last executing test programs: 6.141807522s ago: executing program 1 (id=817): socket$netlink(0x10, 0x3, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$usbfs(r0, 0x0, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000000)=""/198, 0xc6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r1, 0x4, 0x0) r2 = dup(r1) copy_file_range(r1, 0x0, r2, &(0x7f0000000640)=0xd000, 0xd000, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x8000, 0x0, 0x0, 0x0, {{0x20, 0x4, 0x1, 0x9, 0x80, 0x66, 0x0, 0x0, 0x29, 0x0, @broadcast, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x11}, 0xe}]}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0xd, [{@local, 0xffffffff}]}, @cipso={0x86, 0x3c, 0xffffffffffffffff, [{0x6, 0x2}, {0x0, 0x12, "b4d3cff7b9de5df81322d749b62850b9"}, {0x1, 0x6, "cc90c2c9"}, {0x5, 0xd, "1a83df0c1354cd9d8209ce"}, {0x0, 0xa, "07afbfd6c5216e98"}, {0x6, 0x5, "e528b9"}]}, @timestamp_prespec={0x44, 0xc, 0x4f, 0x3, 0x0, [{@remote, 0x7}]}, @ssrr={0x89, 0xb, 0xf5, [@multicast2, @rand_addr=0x64010100]}]}}}}}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_emit_ethernet(0x36, &(0x7f0000000180)={@link_local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private=0xa010102}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[], 0x240) 5.815235089s ago: executing program 1 (id=821): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) sendmsg$kcm(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000140)="04", 0x1}], 0x1}, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0x1}], 0x1, 0x4000001, 0x0) sendfile(r0, r1, 0x0, 0x7) 5.733679355s ago: executing program 1 (id=822): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa}]}}}]}, 0x48}}, 0x0) 5.601578996s ago: executing program 1 (id=824): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) 5.485175376s ago: executing program 1 (id=826): creat(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) 5.327831089s ago: executing program 1 (id=827): r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) move_pages(r1, 0x20000000000000e9, &(0x7f0000000740)=[&(0x7f00007c7000/0x3000)=nil], 0x0, &(0x7f0000000780), 0x0) 4.750570807s ago: executing program 3 (id=831): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000010000304000000000400000000007c00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000010000b0500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800c0001006d6163766c616e00240002800800010010000000100005800a000400aaaaaaaaaaaa0000080003000300000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @rand_addr, @multicast1}, &(0x7f0000000200)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl1\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x1, 0x7800, 0x6f4, 0x0, {{0x42, 0x4, 0x0, 0x0, 0x108, 0x66, 0x0, 0x6f, 0x0, 0x0, @local, @rand_addr=0x64010102, {[@lsrr={0x83, 0x1b, 0x0, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x3c, 0x9c, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}, {@private}, {@private=0xa010101, 0x434}, {@rand_addr=0x64010102, 0x14}, {@loopback}, {@empty, 0xfffffff9}]}, @timestamp={0x44, 0x10, 0x8f, 0x0, 0x3, [0x1, 0x0, 0x80000000]}, @timestamp_addr={0x44, 0x24, 0x31, 0x1, 0xa, [{@remote}, {@empty, 0x7ff}, {@loopback, 0x5}, {@broadcast, 0x2}]}, @timestamp_addr={0x44, 0x3c, 0xb5, 0x1, 0x4, [{@private=0xa010101, 0xffff}, {@local, 0x1}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x901}, {@local, 0x4}, {@loopback, 0x8}, {@multicast2, 0x7fe000}, {@broadcast, 0x1}]}, @ssrr={0x89, 0x1f, 0xd2, [@loopback, @dev={0xac, 0x14, 0x14, 0xe}, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1, @broadcast, @rand_addr=0x64010100, @local]}, @noop, @noop, @rr={0x7, 0xb, 0xf7, [@multicast2, @rand_addr=0x64010100]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000c40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80800008}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a80)={0x13c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4810}, 0x0) ioctl$HCIINQUIRY(r4, 0x800448d4, &(0x7f0000000040)={0x0, 0x2, "61b6c2"}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) r14 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r14, &(0x7f0000000180)=ANY=[@ANYBLOB="0c00000001"], 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r14, 0xc0206434, &(0x7f0000000080)={0xf8, 0x0, 0x10003}) setsockopt$packet_rx_ring(r14, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x0, 0x3, 0xffff, 0x1, 0x31, 0x1ff, 0x2}, 0x1c) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r13, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b6"], 0x398}}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)={0x54, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x6, {'gcm(aes)\x00', 0x14, "e3de7d87737919f3bf4e1581cbe1995db14caae2"}}]}]}, 0x54}}, 0x0) 3.74556628s ago: executing program 4 (id=832): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000300)='hrtimer_expire_entry\x00', r0}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r2 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xffffffff, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x2, 0x0, 0x4, r2, 0x0, 0x0, 'syz1\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x18, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa6}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x24}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000080)='.\x00', 0xa50602, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x0, 0x80b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) 3.459715494s ago: executing program 4 (id=836): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) 3.25827309s ago: executing program 4 (id=839): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 3.049605138s ago: executing program 4 (id=841): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b0001010000000904000012020a0000052406000005240000000d240f01000000000000000000090582020002000000090503020002"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.880390912s ago: executing program 3 (id=842): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000140)={0x2, 0x0, 0x4}) 2.599137305s ago: executing program 3 (id=844): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x60, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x5, "03c0ab"}, @window={0x3, 0x3}, @mss={0x1e, 0x4, 0x25}, @sack_perm={0x4, 0x2}, @generic={0x0, 0xa, "8bfbd54ae56dd076"}, @timestamp={0x8, 0xa}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "7232407c80067615774fdbb46eb86cc8"}, @generic={0x0, 0xa, "111fad2ea7434823"}, @exp_fastopen={0xfe, 0x9, 0xf989, "b43eb61a1a"}]}}}}}}}}, 0x0) 2.42235022s ago: executing program 3 (id=845): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00'}) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x4, 