [ 423.822030][ T6921] EXT4-fs (loop1): unmounting filesystem. [ 423.883933][ T3689] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 423.900431][ T3689] usb 3-1: USB disconnect, device number 17 [ 424.470293][ T26] audit: type=1326 audit(1856684774.113:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.2.1188" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20c43773b9 code=0x0 [ 424.515474][ T8229] loop1: detected capacity change from 0 to 32768 [ 424.662055][ T8229] XFS (loop1): Mounting V5 Filesystem [ 424.781395][ T8237] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 424.829760][ T8229] XFS (loop1): Ending clean mount [ 424.848638][ T8229] XFS (loop1): Quotacheck needed: Please wait. [ 424.921954][ T26] audit: type=1326 audit(1856684774.563:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8247 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b99773b9 code=0x7fc00000 [ 424.934035][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 424.987491][ T8229] XFS (loop1): Quotacheck: Done. [ 425.247690][ T6921] XFS (loop1): Unmounting Filesystem [ 425.277959][ T8234] loop4: detected capacity change from 0 to 32768 [ 425.398279][ T8234] XFS (loop4): Mounting V5 Filesystem [ 425.482971][ T8260] loop2: detected capacity change from 0 to 2048 [ 425.563508][ T8260] NILFS (loop2): corrupt root inode [ 425.584931][ T26] audit: type=1326 audit(1856684775.223:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8247 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94b99773b9 code=0x7fc00000 [ 425.623393][ T8234] XFS (loop4): Ending clean mount [ 425.638020][ T8234] XFS (loop4): Quotacheck needed: Please wait. [ 425.662118][ T26] audit: type=1326 audit(1856684775.223:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8247 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b99773b9 code=0x7fc00000 [ 425.715403][ T8234] XFS (loop4): Quotacheck: Done. [ 425.727003][ T26] audit: type=1326 audit(1856684775.223:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8247 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b99773b9 code=0x7fc00000 [ 425.778628][ T26] audit: type=1326 audit(1856684775.223:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8247 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b99773b9 code=0x7fc00000 [ 425.853310][ T26] audit: type=1326 audit(1856684775.223:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8247 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b99773b9 code=0x7fc00000 [ 425.887943][ T8267] loop1: detected capacity change from 0 to 128 [ 425.895546][ T26] audit: type=1326 audit(1856684775.223:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8247 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b99773b9 code=0x7fc00000 [ 425.931532][ T26] audit: type=1326 audit(1856684775.223:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8247 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b99773b9 code=0x7fc00000 [ 425.967108][ T26] audit: type=1326 audit(1856684775.223:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8247 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b99773b9 code=0x7fc00000 [ 426.017472][ T26] audit: type=1326 audit(1856684775.223:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8247 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b99773b9 code=0x7fc00000 [ 426.095275][ T7288] XFS (loop4): Unmounting Filesystem [ 426.124824][ T26] audit: type=1326 audit(1856684775.223:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8247 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b99773b9 code=0x7fc00000 [ 427.289130][ T14] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 427.366375][ T8284] loop4: detected capacity change from 0 to 128 [ 427.409265][ T8284] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 427.425774][ T8284] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038 (0x7fffffff) [ 427.488749][ T8260] loop2: detected capacity change from 0 to 40427 [ 427.499383][ T151] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 427.515235][ T8260] F2FS-fs (loop2): invalid crc value [ 427.540138][ T7288] EXT4-fs (loop4): unmounting filesystem. [ 427.550615][ T8260] F2FS-fs (loop2): Found nat_bits in checkpoint [ 427.665954][ T8260] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 427.679484][ T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.700393][ T14] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 427.719475][ T8288] f2fs_ckpt-7:2: attempt to access beyond end of device [ 427.719475][ T8288] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 427.809606][ T14] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 427.829491][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 427.837657][ T14] usb 4-1: SerialNumber: syz [ 427.869605][ T151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.889689][ T151] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 427.919118][ T151] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 427.939224][ T151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.958989][ T151] usb 1-1: config 0 descriptor?? [ 428.062896][ T8290] loop4: detected capacity change from 0 to 32768 [ 428.100723][ T8290] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1201 (8290) [ 428.161622][ T14] usb 4-1: cannot find UAC_HEADER [ 428.168306][ T8290] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 428.214024][ T14] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 428.224921][ T8290] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 428.268643][ T8290] BTRFS info (device loop4): setting nodatacow, compression disabled [ 428.278098][ T14] usb 4-1: USB disconnect, device number 15 [ 428.307579][ T8290] BTRFS info (device loop4): enabling auto defrag [ 428.361821][ T8290] BTRFS info (device loop4): max_inline at 0 [ 428.376955][ T8290] BTRFS info (device loop4): using free space tree [ 428.461054][ T151] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 428.468669][ T151] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 428.483774][ T151] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 429.233235][ T151] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 429.269864][ T6971] udevd[6971]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 429.457173][ T3689] usb 1-1: USB disconnect, device number 22 [ 429.587187][ T7288] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 431.001785][ T8333] loop4: detected capacity change from 0 to 512 [ 431.046110][ T8333] EXT4-fs: Ignoring removed nomblk_io_submit option [ 431.066369][ T8319] loop1: detected capacity change from 0 to 40427 [ 431.105452][ T8319] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 431.123149][ T8319] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 431.165048][ T8319] F2FS-fs (loop1): Found nat_bits in checkpoint [ 431.227424][ T8333] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 431.299283][ T8333] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038 (0x7fffffff) [ 431.455203][ T8319] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 431.504697][ T8319] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 431.567796][ T7288] EXT4-fs (loop4): unmounting filesystem. [ 431.727744][ T8346] loop2: detected capacity change from 0 to 40427 [ 431.748599][ T8346] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 431.756435][ T8346] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 431.798325][ T6921] syz-executor: attempt to access beyond end of device [ 431.798325][ T6921] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 431.849779][ T8346] F2FS-fs (loop2): Found nat_bits in checkpoint [ 431.911243][ T8346] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 431.918331][ T8346] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 432.069188][ T151] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 432.191201][ T8356] syz.2.1213: attempt to access beyond end of device [ 432.191201][ T8356] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 432.243615][ T8356] syz.2.1213: attempt to access beyond end of device [ 432.243615][ T8356] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 432.339544][ T151] usb 4-1: Using ep0 maxpacket: 32 [ 432.489467][ T151] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.507786][ T8354] loop4: detected capacity change from 0 to 4096 [ 432.514620][ T151] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.538521][ T8354] ntfs3: loop4: try to read out of volume at offset 0x5c00 [ 432.560713][ T151] usb 4-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 432.573485][ T8354] ntfs3: loop4: Failed to load $Volume. [ 432.588929][ T151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.602944][ T151] usb 4-1: config 0 descriptor?? [ 433.412693][ T151] wacom 0003:056A:00F0.000B: unknown main item tag 0x0 [ 433.431750][ T151] wacom 0003:056A:00F0.000B: hidraw0: USB HID v0.00 Device [HID 056a:00f0] on usb-dummy_hcd.3-1/input0 [ 433.626999][ T2620] usb 4-1: USB disconnect, device number 16 [ 434.949474][ T8372] loop1: detected capacity change from 0 to 32768 [ 435.120297][ T8372] XFS (loop1): Mounting V5 Filesystem [ 435.227716][ T8388] IPv6: addrconf: prefix option has invalid lifetime [ 435.230158][ T3654] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 435.299864][ T3654] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 435.309972][ T3654] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 435.317897][ T3654] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 435.332596][ T8372] XFS (loop1): Ending clean mount [ 435.345632][ T8372] XFS (loop1): Quotacheck needed: Please wait. [ 435.352436][ T3654] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 435.359892][ T3654] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 435.555090][ T8372] XFS (loop1): Quotacheck: Done. [ 435.613096][ T8393] loop2: detected capacity change from 0 to 512 [ 435.658272][ T8393] EXT4-fs: Ignoring removed nomblk_io_submit option [ 435.734484][ T6921] XFS (loop1): Unmounting Filesystem [ 435.804004][ T8393] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 435.829452][ T8393] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038 (0x7fffffff) [ 435.950220][ T8385] chnl_net:caif_netlink_parms(): no params data found [ 435.982041][ T7182] EXT4-fs (loop2): unmounting filesystem. [ 436.073495][ T8374] loop4: detected capacity change from 0 to 32768 [ 436.536647][ T8408] loop2: detected capacity change from 0 to 40427 [ 436.660458][ T8408] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 436.668348][ T8408] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 436.873054][ T8374] XFS (loop4): Mounting V5 Filesystem [ 437.128821][ T8408] F2FS-fs (loop2): Found nat_bits in checkpoint [ 437.290887][ T8408] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 437.297976][ T8408] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 437.379295][ T3655] Bluetooth: hci0: command tx timeout [ 437.600838][ T8428] syz.2.1228: attempt to access beyond end of device [ 437.600838][ T8428] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 437.659842][ T8428] syz.2.1228: attempt to access beyond end of device [ 437.659842][ T8428] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 437.826302][ T8374] XFS (loop4): Ending clean mount [ 437.833385][ T8385] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.842367][ T8385] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.861038][ T8374] XFS (loop4): Quotacheck needed: Please wait. [ 437.910686][ T8385] device bridge_slave_0 entered promiscuous mode [ 437.973747][ T8385] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.989486][ T8374] XFS (loop4): Quotacheck: Done. [ 437.996400][ T8385] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.012592][ T8385] device bridge_slave_1 entered promiscuous mode [ 438.138022][ T7288] XFS (loop4): Unmounting Filesystem [ 438.268206][ T8385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.327624][ T8385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.461520][ T8385] team0: Port device team_slave_0 added [ 438.595247][ T6478] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.620109][ T8440] loop3: detected capacity change from 0 to 512 [ 438.663576][ T8385] team0: Port device team_slave_1 added [ 438.675878][ T8440] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.1237: casefold flag without casefold feature [ 438.743749][ T6478] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.757095][ T8385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.758220][ T8440] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.1237: missing EA_INODE flag [ 438.764671][ T8385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.803880][ T8385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.833936][ T8385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.848627][ T8385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.915531][ T8440] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1237: error while reading EA inode 12 err=-117 [ 438.916071][ T8385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.942441][ T8440] EXT4-fs (loop3): 1 orphan inode deleted [ 438.948215][ T8440] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 438.963608][ T8447] loop1: detected capacity change from 0 to 512 [ 438.995606][ T6478] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.999905][ T8447] EXT4-fs: Ignoring removed nomblk_io_submit option [ 439.061642][ T8447] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 439.097686][ T8447] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038 (0x7fffffff) [ 439.109079][ T4925] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 439.134966][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 439.134983][ T26] audit: type=1800 audit(1856684788.773:240): pid=8451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1237" name="bus" dev="loop3" ino=19 res=0 errno=0 [ 439.216045][ T6478] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.241313][ T6921] EXT4-fs (loop1): unmounting filesystem. [ 439.252690][ T8385] device hsr_slave_0 entered promiscuous mode [ 439.264905][ T8385] device hsr_slave_1 entered promiscuous mode [ 439.276573][ T8385] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 439.291337][ T26] audit: type=1326 audit(1856684788.933:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8452 comm="syz.4.1239" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a051773b9 code=0x0 [ 439.327749][ T8385] Cannot create hsr debugfs directory [ 439.469387][ T3655] Bluetooth: hci0: command tx timeout [ 439.479337][ T4925] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.547189][ T4925] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 439.640241][ T7140] EXT4-fs (loop3): unmounting filesystem. [ 439.679929][ T4925] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 439.706471][ T4925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 439.715191][ T4925] usb 3-1: SerialNumber: syz [ 439.875014][ T8469] loop3: detected capacity change from 0 to 128 [ 439.960976][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.970408][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.596985][ T4925] usb 3-1: cannot find UAC_HEADER [ 440.654670][ T4925] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 440.664313][ T8469] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 440.682145][ T8469] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038 (0x7fffffff) [ 440.687862][ T4925] usb 3-1: USB disconnect, device number 18 [ 440.757788][ T26] audit: type=1326 