0x0, 0x0) 2.281696781s ago: executing program 3 (id=847): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x4, 0x590, [0x200001c0, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000190000000a00000000156e727000000000000000000000000000626f6e643000000000000000000000007465616d5f736c6176655f310000000062637366300000000000000000000000ffffffffffffffff00ffffff0180c2000000ffffffffff650000e000000050010000880100007374700000000000000000000000000000000000000000000000000000000000480000000000000002000000020000000000ffffffffffffffffffbc00000000000000003b0a000002000900efb5b7059b3fffffdfff00004e234e21040071ac0600ff7f3828030005005b060000f4f200000000000000000000000000000000000000000000000000000000000000001000000000000000d1f9c15dee9e0000ffffffff000000006172707265706c7900000000dc000000000000000000000000000000000000001000000000000e00aaaaaaaaaa0f0000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa1a0000feffffff00000000030000004000000000117465616d3000000000000000000000006772657461703000000000000000000076657468315f746f5f626f6e64000000626f6e6430000000000000000000000052a1927247eaffff470000006a72dd4b319d0000ffffffff0000e8000000500100008801000069703600000000000000000000000000000000000000000000000000000000005000000000000000fe8000000000000000000000000000bbfe8000000000000000000000e7ff00aa000000ff00000000ffffffff00000000ffffffffff000000ffffffff00000000093b14044e204e234e214e24000000006172707265706c7900000000000000000000000000000000000000000000000010000000000000000180c20000010000feffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000fcffffff00000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff02000000090000004a00000000020000000000000000000000000000000073797a5f747581000000000000000000626f6e6430000000000000000000000069705f767469300000000000000000009f7f83bddffa0000ffffffffffffffffffffff0000ffffff0000c0000000c00000000801000068656c70657200000000000000000004000000000000000000000000000000002800000000000000010000006674702d32303030300000000000000000000000000000000000000000000000000000004552524f520000000000000000000000000000000000000000000000000000002000000000000000c3331f141f48b36a6e8a93c4f2796fab65c75e2fdab6f98342ae6b68a6b900000500000002000000e90d69705f76746930000000000000000000627269646765300000000000000000006966623000000000000000000000000076657468305f746f5f626f6e64000000aaaaaaaaaa11ff0000ffffffffffffffffffffff00ffffff0000b0000000b0000000e800000071756f7461000000000000000000000000000000000000000000000000000000180000000000000000000000307b0000010000000000000007000000000000006172707265706c790008000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000feffffff0000adcc"]}, 0x608) 2.161087801s ago: executing program 3 (id=849): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x2010880, &(0x7f0000000480)=ANY=[@ANYBLOB='discard=0x0000000000000001,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d757466382c696e746567726974792c75737271756f74612c75737271756f74612c6e6f64697363617264006e6f646973636172642c756d61736b3d3078376666666666666666666666666b3d3078303030303030303030303030303030352c696f636861727365743d63703835372c696f636861727365743d6b6f69382d72752c6e6f696e746567726974792c646973636172642c0013f050947404e271e52c93e96c1d09fb1f75970f531614cfee15bd3aa2ff93bdd1e364317ee33f425708830000000000000000"], 0x9, 0x61c2, &(0x7f0000012d80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000240)=""/240, 0xf0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) connect$unix(r1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0x0, @fixed}}}, 0xe) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x890b, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) epoll_create(0x10003) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d8000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) 2.160462921s ago: executing program 0 (id=850): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES8]) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file0\x00'}) sendto$inet6(r3, &(0x7f0000000200)="fe", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) 1.745539286s ago: executing program 2 (id=854): r0 = io_uring_setup(0x1895, &(0x7f00000002c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r5 = dup(r4) fallocate(r4, 0x0, 0x0, 0x8) copy_file_range(r4, 0x0, r5, 0x0, 0x3ff, 0x0) accept4$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x4000010, r0, 0x5a765000) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x44}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x6) r8 = socket(0x840000000002, 0x3, 0x100) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000001c00000bea8bc10003000000010000000000000f0100000000200000000000000f03000000eb8730006100"], &(0x7f0000000100)=""/212, 0x37, 0xd4, 0xa}, 0x20) sendmmsg$inet(r8, &(0x7f0000005240), 0x264e33, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8}]}}]}, 0x50}}, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.589179649s ago: executing program 2 (id=855): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000f40)=ANY=[], 0x1, 0xec6, &(0x7f0000003d40)="$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") fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) mknodat$null(0xffffffffffffffff, 0x0, 0x0, 0x103) 1.257195016s ago: executing program 0 (id=856): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x400454a4, 0x0) 1.133626047s ago: executing program 0 (id=857): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00'}) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x4, 0x0, 0x0) 1.106358009s ago: executing program 2 (id=858): socket$inet(0xa, 0x801, 0x84) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = open(&(0x7f0000000480)='./bus\x00', 0x18d102, 0x106) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000004c0)=@v2={0x2, @aes256, 0x0, '\x00', @auto="55ea97bb746eacc239d858193b1f2262"}) chdir(&(0x7f0000000300)='./bus\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000003, 0x13, r2, 0x277a3000) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = dup(r3) connect$inet(r4, &(0x7f0000000040)={0x27, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x60) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000140)={0x0, 0x2, 0x4}) 1.066861782s ago: executing program 0 (id=859): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x4, 0x590, [0x200001c0, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]}, 0x608) 966.879321ms ago: executing program 0 (id=860): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4\x1c\xc0\xf9\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6\x02\x00\x00\x00A\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b0\xc3\x93;\xcc\x14\x02\xc4\xfd{\xbb-\x80\xbf\xab\xbf\xd2\xd3\xe0Cf\xb7\x7f\x93X\'\xf5/\xf9cY\x828\xa2\x00_\xb0#w\xae\xb8L\xeb\xa1\xecF\xbd\xf0\x90$s\xd8\x80\x1a\xc4\xe5=_b\x99\xf9\x84(\xcb,Y\xe6\xf0\x13\x15J\x9f,\xa5\xf2.A\xbfbS\x94\xe7\x055\xa0\xeb\x10\x9d\xca\xa6k:\x86\n\x1e\xf4\xc9no\xee\x8b\xb0ciB\x82\t9*\a\x88\xfe\xca\xcb\xe2GG\xa9;q\x0f\xb4\xfa\x8e\v\xf7\xc7\x86Jw\xacD\xd7\xfb\xa0\x96\x85u\xddDv\x9c\x8b\xab\xe3F\x1d\xd2C\xdc\x1f\x80', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r3, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000080)=""/152) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 762.704807ms ago: executing program 2 (id=861): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @local, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1}, 0x1c) 217.519582ms ago: executing program 2 (id=862): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 170.884677ms ago: executing program 4 (id=863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0xd}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}}, 0x0) 100.398702ms ago: executing program 2 (id=864): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000140)={[{@shortname_mixed}, {@fat=@sys_immutable}, {@fat=@nfs}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@rodir}, {@shortname_win95}, {@fat=@nocase}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@shortname_lower}, {@shortname_win95}, {@utf8no}, {@fat=@discard}, {@shortname_lower}, {@uni_xlateno}]}, 0x3, 0x350, &(0x7f0000000580)="$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") r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x125f, 0x0) 448.661µs ago: executing program 0 (id=865): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x40000) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f00000002c0)) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000300)={@ipv4={""/10, ""/2, @empty}, 0x0}, &(0x7f0000000500)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8, 0x1e, 0x400}]}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r6}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1}]}, &(0x7f0000000140)='syzkaller\x00'}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r7}, 0x20) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMBIC(r9, 0x5417, &(0x7f0000000000)=0x1ff) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r10, 0x890b, &(0x7f0000003a80)={0x0, {0x2, 0x4e24}, {0x2, 0x4e20, @local}, {0x2, 0x4e24, @private=0xa010101}, 0x91d1a35871ddc624, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='xfrm0\x00', 0x76, 0xfffffffffffffff7, 0x2}) r11 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000580)={'bond_slave_1\x00', 0x0}) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r7, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000840), &(0x7f0000000900), 0x8, 0xf3, 0x8, 0x8, &(0x7f0000003b00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0xa, &(0x7f00000000c0)=@raw=[@exit, @jmp={0x5, 0x1, 0x0, 0x0, 0x9, 0xffffffffffffffc0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0xb8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6a, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x6, 0xb3, &(0x7f00000001c0)=""/179, 0x41000, 0x10, '\x00', r12, 0x30, r13, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x3, 0x7, 0x2, 0x8}, 0x10, r14, r7, 0x0, 0x0, 0x0, 0x10, 0xdf9f}, 0x90) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'tunl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x7800, 0x8000, 0x479ea899, 0x6, {{0x11, 0x4, 0x3, 0x1f, 0x44, 0x67, 0x0, 0x20, 0x2f, 0x0, @broadcast, @broadcast, {[@ssrr={0x89, 0x2b, 0xb5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @empty, @private=0xa010101, @local, @loopback, @private=0xa010102, @broadcast, @multicast1]}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@ipv6_getnexthop={0x0, 0x6a, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NHA_OIF={0x0, 0x5, r2}, @NHA_FDB, @NHA_OIF={0x0, 0x5, r12}, @NHA_FDB, @NHA_OIF, @NHA_OIF, @NHA_OIF, @NHA_OIF]}, 0x24}}, 0x0) r15 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r15, @ANYBLOB="000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x90) 0s ago: executing program 4 (id=866): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x20, r4, 0x101, 0x0, 0x0, {{0x19}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x20}}, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000480)={0xfffffdfc, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @mcast2}}}, 0x108) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, &(0x7f0000000300)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x3, 0x0, 0x0, 0x1, 0x8010001}}) r7 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$sock_int(r2, 0x1, 0x3428491fbc4868d1, &(0x7f0000000380)=0x100, 0x4) writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b45602117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) sendmsg$NFT_MSG_GETOBJ_RESET(r7, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x104, 0x15, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_USERDATA={0xd8, 0x8, "e94616e346909a0ebd54a503740b27dc4c11bfbc2876a36cc5bff0633d8accf2e09ce1fe8dc859211d34fa467235b79434986163454bb4a69b8f85d9a4782570e3f52c5f052af086267c84df9b271ac4136b88649c305b5475bec2a61ab1d5f7a2d208c1d49d76238f8d1cd9d7975847f7bc531baaa90122a91630e9db6a6d8dab38d20a16b8c9a236c26133bc83bcc9138ad0910c22e609a73f2c3ee1f901a5736cb3bcfc240e149bce90f2bd3f3e4a2214938d6d746eb3876754bea6383620da13c829ffd57a04e724c1bccc697e4974599033"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000800) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r10 = dup(r9) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@version_u}]}}) write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r10, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_DIRENTPLUS(r10, &(0x7f00000007c0)=ANY=[@ANYBLOB="b0"], 0x1b0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}}) lchown(&(0x7f0000000000)='./file0\x00', 0xee00, 0x0) kernel console output (not intermixed with test programs): nimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 99.069588][ T4484] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 15: comm syz.4.241: path /10/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 99.098529][ T4484] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 17: comm syz.4.241: path /10/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 99.133508][ T4484] EXT4-fs error (device loop4): ext4_map_blocks:601: inode #2: block 18: comm syz.4.241: lblock 23 mapped to illegal pblock 18 (length 1) [ 99.285142][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.303652][ T7] usb 2-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 