audit(1856684790.393:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8473 comm="syz.1.1243" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f4dd773b9 code=0x0 [ 440.839824][ T7140] EXT4-fs (loop3): unmounting filesystem. [ 440.934569][ T6971] udevd[6971]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 441.539431][ T3656] Bluetooth: hci0: command tx timeout [ 441.570422][ T8501] loop4: detected capacity change from 0 to 512 [ 441.620353][ T8501] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.1250: casefold flag without casefold feature [ 441.705776][ T8501] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.1250: missing EA_INODE flag [ 441.798026][ T8501] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1250: error while reading EA inode 12 err=-117 [ 441.856474][ T8501] EXT4-fs (loop4): 1 orphan inode deleted [ 441.872442][ T8501] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 441.902300][ T8385] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 441.951749][ T8385] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 441.992130][ T8508] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 442.017959][ T8508] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 442.131441][ T26] audit: type=1800 audit(1856684791.773:243): pid=8514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1250" name="bus" dev="loop4" ino=19 res=0 errno=0 [ 442.179466][ T3655] Bluetooth: hci1: command 0x0406 tx timeout [ 442.348489][ T8385] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 442.383725][ T8385] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 442.520773][ T7288] EXT4-fs (loop4): unmounting filesystem. [ 442.842249][ T6478] device hsr_slave_0 left promiscuous mode [ 442.888863][ T6478] device hsr_slave_1 left promiscuous mode [ 442.899527][ T6478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.906980][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.998427][ T6478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.037248][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.069429][ T6478] device bridge_slave_1 left promiscuous mode [ 443.089229][ T6478] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.127612][ T6478] device bridge_slave_0 left promiscuous mode [ 443.157673][ T6478] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.231487][ T8535] loop1: detected capacity change from 0 to 64 [ 443.314188][ T6478] device veth1_macvtap left promiscuous mode [ 443.322428][ T6478] device veth0_macvtap left promiscuous mode [ 443.328638][ T6478] device veth1_vlan left promiscuous mode [ 443.336329][ T8516] loop3: detected capacity change from 0 to 40427 [ 443.372014][ T6478] device veth0_vlan left promiscuous mode [ 443.436291][ T8516] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 443.463791][ T8516] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 443.523082][ T8516] F2FS-fs (loop3): Found nat_bits in checkpoint [ 443.619084][ T3655] Bluetooth: hci0: command tx timeout [ 443.751951][ T8516] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 443.779573][ T8516] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 443.879807][ T8524] loop2: detected capacity change from 0 to 32768 [ 443.893260][ T8524] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.1256 (8524) [ 443.949493][ T8524] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 443.953688][ T8545] loop1: detected capacity change from 0 to 512 [ 443.992479][ T8524] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 444.051755][ T8524] BTRFS info (device loop2): using free space tree [ 444.056090][ T8526] loop4: detected capacity change from 0 to 32768 [ 444.070739][ T7140] syz-executor: attempt to access beyond end of device [ 444.070739][ T7140] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 444.100020][ T8526] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1257 (8526) [ 444.140218][ T8545] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 444.179519][ T8545] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038 (0x7fffffff) [ 444.268873][ T8526] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 444.294960][ T8526] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 444.314573][ T8526] BTRFS info (device loop4): setting nodatasum [ 444.321895][ T8526] BTRFS info (device loop4): force zlib compression, level 3 [ 444.363308][ T8526] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 444.414433][ T8526] BTRFS info (device loop4): use lzo compression, level 0 [ 444.414474][ T8524] BTRFS info (device loop2): enabling ssd optimizations [ 444.454711][ T8526] BTRFS info (device loop4): turning on flush-on-commit [ 444.511605][ T8526] BTRFS info (device loop4): enabling auto defrag [ 444.536483][ T8526] BTRFS info (device loop4): using free space tree [ 444.551702][ T7182] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 444.790868][ T8526] BTRFS info (device loop4): enabling ssd optimizations [ 444.952037][ T26] audit: type=1804 audit(1856684794.583:244): pid=8589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1257" name="/newroot/44/file1/bus" dev="loop4" ino=263 res=1 errno=0 [ 445.120172][ T26] audit: type=1804 audit(1856684794.763:245): pid=8589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1257" name="/newroot/44/file1/bus" dev="loop4" ino=263 res=1 errno=0 [ 445.215184][ T26] audit: type=1804 audit(1856684794.783:246): pid=8589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1257" name="/newroot/44/file1/bus" dev="loop4" ino=263 res=1 errno=0 [ 445.434184][ T7288] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 445.489062][ T14] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 445.765425][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 445.874226][ T6478] team0 (unregistering): Port device team_slave_1 removed [ 445.946669][ T6478] team0 (unregistering): Port device team_slave_0 removed [ 445.959701][ T8599] loop4: detected capacity change from 0 to 128 [ 446.019405][ T6478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.069349][ T14] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 446.090476][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.098516][ T14] usb 3-1: Product: syz [ 446.104964][ T14] usb 3-1: Manufacturer: syz [ 446.109923][ T14] usb 3-1: SerialNumber: syz [ 446.157352][ T14] usb 3-1: config 0 descriptor?? [ 446.192124][ T6478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.221386][ T14] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 447.417158][ T6478] bond0 (unregistering): Released all slaves [ 447.666923][ T8385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.675484][ T8605] loop3: detected capacity change from 0 to 512 [ 447.736291][ T8593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 447.737463][ T6921] EXT4-fs (loop1): unmounting filesystem. [ 447.750043][ T8605] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.1266: casefold flag without casefold feature [ 447.764080][ T8593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 447.767203][ T8605] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.1266: missing EA_INODE flag [ 447.787229][ T8385] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.799404][ T8605] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1266: error while reading EA inode 12 err=-117 [ 447.820942][ T8605] EXT4-fs (loop3): 1 orphan inode deleted [ 447.824755][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 447.828265][ T8605] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 447.880686][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 447.910655][ T3105] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.917777][ T3105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.940081][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 447.951298][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 447.960261][ T3105] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.967409][ T3105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.981988][ T14] gspca_stk1135: reg_w 0xf err -71 [ 447.993675][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 448.009935][ T14] gspca_stk1135: Sensor write failed [ 448.022241][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 448.029141][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 448.037952][ T14] gspca_stk1135: Sensor write failed [ 448.047575][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 448.053871][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 448.062430][ T26] audit: type=1800 audit(1856684797.703:247): pid=8613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1266" name="bus" dev="loop3" ino=19 res=0 errno=0 [ 448.084755][ T14] gspca_stk1135: Sensor read failed [ 448.088770][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 448.090241][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 448.113975][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 448.120941][ T14] gspca_stk1135: Sensor read failed [ 448.132445][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 448.132766][ T14] gspca_stk1135: Detected sensor type unknown (0x0) [ 448.154307][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 448.166547][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 448.167505][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 448.186480][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 448.189847][ T14] gspca_stk1135: Sensor read failed [ 448.197916][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 448.207029][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 448.217062][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 448.219932][ T14] gspca_stk1135: Sensor read failed [ 448.234794][ T8385] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 448.246145][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 448.253419][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 448.269843][ T14] gspca_stk1135: Sensor write failed [ 448.284036][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 448.299202][ T14] gspca_stk1135: Sensor write failed [ 448.304656][ T14] stk1135: probe of 3-1:0.0 failed with error -71 [ 448.339433][ T14] usb 3-1: USB disconnect, device number 19 [ 448.358322][ T8593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 448.410150][ T8593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 448.566145][ T7140] EXT4-fs (loop3): unmounting filesystem. [ 448.623034][ T8623] netlink: 566 bytes leftover after parsing attributes in process `syz.1.1271'. [ 448.821379][ T8632] loop1: detected capacity change from 0 to 128 [ 448.934684][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 448.949418][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 449.080543][ T8385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.168302][ T8637] loop2: detected capacity change from 0 to 256 [ 449.854740][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 449.873469][ T8637] FAT-fs (loop2): Directory bread(block 64) failed [ 449.888538][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 449.907332][ T8637] FAT-fs (loop2): Directory bread(block 65) failed [ 449.985429][ T8637] FAT-fs (loop2): Directory bread(block 66) failed [ 450.023259][ T8637] FAT-fs (loop2): Directory bread(block 67) failed [ 450.038165][ T8595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 450.049168][ T8637] FAT-fs (loop2): Directory bread(block 68) failed [ 450.055747][ T8637] FAT-fs (loop2): Directory bread(block 69) failed [ 450.085056][ T8595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 450.110583][ T8385] device veth0_vlan entered promiscuous mode [ 450.129309][ T8637] FAT-fs (loop2): Directory bread(block 70) failed [ 450.135967][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 450.143422][ T8637] FAT-fs (loop2): Directory bread(block 71) failed [ 450.159258][ T8637] FAT-fs (loop2): Directory bread(block 72) failed [ 450.165830][ T8637] FAT-fs (loop2): Directory bread(block 73) failed [ 450.173437][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 450.201053][ T8385] device veth1_vlan entered promiscuous mode [ 450.312552][ T8645] loop3: detected capacity change from 0 to 8 [ 450.313778][ T5362] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 450.339915][ T5362] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 450.348296][ T5362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 450.354520][ T8645] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 450.362947][ T5362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 450.365826][ T8385] device veth0_macvtap entered promiscuous mode [ 450.390026][ T8385] device veth1_macvtap entered promiscuous mode [ 450.443761][ T8385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.477687][ T8385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.499484][ T8385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.536745][ T8385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.583400][ T8385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.629124][ T8385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.649118][ T8385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.679149][ T8385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.692270][ T8625] loop4: detected capacity change from 0 to 32768 [ 450.701726][ T8385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.774043][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 450.780573][ T8625] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1273 (8625) [ 450.790527][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 450.825752][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 450.849966][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 450.885579][ T8385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.917082][ T8625] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 450.947891][ T8625] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 450.948525][ T8385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.994133][ T8625] BTRFS info (device loop4): using free space tree [ 451.047973][ T8385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.160341][ T8385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.217681][ T8625] BTRFS info (device loop4): enabling ssd optimizations [ 451.242901][ T8385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.266440][ T8385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.328022][ T8385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.352435][ T8385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.391451][ T8385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.412938][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 451.427019][ T3105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 451.469549][ T8672] netlink: 566 bytes leftover after parsing attributes in process `syz.3.1284'. [ 451.496577][ T8385] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.517267][ T8385] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.557173][ T8385] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.582847][ T8385] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.723438][ T7288] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 451.978050][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.992413][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.267978][ T8684] loop2: detected capacity change from 0 to 1024 [ 452.274744][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 452.358246][ T8686] loop3: detected capacity change from 0 to 512 [ 452.384025][ T4484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.419761][ T8684] hfsplus: bad catalog entry type [ 452.436199][ T4484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.519560][ T8686] EXT4-fs (loop3): 1 orphan inode deleted [ 452.525349][ T8686] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 452.538584][ T8686] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038 (0x7fffffff) [ 452.560749][ T3731] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 452.585858][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 452.665253][ T3731] EXT4-fs error (device loop3): ext4_release_dquot:6800: comm kworker/u4:6: Failed to release dquot type 1 [ 452.725772][ T4481] hfsplus: b-tree write err: -5, ino 4 [ 453.005688][ T8695] loop2: detected capacity change from 0 to 128 [ 454.305931][ T8704] loop4: detected capacity change from 0 to 8 [ 454.359410][ T8704] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 454.896880][ T8707] loop2: detected capacity change from 0 to 40427 [ 454.970455][ T6971] I/O error, dev loop2, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 456.048234][ T8718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1297'. [ 456.161161][ T8720] team1: Mode changed to "activebackup" [ 456.170129][ T8720] team1: Mode changed to "roundrobin" [ 456.208319][ T8721] loop2: detected capacity change from 0 to 1024 [ 456.263669][ T8721] hfsplus: bad catalog entry type [ 456.404781][ T4119] hfsplus: b-tree write err: -5, ino 4 [ 456.587261][ T7140] EXT4-fs (loop3): unmounting filesystem. [ 457.813376][ T26] audit: type=1326 audit(1856684806.403:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8726 comm="syz.0.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40537773b9 code=0x7ffc0000 [ 457.937858][ T26] audit: type=1326 audit(1856684806.403:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8726 comm="syz.0.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40537773b9 code=0x7ffc0000 [ 457.967790][ T26] audit: type=1326 audit(1856684806.403:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8726 comm="syz.0.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f40537773b9 code=0x7ffc0000 [ 458.009045][ T26] audit: type=1326 audit(1856684806.403:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8726 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40537773b9 code=0x7ffc0000 [ 458.049104][ T26] audit: type=1326 audit(1856684806.403:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8726 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40537773b9 code=0x7ffc0000 [ 458.105695][ T8742] loop3: detected capacity change from 0 to 4096 [ 458.122481][ T8742] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 458.145362][ T26] audit: type=1326 audit(1856684806.403:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8726 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f40537773b9 code=0x7ffc0000 [ 458.172006][ T26] audit: type=1326 audit(1856684806.403:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8726 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40537773b9 code=0x7ffc0000 [ 458.197249][ T8728] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 458.207128][ T8742] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 458.212343][ T8713] loop4: detected capacity change from 0 to 40427 [ 458.220190][ T8728] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 458.237394][ T8742] ntfs: (device loop3): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 458.296081][ T8742] ntfs: volume version 3.1. [ 458.674191][ T8753] loop3: detected capacity change from 0 to 512 [ 458.774821][ T8753] EXT4-fs (loop3): 1 orphan inode deleted [ 458.793836][ T8753] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 459.061132][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1311'. [ 459.091459][ T7140] EXT4-fs (loop3): unmounting filesystem. [ 459.170776][ T8762] team1: Mode changed to "activebackup" [ 459.179820][ T8762] team1: Mode changed to "roundrobin" [ 459.639785][ T8768] loop3: detected capacity change from 0 to 512 [ 459.852448][ T8768] EXT4-fs (loop3): 1 orphan inode deleted [ 459.858348][ T8768] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 459.875380][ T4484] EXT4-fs error (device loop3): ext4_release_dquot:6800: comm kworker/u4:11: Failed to release dquot type 1 [ 459.894366][ T8768] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038 (0x7fffffff) [ 460.301486][ T7140] EXT4-fs (loop3): unmounting filesystem. [ 460.305678][ T8774] loop2: detected capacity change from 0 to 1024 [ 460.329589][ T8772] loop4: detected capacity change from 0 to 1024 [ 460.573264][ T8774] loop2: detected capacity change from 0 to 1024 [ 460.641926][ T8774] EXT4-fs: Ignoring removed i_version option [ 460.669111][ T8774] ext4: Bad value for 'max_batch_time' [ 460.718048][ T46] hfsplus: b-tree write err: -5, ino 4 [ 460.745428][ T6971] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 460.933548][ T8785] loop3: detected capacity change from 0 to 4096 [ 460.973439][ T8785] ntfs: volume version 3.1. [ 461.959869][ T8804] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 462.030601][ T8807] loop1: detected capacity change from 0 to 4096 [ 462.031107][ T8804] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 462.075059][ T8807] EXT4-fs: Ignoring removed nobh option [ 462.104765][ T8807] EXT4-fs: Ignoring removed i_version option [ 462.133399][ T8807] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 462.499299][ T3655] Bluetooth: hci4: command 0x0406 tx timeout [ 462.529313][ T6921] EXT4-fs (loop1): unmounting filesystem. [ 462.965897][ T8827] loop2: detected capacity change from 0 to 4096 [ 463.010161][ T8827] __ntfs_warning: 101 callbacks suppressed [ 463.010177][ T8827] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 463.110039][ T8827] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 463.137788][ T8835] loop4: detected capacity change from 0 to 128 [ 463.175757][ T8827] ntfs: (device loop2): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 463.194442][ T8827] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovery of primary boot sector failed: Read-only mount. [ 463.240130][ T8834] tmpfs: Bad value for 'nr_inodes' [ 463.309095][ T8827] ntfs: (device loop2): read_ntfs_boot_sector(): Using backup boot sector. [ 463.689125][ T26] audit: type=1800 audit(1856684813.313:314): pid=8839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1338" name="bus" dev="loop4" ino=1048694 res=0 errno=0 [ 463.714000][ T8827] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 463.900438][ T8827] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 463.929340][ T8827] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 464.088619][ T8827] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 464.272663][ T8827] ntfs: volume version 3.1. [ 464.294980][ T8844] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1339'. [ 465.207989][ T8851] loop2: detected capacity change from 0 to 1024 [ 465.284025][ T8854] loop3: detected capacity change from 0 to 512 [ 465.334782][ T6971] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 465.420222][ T8854] EXT4-fs (loop3): 1 orphan inode deleted [ 465.426051][ T8854] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 465.515940][ T8852] loop2: detected capacity change from 0 to 1024 [ 465.585929][ T8852] EXT4-fs: Ignoring removed i_version option [ 465.646375][ T7140] EXT4-fs (loop3): unmounting filesystem. [ 465.751092][ T8852] ext4: Bad value for 'max_batch_time' [ 466.034455][ T8862] loop3: detected capacity change from 0 to 4096 [ 466.079917][ T8862] EXT4-fs: Ignoring removed nobh option [ 466.112831][ T8862] EXT4-fs: Ignoring removed i_version option [ 466.221749][ T8862] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 466.359982][ T8873] loop4: detected capacity change from 0 to 128 [ 