99.313796][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.343996][ T7] usb 2-1: config 0 descriptor?? [ 99.450263][ T7] usb 2-1: bad CDC descriptors [ 99.461370][ T7] usb 2-1: bad CDC descriptors [ 99.526861][ T4508] netlink: 20 bytes leftover after parsing attributes in process `syz.0.253'. [ 99.666538][ T13] usb 2-1: USB disconnect, device number 6 [ 99.912914][ T4524] loop2: detected capacity change from 0 to 2048 [ 99.984311][ T4524] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.214467][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.095485][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.129467][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 101.164122][ T4547] loop2: detected capacity change from 0 to 41 [ 101.237308][ T4549] loop3: detected capacity change from 0 to 128 [ 101.278678][ T4547] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 101.312317][ T4547] NILFS (loop2): total number of segment blocks 1008 exceeds device size (20 blocks) [ 101.360442][ T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.379928][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.419994][ T7] usb 1-1: Product: syz [ 101.424195][ T7] usb 1-1: Manufacturer: syz [ 101.458205][ T7] usb 1-1: SerialNumber: syz [ 101.540097][ T7] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 101.564569][ T7] cdc_ncm 1-1:1.0: bind() failure [ 101.696684][ T4562] 9pnet: Insufficient options for proto=fd [ 102.004936][ T3505] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 102.302898][ T4567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.275'. [ 102.315426][ T4014] vhci_hcd: vhci_device speed not set [ 102.346705][ T4558] loop4: detected capacity change from 0 to 32768 [ 102.379614][ T3505] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.392292][ T3505] usb 3-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 102.402092][ T3505] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.429345][ T3505] usb 3-1: config 0 descriptor?? [ 102.491283][ T3505] usb 3-1: bad CDC descriptors [ 102.523479][ T3505] usb 3-1: bad CDC descriptors [ 102.708511][ T7] usb 3-1: USB disconnect, device number 6 [ 102.821775][ T4570] sctp: failed to load transform for md5: -4 [ 103.701240][ T4602] netlink: 16 bytes leftover after parsing attributes in process `syz.4.286'. [ 104.719610][ T4604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.287'. [ 104.742382][ T7] usb 1-1: USB disconnect, device number 3 [ 104.805353][ T4612] loop1: detected capacity change from 0 to 512 [ 104.999157][ T4612] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.047516][ T4612] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038 (0x7fffffff) [ 105.125919][ T4612] EXT4-fs error (device loop1): ext4_do_update_inode:5160: inode #2: comm syz.1.291: corrupted inode contents [ 105.145236][ T4612] EXT4-fs error (device loop1): ext4_dirty_inode:5993: inode #2: comm syz.1.291: mark_inode_dirty error [ 105.156230][ T4612] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3880: comm syz.1.291: Allocating blocks 18-19 which overlap fs metadata [ 105.166266][ T4612] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz.1.291: path /75/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 105.185372][ T4612] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz.1.291: path /75/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 105.195406][ T4612] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz.1.291: path /75/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 105.295512][ T4636] loop4: detected capacity change from 0 to 256 [ 105.375687][ T4636] exfat: Unknown parameter '' [ 105.393358][ T4612] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 14: comm syz.1.291: path /75/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 105.513878][ T4644] loop0: detected capacity change from 0 to 512 [ 105.530268][ T4636] loop4: detected capacity change from 0 to 2048 [ 105.565529][ T4612] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 15: comm syz.1.291: path /75/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 105.590294][ T4612] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 17: comm syz.1.291: path /75/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 105.650988][ T4644] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.299: Invalid inode bitmap blk 4 in block_group 0 [ 105.709674][ T4644] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,nobarrier,lazytime,,errors=continue. Quota mode: none. [ 105.794237][ T4625] loop3: detected capacity change from 0 to 32768 [ 105.874857][ T4625] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 105.883399][ T4625] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 105.974197][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 105.997120][ T4625] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 106.011304][ T7] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 106.027838][ T13] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 106.036092][ T13] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 106.052882][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 106.178669][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 106.198045][ T13] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 161ms [ 106.262980][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 106.271408][ T13] gfs2: fsid=syz:syz.0: jid=0: Done [ 106.278511][ T4625] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 106.293914][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 106.426760][ T4661] overlayfs: failed to resolve './file1': -2 [ 106.578099][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 106.637344][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 106.866003][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.965904][ T7] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 106.971499][ T4674] netlink: 'syz.0.309': attribute type 1 has an invalid length. [ 107.155016][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 107.168240][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.199374][ T7] usb 3-1: Product: syz [ 107.203579][ T7] usb 3-1: Manufacturer: syz [ 107.218790][ T7] usb 3-1: SerialNumber: syz [ 107.264588][ T4681] loop0: detected capacity change from 0 to 512 [ 107.275760][ T7] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 107.293952][ T7] cdc_ncm 3-1:1.0: bind() failure [ 107.324830][ T4681] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 107.336227][ T4681] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 108.671175][ T3545] usb 3-1: USB disconnect, device number 7 [ 108.743828][ T4707] netlink: 'syz.4.321': attribute type 1 has an invalid length. [ 109.027162][ T4676] loop1: detected capacity change from 0 to 32768 [ 109.105327][ T4676] XFS: ikeep mount option is deprecated. [ 109.121354][ T4676] XFS: ikeep mount option is deprecated. [ 109.418343][ T4721] loop3: detected capacity change from 0 to 40427 [ 109.421290][ T4676] XFS (loop1): Mounting V5 Filesystem [ 110.034616][ T4721] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 110.042478][ T4721] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 110.337206][ T4742] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 110.357707][ T4721] F2FS-fs (loop3): Found nat_bits in checkpoint [ 110.425417][ T4721] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 110.432496][ T4721] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 110.444759][ T4676] XFS (loop1): Ending clean mount [ 110.452579][ T4676] XFS (loop1): Quotacheck needed: Please wait. [ 110.524463][ T4745] netlink: 256 bytes leftover after parsing attributes in process `syz.3.328'. [ 110.712983][ T4676] XFS (loop1): Quotacheck: Done. [ 111.000974][ T3503] XFS (loop1): Unmounting Filesystem [ 111.088547][ T4753] loop4: detected capacity change from 0 to 41 [ 111.167499][ T4753] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 111.214616][ T4753] NILFS (loop4): total number of segment blocks 1008 exceeds device size (20 blocks) [ 111.279805][ T4761] loop0: detected capacity change from 0 to 512 [ 111.425591][ T4761] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.339: Invalid inode bitmap blk 4 in block_group 0 [ 111.469586][ T4761] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,nobarrier,lazytime,,errors=continue. Quota mode: none. [ 111.487662][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.645963][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 111.680394][ T4770] loop3: detected capacity change from 0 to 256 [ 111.702225][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 111.713826][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 111.723222][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 111.733875][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 111.743934][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 111.752394][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 111.800760][ T4773] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 111.892032][ T4777] netlink: 'syz.0.344': attribute type 1 has an invalid length. [ 112.336782][ T4783] loop0: detected capacity change from 0 to 40427 [ 112.394359][ T4783] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 112.402274][ T4783] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 112.424340][ T4783] F2FS-fs (loop0): Found nat_bits in checkpoint [ 112.474120][ T4783] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 112.481276][ T4783] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 112.570192][ T4796] netlink: 256 bytes leftover after parsing attributes in process `syz.0.347'. [ 112.902331][ T4807] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 112.993136][ T4810] netlink: 'syz.3.357': attribute type 1 has an invalid length. [ 113.270198][ T4775] loop4: detected capacity change from 0 to 32768 [ 113.324053][ T4816] loop2: detected capacity change from 0 to 8192 [ 113.325392][ T4775] XFS: ikeep mount option is deprecated. [ 113.341833][ T4775] XFS: ikeep mount option is deprecated. [ 113.385023][ T4816] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 113.392375][ T4775] XFS (loop4): Mounting V5 Filesystem [ 113.426623][ T4821] loop3: detected capacity change from 0 to 256 [ 113.442660][ T4816] REISERFS (device loop2): using ordered data mode [ 113.489213][ T4816] reiserfs: using flush barriers [ 113.573556][ T4816] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 113.581775][ T4775] XFS (loop4): Ending clean mount [ 113.596768][ T4816] REISERFS (device loop2): checking transaction log (loop2) [ 113.609195][ T4775] XFS (loop4): Quotacheck needed: Please wait. [ 113.684208][ T4775] XFS (loop4): Quotacheck: Done. [ 113.778879][ T4816] REISERFS (device loop2): Using r5 hash to sort names [ 113.811531][ T4834] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.849700][ T3913] XFS (loop4): Unmounting Filesystem [ 113.883518][ T4816] reiserfs: enabling write barrier flush mode [ 114.017464][ T4816] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 114.232029][ T1279] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 114.490751][ T4847] loop3: detected capacity change from 0 to 2048 [ 115.578136][ T4847] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 115.641168][ T4847] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a002e01c, mo2=0002] [ 115.649452][ T4847] System zones: 0-19 [ 115.660326][ T4847] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 115.685459][ T4859] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 115.694572][ T1279] usb 2-1: Using ep0 maxpacket: 8 [ 115.811341][ T4865] loop4: detected capacity change from 0 to 128 [ 116.085758][ T1279] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f4.a8 [ 116.107733][ T1279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.134010][ T1279] usb 2-1: Product: syz [ 116.134996][ T4870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 116.140310][ T1279] usb 2-1: Manufacturer: syz [ 116.168354][ T4872] openvswitch: netlink: IPv4 tunnel dst address is zero [ 116.186176][ T1279] usb 2-1: SerialNumber: syz [ 116.215436][ T1279] usb 2-1: config 0 descriptor?? [ 116.234803][ T4873] 9pnet: Insufficient options for proto=fd [ 116.313506][ T1279] comedi comedi0: Wrong number of endpoints [ 116.330899][ T1279] ni6501 2-1:0.0: driver 'ni6501' failed to auto-configure device. [ 116.480021][ T4881] overlayfs: unrecognized mount option "\" or missing value [ 116.567489][ T4877] loop3: detected capacity change from 0 to 8192 [ 116.576789][ T1279] usb 2-1: USB disconnect, device number 7 [ 116.682524][ T4877] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 116.723221][ T4877] REISERFS (device loop3): using ordered data mode [ 116.774562][ T4877] reiserfs: using flush barriers [ 116.822090][ T4877] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 116.903105][ T4877] REISERFS (device loop3): checking transaction log (loop3) [ 116.931964][ T4877] REISERFS (device loop3): Using r5 hash to sort names [ 117.004979][ T4877] reiserfs: enabling write barrier flush mode [ 117.054737][ T4877] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 117.122543][ T4893] netlink: 'syz.2.385': attribute type 2 has an invalid length. [ 117.469762][ T4902] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 117.546566][ T4905] openvswitch: netlink: IPv4 tunnel dst address is zero [ 117.738512][ T4916] overlayfs: unrecognized mount option "\" or missing value [ 117.761629][ T263] block nbd2: Attempted send on invalid socket [ 117.769137][ T263] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.790543][ T4914] (syz.2.394,4914,1):ocfs2_get_sector:1774 ERROR: status = -5 [ 117.802245][ T4914] (syz.2.394,4914,1):ocfs2_sb_probe:750 ERROR: status = -5 [ 117.817887][ T4914] (syz.2.394,4914,1):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 117.829066][ T4914] (syz.2.394,4914,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 117.937094][ T4922] loop4: detected capacity change from 0 to 64 [ 117.983854][ T4918] loop2: detected capacity change from 0 to 8192 [ 118.121151][ T4918] REISERFS warning (device loop2): super-6505 reiserfs_getopt: head of option "grpjquota" is only correct [ 118.121151][ T4918] [ 118.163643][ T4928] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 118.409910][ T4941] openvswitch: netlink: IPv4 tunnel dst address is zero [ 118.562296][ T4953] loop4: detected capacity change from 0 to 64 [ 118.806180][ T4958] overlayfs: unrecognized mount option "\" or missing value [ 118.867856][ T4960] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 119.372895][ T4948] loop2: detected capacity change from 0 to 32768 [ 119.420271][ T4948] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.406 (4948) [ 119.450797][ T4948] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 119.471727][ T4948] BTRFS info (device loop2): using free space tree [ 119.492864][ T4948] BTRFS info (device loop2): has skinny extents [ 119.712209][ T4948] BTRFS info (device loop2): enabling ssd optimizations [ 119.805927][ T4998] loop3: detected capacity change from 0 to 512 [ 119.896012][ T4998] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 119.917115][ T4998] ext4 filesystem being mounted at /81/bus supports timestamps until 2038 (0x7fffffff) [ 119.934056][ T5000] netlink: 'syz.4.418': attribute type 28 has an invalid length. [ 119.978707][ T5000] netlink: 160 bytes leftover after parsing attributes in process `syz.4.418'. [ 120.606914][ T5020] loop4: detected capacity change from 0 to 2048 [ 120.764120][ T5020] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 120.867745][ T5020] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a002e01c, mo2=0002] [ 120.876658][ T5020] System zones: 0-19 [ 120.901359][ T5020] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 121.602824][ T5032] loop3: detected capacity change from 0 to 4096 [ 122.596909][ T5038] loop1: detected capacity change from 0 to 131072 [ 123.154393][ C0] sched: RT throttling activated [ 123.230441][ T5038] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(1538) root(3) [ 123.238728][ T5038] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 123.270263][ T5038] F2FS-fs (loop1): invalid crc value [ 123.337274][ T5038] F2FS-fs (loop1): Mismatch valid blocks 1 vs. 33 [ 123.344343][ T5038] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 123.395159][ T5046] ntfs3: loop3: ino=21, "bus" fallocate(0x20) is not supported [ 123.493619][ T263] block nbd4: Attempted send on invalid socket [ 123.500487][ T263] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.515045][ T5056] (syz.4.432,5056,1):ocfs2_get_sector:1774 ERROR: status = -5 [ 123.545748][ T5056] (syz.4.432,5056,0):ocfs2_sb_probe:750 ERROR: status = -5 [ 123.553000][ T5056] (syz.4.432,5056,0):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 123.598824][ T5063] netlink: 'syz.2.434': attribute type 12 has an invalid length. [ 123.606834][ T5063] netlink: 132 bytes leftover after parsing attributes in process `syz.2.434'. [ 123.618265][ T5063] netlink: 132 bytes leftover after parsing attributes in process `syz.2.434'. [ 123.638876][ T5056] (syz.4.432,5056,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 123.849362][ T5060] loop4: detected capacity change from 0 to 8192 [ 123.909772][ T5069] loop3: detected capacity change from 0 to 256 [ 123.991705][ T5060] REISERFS warning (device loop4): super-6505 reiserfs_getopt: head of option "grpjquota" is only correct [ 123.991705][ T5060] [ 124.200121][ T5075] loop0: detected capacity change from 0 to 1024 [ 124.531661][ T5075] hfsplus: found bad thread record in catalog [ 124.852631][ T5090] loop4: detected capacity change from 0 to 256 [ 124.963100][ T5090] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 125.012526][ T3789] hfsplus: b-tree write err: -5, ino 4 [ 125.028824][ T5092] loop3: detected capacity change from 0 to 4096 [ 125.248657][ T5092] ntfs3: loop3: ino=21, "bus" fallocate(0x20) is not supported [ 125.322208][ T5098] loop0: detected capacity change from 0 to 512 [ 125.540253][ T5108] loop3: detected capacity change from 0 to 512 [ 125.601015][ T5098] EXT4-fs (loop0): Test dummy encryption mode enabled [ 125.616324][ T5098] EXT4-fs (loop0): Test dummy encryption mode enabled [ 125.623163][ T5098] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 125.648188][ T5098] EXT4-fs (loop0): 1 truncate cleaned up [ 125.667010][ T5108] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 125.699839][ T5098] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,test_dummy_encryption,noauto_da_alloc,minixdf,errors=remount-ro,quota,. Quota mode: writeback. [ 125.704627][ T5108] ext4 filesystem being mounted at /88/bus supports timestamps until 2038 (0x7fffffff) [ 125.779381][ T5098] EXT4-fs error (device loop0): ext4_search_dir:1548: inode #2: block 13: comm syz.0.450: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=0, size=1024 fake=0 [ 125.823828][ T5098] EXT4-fs (loop0): Remounting filesystem read-only [ 126.075674][ T5121] loop1: detected capacity change from 0 to 2048 [ 126.100520][ T5129] loop3: detected capacity change from 0 to 512 [ 126.123168][ T5121] EXT4-fs (loop1): Unrecognized mount option "context=root" or missing value [ 126.137857][ T5132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.461'. [ 126.179762][ T5129] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 126.206566][ T5129] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 126.230704][ T5129] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 126.250995][ T5129] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 126.299342][ T5129] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 126.335464][ T5129] EXT4-fs (loop3): orphan cleanup on readonly fs [ 126.410234][ T5129] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.459: bg 0: block 34: padding at end of block bitmap is not set [ 126.444894][ T5129] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.459: Invalid block bitmap block 0 in block_group 1 [ 126.469480][ T5129] Quota error (device loop3): write_blk: dquota write failed [ 126.493116][ T5129] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 126.506018][ T5129] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.459: Failed to acquire dquot type 1 [ 126.531841][ T5129] EXT4-fs (loop3): 1 truncate cleaned up [ 126.543559][ T5129] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,debug,nogrpid,noblock_validity,,errors=continue. Quota mode: writeback. [ 126.591880][ T5129] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 126.605506][ T5129] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 126.774294][ T5150] loop3: detected capacity change from 0 to 512 [ 126.839305][ T5150] EXT4-fs (loop3): Test dummy encryption mode enabled [ 126.854288][ T5150] EXT4-fs (loop3): Test dummy encryption mode enabled [ 126.891007][ T5150] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 126.931175][ T5150] EXT4-fs (loop3): 1 truncate cleaned up [ 126.940701][ T5150] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,test_dummy_encryption,noauto_da_alloc,minixdf,errors=remount-ro,quota,. Quota mode: writeback. [ 126.995377][ T5150] EXT4-fs error (device loop3): ext4_search_dir:1548: inode #2: block 13: comm syz.3.467: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=0, size=1024 fake=0 [ 127.005630][ T5145] loop0: detected capacity change from 0 to 32768 [ 127.026079][ T5150] EXT4-fs (loop3): Remounting filesystem read-only [ 127.398364][ T5166] loop2: detected capacity change from 0 to 2048 [ 127.492276][ T5166] EXT4-fs (loop2): Unrecognized mount option "context=root" or missing value [ 127.686938][ T5172] loop2: detected capacity change from 0 to 256 [ 127.719241][ T5172] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 127.774879][ T5014] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 127.999512][ T5180] loop2: detected capacity change from 0 to 512 [ 128.065155][ T5180] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 128.088002][ T5180] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 128.106203][ T5014] usb 1-1: too many configurations: 248, using maximum allowed: 8 [ 128.109856][ T5180] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 128.149163][ T5180] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 128.166070][ T5180] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 128.174950][ T5180] EXT4-fs (loop2): orphan cleanup on readonly fs [ 128.183671][ T5180] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.478: bg 0: block 34: padding at end of block bitmap is not set [ 128.198931][ T5180] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.478: Invalid block bitmap block 0 in block_group 1 [ 128.213036][ T5180] Quota error (device loop2): write_blk: dquota write failed [ 128.221387][ T5180] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 128.231279][ T5180] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.478: Failed to acquire dquot type 1 [ 128.246172][ T5180] EXT4-fs (loop2): 1 truncate cleaned up [ 128.259078][ T5180] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,debug,nogrpid,noblock_validity,,errors=continue. Quota mode: writeback. [ 128.295420][ T5180] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 128.303415][ T5180] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 129.074637][ T5014] usb 1-1: New USB device found, idVendor=19d2, idProduct=75bc, bcdDevice=9b.81 [ 129.083903][ T5014] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=197 [ 129.092153][ T5014] usb 1-1: Product: syz [ 129.096561][ T5014] usb 1-1: Manufacturer: syz [ 129.101179][ T5014] usb 1-1: SerialNumber: syz [ 129.108190][ T5014] usb 1-1: config 0 descriptor?? [ 129.155678][ T5014] cdc_acm 1-1:0.0: Zero length descriptor references [ 129.162773][ T5014] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 129.359029][ T5014] usb 1-1: USB disconnect, device number 4 [ 129.597833][ T5191] loop2: detected capacity change from 0 to 32768 [ 131.206332][ T5217] loop0: detected capacity change from 0 to 4096 [ 131.458712][ T5224] loop3: detected capacity change from 0 to 512 [ 131.466769][ T5217] ntfs3: loop0: ino=21, "bus" fallocate(0x20) is not supported [ 131.522083][ T5224] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 131.538843][ T5224] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 131.550763][ T5224] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 131.578456][ T5224] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 131.579142][ T5228] loop1: detected capacity change from 0 to 1024 [ 131.627327][ T5224] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 131.652748][ T5228] hfsplus: failed to load catalog file [ 131.665744][ T5215] loop4: detected capacity change from 0 to 32768 [ 131.673974][ T5224] EXT4-fs (loop3): orphan cleanup on readonly fs [ 131.704890][ T5224] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.497: Invalid block bitmap block 0 in block_group 1 [ 131.722903][ T5234] loop0: detected capacity change from 0 to 1024 [ 131.733388][ T5224] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.497: bg 0: block 34: padding at end of block bitmap is not set [ 131.764599][ T5215] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.491 (5215) [ 131.774902][ T5224] Quota error (device loop3): write_blk: dquota write failed [ 131.803455][ T5224] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 131.815845][ T5224] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.497: Failed to acquire dquot type 1 [ 131.843479][ T5224] EXT4-fs (loop3): 1 truncate cleaned up [ 131.871354][ T5224] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,debug,nogrpid,noblock_validity,,errors=continue. Quota mode: writeback. [ 131.921878][ T5215] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 131.942064][ T5215] BTRFS info (device loop4): using free space tree [ 131.957031][ T5215] BTRFS info (device loop4): has skinny extents [ 131.984704][ T5224] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 131.992652][ T5224] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 132.011136][ T5234] hfsplus: found bad thread record in catalog [ 132.291154][ T5215] BTRFS info (device loop4): enabling ssd optimizations [ 132.340758][ T5258] loop3: detected capacity change from 0 to 512 [ 132.455503][ T5258] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 132.477081][ T5258] ext4 filesystem being mounted at /99/bus supports timestamps until 2038 (0x7fffffff) [ 132.685344][ T3789] hfsplus: b-tree write err: -5, ino 4 [ 