467.560097][ T7140] EXT4-fs (loop3): unmounting filesystem. [ 467.619204][ T3655] Bluetooth: hci3: command 0x0406 tx timeout [ 467.716459][ T8879] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1350'. [ 468.094942][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 468.094959][ T26] audit: type=1326 audit(1856684817.733:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8867 comm="syz.0.1348" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f40537773b9 code=0x0 [ 468.182635][ T8886] loop1: detected capacity change from 0 to 4096 [ 468.252444][ T8886] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 468.293183][ T8893] loop3: detected capacity change from 0 to 512 [ 468.350558][ T8886] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 468.386792][ T8886] ntfs: (device loop1): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 468.406904][ T8886] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovery of primary boot sector failed: Read-only mount. [ 468.411592][ T8893] EXT4-fs (loop3): 1 orphan inode deleted [ 468.449021][ T8886] ntfs: (device loop1): read_ntfs_boot_sector(): Using backup boot sector. [ 468.479220][ T8893] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 468.495695][ T8886] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 468.553239][ T8886] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 468.629102][ T8886] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 468.648047][ T8886] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 468.745526][ T8888] loop4: detected capacity change from 0 to 32768 [ 468.755303][ T8886] ntfs: volume version 3.1. [ 468.847774][ T7140] EXT4-fs (loop3): unmounting filesystem. [ 468.879330][ T8888] XFS (loop4): Mounting V5 Filesystem [ 469.099299][ T8888] XFS (loop4): Ending clean mount [ 469.949826][ T8909] loop1: detected capacity change from 0 to 256 [ 470.012330][ T7288] XFS (loop4): Unmounting Filesystem [ 470.079059][ T14] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 470.223614][ T8909] FAT-fs (loop1): Directory bread(block 64) failed [ 470.238686][ T8909] FAT-fs (loop1): Directory bread(block 65) failed [ 470.266165][ T8909] FAT-fs (loop1): Directory bread(block 66) failed [ 470.273304][ T8909] FAT-fs (loop1): Directory bread(block 67) failed [ 470.290029][ T8909] FAT-fs (loop1): Directory bread(block 68) failed [ 470.296929][ T8909] FAT-fs (loop1): Directory bread(block 69) failed [ 470.322231][ T8909] FAT-fs (loop1): Directory bread(block 70) failed [ 470.329329][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 470.335473][ T8909] FAT-fs (loop1): Directory bread(block 71) failed [ 470.355275][ T8909] FAT-fs (loop1): Directory bread(block 72) failed [ 470.363588][ T8909] FAT-fs (loop1): Directory bread(block 73) failed [ 470.649351][ T14] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 470.672943][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.698044][ T8922] loop4: detected capacity change from 0 to 128 [ 470.705946][ T14] usb 3-1: Product: syz [ 470.737545][ T14] usb 3-1: Manufacturer: syz [ 470.751180][ T14] usb 3-1: SerialNumber: syz [ 470.777713][ T14] usb 3-1: config 0 descriptor?? [ 471.020398][ T14] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 471.832303][ T6971] udevd[6971]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 471.862146][ T14] usb 3-1: USB disconnect, device number 20 [ 472.691862][ T8944] nfs: Unknown parameter 'no' [ 475.188270][ T8962] loop4: detected capacity change from 0 to 512 [ 475.318898][ T8962] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 475.344586][ T8962] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038 (0x7fffffff) [ 475.665374][ T7288] EXT4-fs (loop4): unmounting filesystem. [ 475.735874][ T8973] loop1: detected capacity change from 0 to 128 [ 476.839167][ T3687] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 477.099156][ T3687] usb 1-1: Using ep0 maxpacket: 16 [ 477.352555][ T8995] loop1: detected capacity change from 0 to 256 [ 477.366598][ T8995] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ18446744073709551615ÿ0x0000000000000000' [ 477.429516][ T3687] usb 1-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 477.446613][ T3687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.485885][ T9001] loop3: detected capacity change from 0 to 128 [ 477.489067][ T3687] usb 1-1: Product: syz [ 477.509141][ T3687] usb 1-1: Manufacturer: syz [ 477.513791][ T3687] usb 1-1: SerialNumber: syz [ 477.523964][ T9006] nfs: Unknown parameter 'no' [ 477.557118][ T3687] usb 1-1: config 0 descriptor?? [ 477.760389][ T8995] loop1: detected capacity change from 0 to 512 [ 477.791707][ T3687] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 477.816162][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 477.816188][ T26] audit: type=1326 audit(1856684827.453:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8974 comm="syz.0.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40537773b9 code=0x7ffc0000 [ 477.819328][ T8995] loop1: detected capacity change from 0 to 512 [ 477.833268][ T26] audit: type=1326 audit(1856684827.463:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8974 comm="syz.0.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40537773b9 code=0x7ffc0000 [ 478.654156][ T8995] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 478.657435][ T3687] usb 1-1: USB disconnect, device number 23 [ 478.678407][ T26] audit: type=1326 audit(1856684827.463:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8974 comm="syz.0.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=176 compat=0 ip=0x7f40537773b9 code=0x7ffc0000 [ 478.702764][ T26] audit: type=1326 audit(1856684827.463:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8974 comm="syz.0.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40537773b9 code=0x7ffc0000 [ 478.709828][ T9020] loop4: detected capacity change from 0 to 256 [ 478.725139][ T26] audit: type=1326 audit(1856684827.463:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8974 comm="syz.0.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40537773b9 code=0x7ffc0000 [ 478.910946][ T6971] udevd[6971]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 479.169385][ T9034] loop3: detected capacity change from 0 to 256 [ 479.195927][ T6921] EXT4-fs (loop1): unmounting filesystem. [ 479.385941][ T9034] FAT-fs (loop3): Directory bread(block 64) failed [ 479.386018][ T9034] FAT-fs (loop3): Directory bread(block 65) failed [ 479.386216][ T9034] FAT-fs (loop3): Directory bread(block 66) failed [ 479.386284][ T9034] FAT-fs (loop3): Directory bread(block 67) failed [ 479.386482][ T9034] FAT-fs (loop3): Directory bread(block 68) failed [ 479.386551][ T9034] FAT-fs (loop3): Directory bread(block 69) failed [ 479.386728][ T9034] FAT-fs (loop3): Directory bread(block 70) failed [ 479.386791][ T9034] FAT-fs (loop3): Directory bread(block 71) failed [ 479.388529][ T9034] FAT-fs (loop3): Directory bread(block 72) failed [ 479.388607][ T9034] FAT-fs (loop3): Directory bread(block 73) failed [ 479.444774][ T9042] loop4: detected capacity change from 0 to 128 [ 480.642224][ T9035] Falling back ldisc for ttyS3. [ 480.859614][ T14] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 481.354883][ T14] usb 2-1: config 0 has an invalid interface number: 125 but max is 0 [ 482.116258][ T14] usb 2-1: config 0 has no interface number 0 [ 482.122696][ T14] usb 2-1: New USB device found, idVendor=0403, idProduct=bcd9, bcdDevice=94.33 [ 482.161241][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.184784][ T14] usb 2-1: config 0 descriptor?? [ 482.250611][ T14] ftdi_sio 2-1:0.125: FTDI USB Serial Device converter detected [ 482.260375][ T14] ftdi_sio ttyUSB0: unknown device type: 0x9433 [ 483.267184][ T9061] delete_channel: no stack [ 483.381977][ T8595] usb 2-1: USB disconnect, device number 13 [ 483.396784][ T8595] ftdi_sio 2-1:0.125: device disconnected [ 483.513812][ T9077] nfs: Unknown parameter 'no' [ 484.052485][ T9090] loop2: detected capacity change from 0 to 128 [ 484.121716][ T9094] tmpfs: Unknown parameter '' [ 485.148717][ T26] audit: type=1800 audit(1856684834.783:326): pid=9090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1396" name="bus" dev="loop2" ino=1048702 res=0 errno=0 [ 485.220204][ T9090] syz.2.1396: attempt to access beyond end of device [ 485.220204][ T9090] loop2: rw=2049, sector=153, nr_sectors = 88 limit=128 [ 485.697179][ T9113] loop1: detected capacity change from 0 to 256 [ 485.809861][ T9113] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ18446744073709551615ÿ0x0000000000000000' [ 485.874118][ T9113] loop1: detected capacity change from 0 to 512 [ 486.500898][ T9127] loop1: detected capacity change from 0 to 4096 [ 486.591003][ T11] kworker/u4:1: attempt to access beyond end of device [ 486.591003][ T11] loop2: rw=1, sector=145, nr_sectors = 8 limit=128 [ 486.604624][ T9138] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 486.748476][ T9142] nfs: Unknown parameter 'no' [ 486.939223][ T14] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 487.083745][ T9149] loop2: detected capacity change from 0 to 1024 [ 487.184648][ T6971] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 487.267204][ T9149] loop2: detected capacity change from 0 to 1024 [ 487.311641][ T9149] EXT4-fs: Ignoring removed i_version option [ 487.317723][ T9149] ext4: Bad value for 'max_batch_time' [ 487.329980][ T14] usb 4-1: config 0 has an invalid interface number: 125 but max is 0 [ 487.358573][ T14] usb 4-1: config 0 has no interface number 0 [ 487.396881][ T14] usb 4-1: New USB device found, idVendor=0403, idProduct=bcd9, bcdDevice=94.33 [ 487.427358][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.470386][ T14] usb 4-1: config 0 descriptor?? [ 487.510571][ T14] ftdi_sio 4-1:0.125: FTDI USB Serial Device converter detected [ 487.525006][ T14] ftdi_sio ttyUSB0: unknown device type: 0x9433 [ 487.549164][ T4992] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 487.649086][ T5362] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 487.750035][ T14] usb 4-1: USB disconnect, device number 17 [ 487.756960][ T14] ftdi_sio 4-1:0.125: device disconnected [ 487.889496][ T5362] usb 1-1: Using ep0 maxpacket: 8 [ 487.929626][ T4992] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.954979][ T4992] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 487.981610][ T4992] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 488.019501][ T5362] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.039421][ T4992] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 488.048717][ T5362] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 488.060226][ T4992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.081042][ T5362] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.107580][ T5362] usb 1-1: config 0 descriptor?? [ 488.119273][ T9160] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 488.138215][ T4992] hub 5-1:1.0: bad descriptor, ignoring hub [ 488.157100][ T4992] hub: probe of 5-1:1.0 failed with error -5 [ 488.164825][ T4992] cdc_wdm 5-1:1.0: skipping garbage [ 488.180400][ T4992] cdc_wdm 5-1:1.0: skipping garbage [ 488.220228][ T4992] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 488.239109][ T4992] cdc_wdm 5-1:1.0: Unknown control protocol [ 488.427476][ T4992] usb 1-1: USB disconnect, device number 24 [ 488.473140][ T9197] loop1: detected capacity change from 0 to 256 [ 488.892616][ T5367] usb 5-1: USB disconnect, device number 9 [ 488.899445][ T9160] cdc_wdm 5-1:1.0: Error autopm - -16 [ 489.109067][ T5367] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 489.388070][ T5367] usb 5-1: Using ep0 maxpacket: 8 [ 489.509298][ T5367] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 489.525247][ T5367] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 489.561643][ T5367] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 489.619806][ T5367] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 489.669696][ T5367] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 489.678819][ T5367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.780582][ T5367] hub 5-1:1.0: bad descriptor, ignoring hub [ 489.796741][ T5367] hub: probe of 5-1:1.0 failed with error -5 [ 489.824851][ T5367] cdc_wdm 5-1:1.0: skipping garbage [ 489.839264][ T5367] cdc_wdm 5-1:1.0: skipping garbage [ 489.847354][ T5367] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 489.854281][ T9251] loop1: detected capacity change from 0 to 256 [ 489.864694][ T5367] cdc_wdm 5-1:1.0: Unknown control protocol [ 490.179358][ T5367] usb 5-1: USB disconnect, device number 10 [ 491.565452][ T9280] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 492.927877][ T9320] bridge_slave_0: default FDB implementation only supports local addresses [ 493.164029][ T9331] loop1: detected capacity change from 0 to 128 [ 493.275800][ T3687] kernel write not supported for file /snd/seq (pid: 3687 comm: kworker/0:6) [ 495.079186][ T26] audit: type=1800 audit(1856684844.693:327): pid=9347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1468" name="bus" dev="loop1" ino=1048707 res=0 errno=0 [ 495.411019][ T9357] loop4: detected capacity change from 0 to 512 [ 495.522685][ T9359] bridge_slave_0: default FDB implementation only supports local addresses [ 495.566104][ T9357] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 495.627129][ T9357] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038 (0x7fffffff) [ 495.695376][ T9357] EXT4-fs error (device loop4): ext4_get_first_dir_block:3540: inode #12: comm syz.4.1481: Directory hole found for htree leaf block [ 495.827655][ T9357] EXT4-fs (loop4): Remounting filesystem read-only [ 496.007816][ T9372] misc userio: Begin command sent, but we're already running [ 496.108817][ T7288] EXT4-fs (loop4): unmounting filesystem. [ 498.107859][ T9391] loop1: detected capacity change from 0 to 1024 [ 498.115189][ T9395] syz.3.1494[9395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 498.115311][ T9395] syz.3.1494[9395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 498.249136][ T4992] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 498.287046][ T9391] loop1: detected capacity change from 0 to 1024 [ 498.306954][ T9391] EXT4-fs: Ignoring removed i_version option [ 498.337575][ T9391] ext4: Bad value for 'max_batch_time' [ 498.519318][ T4992] usb 1-1: Using ep0 maxpacket: 32 [ 498.639835][ T4992] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 498.658013][ T4992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.691415][ T4992] usb 1-1: config 0 descriptor?? [ 498.734605][ T9411] loop2: detected capacity change from 0 to 1024 [ 498.744454][ T4992] gspca_main: sunplus-2.14.0 probing 041e:400b [ 498.797663][ T9411] [ 498.800042][ T9411] ====================================================== [ 498.807105][ T9411] WARNING: possible circular locking dependency detected [ 498.814148][ T9411] 6.1.102-syzkaller #0 Not tainted [ 498.819282][ T9411] ------------------------------------------------------ [ 498.826322][ T9411] syz.2.1500/9411 is trying to acquire lock: [ 498.832319][ T9411] ffff888052fedf88 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_extend+0x1d2/0x1b10 [ 498.843434][ T9411] [ 498.843434][ T9411] but task is already holding lock: [ 498.850819][ T9411] ffff888021a220b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x146/0x1c0 [ 498.860332][ T9411] [ 498.860332][ T9411] which lock already depends on the new lock. [ 498.860332][ T9411] [ 498.870732][ T9411] [ 498.870732][ T9411] the existing dependency chain (in reverse order) is: [ 498.879742][ T9411] [ 498.879742][ T9411] -> #1 (&tree->tree_lock){+.+.}-{3:3}: [ 498.887481][ T9411] lock_acquire+0x1f8/0x5a0 [ 498.892542][ T9411] __mutex_lock+0x132/0xd80 [ 498.897581][ T9411] hfsplus_file_truncate+0x80d/0xb40 [ 498.903432][ T9411] hfsplus_delete_inode+0x170/0x220 [ 498.909172][ T9411] hfsplus_unlink+0x50d/0x7f0 [ 498.914375][ T9411] vfs_unlink+0x359/0x5f0 [ 498.919230][ T9411] do_unlinkat+0x4a5/0x820 [ 498.924175][ T9411] __x64_sys_unlink+0x45/0x50 [ 498.929381][ T9411] do_syscall_64+0x3b/0xb0 [ 498.934329][ T9411] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 498.940767][ T9411] [ 498.940767][ T9411] -> #0 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}: [ 498.949819][ T9411] validate_chain+0x1661/0x5950 [ 498.955225][ T9411] __lock_acquire+0x125b/0x1f80 [ 498.960603][ T9411] lock_acquire+0x1f8/0x5a0 [ 498.965649][ T9411] __mutex_lock+0x132/0xd80 [ 498.970711][ T9411] hfsplus_file_extend+0x1d2/0x1b10 [ 498.976454][ T9411] hfsplus_bmap_reserve+0x101/0x4e0 [ 498.982190][ T9411] hfsplus_create_cat+0x1a9/0x1ba0 [ 498.987834][ T9411] hfsplus_fill_super+0x13e6/0x1c90 [ 498.993557][ T9411] mount_bdev+0x2c9/0x3f0 [ 498.998435][ T9411] legacy_get_tree+0xeb/0x180 [ 499.003650][ T9411] vfs_get_tree+0x88/0x270 [ 499.008596][ T9411] do_new_mount+0x2ba/0xb40 [ 499.013622][ T9411] __se_sys_mount+0x2d5/0x3c0 [ 499.018824][ T9411] do_syscall_64+0x3b/0xb0 [ 499.023772][ T9411] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 499.030198][ T9411] [ 499.030198][ T9411] other info that might help us debug this: [ 499.030198][ T9411] [ 499.040425][ T9411] Possible unsafe locking scenario: [ 499.040425][ T9411] [ 499.047868][ T9411] CPU0 CPU1 [ 499.053232][ T9411] ---- ---- [ 499.058590][ T9411] lock(&tree->tree_lock); [ 499.063095][ T9411] lock(&HFSPLUS_I(inode)->extents_lock); [ 499.071423][ T9411] lock(&tree->tree_lock); [ 499.078446][ T9411] lock(&HFSPLUS_I(inode)->extents_lock); [ 499.084252][ T9411] [ 499.084252][ T9411] *** DEADLOCK *** [ 499.084252][ T9411] [ 499.092392][ T9411] 3 locks held by syz.2.1500/9411: [ 499.097508][ T9411] #0: ffff888079e5e0e0 (&type->s_umount_key#54/1){+.+.}-{3:3}, at: alloc_super+0x217/0x930 [ 499.107625][ T9411] #1: ffff8880146d3198 (&sbi->vh_mutex){+.+.}-{3:3}, at: hfsplus_fill_super+0x1378/0x1c90 [ 499.117640][ T9411] #2: ffff888021a220b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x146/0x1c0 [ 499.127663][ T9411] [ 499.127663][ T9411] stack backtrace: [ 499.133557][ T9411] CPU: 1 PID: 9411 Comm: syz.2.1500 Not tainted 6.1.102-syzkaller #0 [ 499.141628][ T9411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 499.151715][ T9411] Call Trace: [ 499.155013][ T9411] [ 499.157959][ T9411] dump_stack_lvl+0x1e3/0x2cb [ 499.162648][ T9411] ? nf_tcp_handle_invalid+0x642/0x642 [ 499.168118][ T9411] ? print_circular_bug+0x12b/0x1a0 [ 499.173317][ T9411] check_noncircular+0x2fa/0x3b0 [ 499.178258][ T9411] ? reacquire_held_locks+0x660/0x660 [ 499.183647][ T9411] ? add_chain_block+0x850/0x850 [ 499.188599][ T9411] ? lockdep_lock+0x11f/0x2a0 [ 499.193291][ T9411] ? __lock_acquire+0x125b/0x1f80 [ 499.198325][ T9411] ? _find_first_zero_bit+0xd0/0x100 [ 499.203620][ T9411] validate_chain+0x1661/0x5950 [ 499.208498][ T9411] ? reacquire_held_locks+0x660/0x660 [ 499.213891][ T9411] ? look_up_lock_class+0x77/0x140 [ 499.219007][ T9411] ? register_lock_class+0x100/0x990 [ 499.224302][ T9411] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 499.230295][ T9411] ? is_dynamic_key+0x260/0x260 [ 499.235157][ T9411] ? mark_lock+0x9a/0x340 [ 499.239506][ T9411] __lock_acquire+0x125b/0x1f80 [ 499.244374][ T9411] lock_acquire+0x1f8/0x5a0 [ 499.248883][ T9411] ? hfsplus_file_extend+0x1d2/0x1b10 [ 499.254261][ T9411] ? read_lock_is_recursive+0x10/0x10 [ 499.259644][ T9411] ? __might_sleep+0xb0/0xb0 [ 499.264233][ T9411] ? mark_lock+0x9a/0x340 [ 499.268574][ T9411] __mutex_lock+0x132/0xd80 [ 499.273085][ T9411] ? hfsplus_file_extend+0x1d2/0x1b10 [ 499.278464][ T9411] ? rcu_is_watching+0x11/0xb0 [ 499.283230][ T9411] ? hfsplus_file_extend+0x1d2/0x1b10 [ 499.288609][ T9411] ? mutex_lock_nested+0x10/0x10 [ 499.293567][ T9411] hfsplus_file_extend+0x1d2/0x1b10 [ 499.298775][ T9411] ? __might_sleep+0xb0/0xb0 [ 499.303366][ T9411] ? trace_raw_output_contention_end+0xd0/0xd0 [ 499.309528][ T9411] ? hfsplus_get_block+0x14e0/0x14e0 [ 499.314817][ T9411] ? trace_contention_end+0x61/0x170 [ 499.320105][ T9411] ? __mutex_lock+0x2f7/0xd80 [ 499.324797][ T9411] ? hfsplus_find_init+0x146/0x1c0 [ 499.329929][ T9411] ? mutex_lock_nested+0x10/0x10 [ 499.334879][ T9411] hfsplus_bmap_reserve+0x101/0x4e0 [ 499.340089][ T9411] hfsplus_create_cat+0x1a9/0x1ba0 [ 499.345209][ T9411] ? look_up_lock_class+0x77/0x140 [ 499.350324][ T9411] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 499.355788][ T9411] ? hfsplus_find_cat+0x5c0/0x5c0 [ 499.360830][ T9411] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 499.366750][ T9411] ? do_raw_spin_unlock+0x137/0x8a0 [ 499.371950][ T9411] ? _raw_spin_unlock+0x24/0x40 [ 499.376818][ T9411] ? hfsplus_new_inode+0x5c9/0x740 [ 499.381948][ T9411] hfsplus_fill_super+0x13e6/0x1c90 [ 499.387158][ T9411] ? hfsplus_mount+0x40/0x40 [ 499.391783][ T9411] ? snprintf+0xd6/0x120 [ 499.396030][ T9411] ? vscnprintf+0x80/0x80 [ 499.400365][ T9411] ? set_blocksize+0x1c6/0x350 [ 499.405134][ T9411] mount_bdev+0x2c9/0x3f0 [ 499.409476][ T9411] ? hfsplus_mount+0x40/0x40 [ 499.414068][ T9411] legacy_get_tree+0xeb/0x180 [ 499.418754][ T9411] ? hfsplus_mark_mdb_dirty+0x1b0/0x1b0 [ 499.424307][ T9411] vfs_get_tree+0x88/0x270 [ 499.428727][ T9411] do_new_mount+0x2ba/0xb40 [ 499.433240][ T9411] ? do_move_mount_old+0x160/0x160 [ 499.438365][ T9411] __se_sys_mount+0x2d5/0x3c0 [ 499.443049][ T9411] ? __x64_sys_mount+0xc0/0xc0 [ 499.447819][ T9411] ? syscall_enter_from_user_mode+0x2e/0x230 [ 499.453811][ T9411] ? lockdep_hardirqs_on+0x94/0x130 [ 499.459011][ T9411] ? __x64_sys_mount+0x1c/0xc0 [ 499.463782][ T9411] do_syscall_64+0x3b/0xb0 [ 499.468239][ T9411] ? clear_bhb_loop+0x45/0xa0 [ 499.472924][ T9411] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 499.478822][ T9411] RIP: 0033:0x7f20c4378aba [ 499.483244][ T9411] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 7e 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.502849][ T9411] RSP: 002b:00007f20c51e5e78 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 499.511266][ T9411] RAX: ffffffffffffffda RBX: 00007f20c51e5f00 RCX: 00007f20c4378aba [ 499.519250][ T9411] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007f20c51e5ec0 [ 499.527218][ T9411] RBP: 0000000020000000 R08: 00007f20c51e5f00 R09: 0000000002000010 [ 499.535193][ T9411] R10: 0000000002000010 R11: 0000000000000202 R12: 0000000020000080 [ 499.543172][ T9411] R13: 00007f20c51e5ec0 R14: 00000000000006a6 R15: 0000000020000100 [ 499.551189][ T9411] [ 499.619084][ T4992] gspca_sunplus: reg_w_riv err -110 [ 499.624523][ T4992] sunplus: probe of 1-1:0.0 failed with error -110 [ 499.685292][ T9411] hfsplus: xattr searching failed [ 499.710512][ T9411] hfsplus: xattr searching failed [ 499.790722][ T26] audit: type=1326 audit(1856684849.433:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9409 comm="syz.2.1500" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20c43773b9 code=0x0 [ 499.815634][ T9408] netlink: 'syz.4.1499': attribute type 10 has an invalid length. [ 499.823993][ T9408] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1499'. [ 500.064516][ T6478] hfsplus: b-tree write err: -5, ino 3 [ 500.636533][ T8595] usb 1-1: USB disconnect, device number 25 [ 501.390208][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.396558][ T1270] ieee802154 phy1 wpan1: encryption failed: -22