132.737356][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.743729][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.911856][ T5287] loop0: detected capacity change from 0 to 512 [ 134.007416][ T5296] loop1: detected capacity change from 0 to 2048 [ 134.145087][ T5287] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 134.173644][ T5296] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.188039][ T5287] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038 (0x7fffffff) [ 134.930445][ T5282] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 135.016220][ T5282] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 135.054475][ T5282] EXT4-fs (loop0): This should not happen!! Data will be lost [ 135.054475][ T5282] [ 135.087686][ T5309] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 135.120421][ T5309] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #18: comm syz.1.510: mark_inode_dirty error [ 135.145755][ T5282] EXT4-fs (loop0): Total free blocks count 0 [ 135.161174][ T5309] EXT4-fs error (device loop1): ext4_map_blocks:715: inode #18: block 118: comm syz.1.510: lblock 6 mapped to illegal pblock 118 (length 1) [ 135.165149][ T5282] EXT4-fs (loop0): Free/Dirty block details [ 135.228283][ T5282] EXT4-fs (loop0): free_blocks=39626 [ 135.233733][ T5282] EXT4-fs (loop0): dirty_blocks=1 [ 135.251852][ T5282] EXT4-fs (loop0): Block reservation details [ 135.280578][ T5282] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 135.769235][ T3503] EXT4-fs error (device loop1): ext4_map_blocks:601: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 136.163561][ T3503] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 136.176130][ T3503] EXT4-fs error (device loop1): ext4_dirty_inode:5993: inode #18: comm syz-executor: mark_inode_dirty error [ 136.538142][ T5321] loop3: detected capacity change from 0 to 8192 [ 136.580156][ T5306] loop2: detected capacity change from 0 to 32768 [ 136.650353][ T5306] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.512 (5306) [ 136.669355][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.701223][ T5306] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 136.714555][ T5306] BTRFS info (device loop2): using free space tree [ 136.733962][ T5306] BTRFS info (device loop2): has skinny extents [ 136.764951][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.907415][ T5306] BTRFS info (device loop2): enabling ssd optimizations [ 136.917972][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.945813][ T26] audit: type=1800 audit(1721041933.939:89): pid=5306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.512" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 137.025742][ T5306] loop2: detected capacity change from 32768 to 11 [ 137.047144][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.072404][ T5353] ALSA: seq fatal error: cannot create timer (-22) [ 137.236021][ T5306] attempt to access beyond end of device [ 137.236021][ T5306] loop2: rw=34817, want=10568, limit=11 [ 137.242526][ T5355] loop4: detected capacity change from 0 to 2048 [ 137.280659][ T5306] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 137.338598][ T5306] BTRFS warning (device loop2): direct IO failed ino 263 rw 1,34817 sector 0x28c8 len 65536 err no 10 [ 137.469337][ T5358] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.514617][ T5355] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=80, inode=15, rec_len=2072, name_len=5 [ 137.558230][ T5365] loop3: detected capacity change from 0 to 512 [ 137.609648][ T3506] attempt to access beyond end of device [ 137.609648][ T3506] loop2: rw=6145, want=10248, limit=11 [ 137.620255][ T5355] Remounting filesystem read-only [ 137.621300][ T3506] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 137.648095][ T3512] BTRFS: error (device loop2) in __btrfs_run_delayed_items:1089: errno=-5 IO failure [ 137.756338][ T3512] BTRFS info (device loop2): forced readonly [ 137.762395][ T3512] BTRFS warning (device loop2): Skipping commit of aborted transaction. [ 137.773032][ T5365] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 137.824489][ T3512] BTRFS: error (device loop2) in cleanup_transaction:2018: errno=-5 IO failure [ 137.855151][ T5365] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038 (0x7fffffff) [ 137.962301][ T5340] chnl_net:caif_netlink_parms(): no params data found [ 138.341419][ T5340] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.368682][ T5340] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.624339][ T5340] device bridge_slave_0 entered promiscuous mode [ 138.894848][ T5277] Bluetooth: hci0: command 0x0409 tx timeout [ 138.901821][ T5340] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.055862][ T5340] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.286928][ T5340] device bridge_slave_1 entered promiscuous mode [ 139.311444][ T5391] loop2: detected capacity change from 0 to 2048 [ 139.477125][ T5391] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 140.114540][ T5340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.475652][ T5399] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 140.500800][ T5408] ALSA: seq fatal error: cannot create timer (-22) [ 140.562289][ T5340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.597849][ T5399] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #18: comm syz.2.527: mark_inode_dirty error [ 140.617735][ T5412] loop3: detected capacity change from 0 to 512 [ 140.655141][ T5399] EXT4-fs error (device loop2): ext4_map_blocks:715: inode #18: block 118: comm syz.2.527: lblock 6 mapped to illegal pblock 118 (length 1) [ 140.672287][ T5412] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 140.737099][ T5340] team0: Port device team_slave_0 added [ 140.789705][ T3512] EXT4-fs error (device loop2): ext4_map_blocks:601: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 140.792574][ T5412] EXT4-fs (loop3): 1 orphan inode deleted [ 140.814865][ T5412] EXT4-fs (loop3): 1 truncate cleaned up [ 140.820627][ T5412] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,bsdgroups,block_validity,block_validity,quota,. Quota mode: writeback. [ 140.864885][ T5340] team0: Port device team_slave_1 added [ 140.922780][ T5412] EXT4-fs error (device loop3): empty_inline_dir:1836: inode #12: block 7: comm syz.3.535: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 140.963690][ T3512] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 140.984581][ T5412] EXT4-fs (loop3): Remounting filesystem read-only [ 140.986111][ T3512] EXT4-fs error (device loop2): ext4_dirty_inode:5993: inode #18: comm syz-executor: mark_inode_dirty error [ 140.996230][ T5412] EXT4-fs warning (device loop3): empty_inline_dir:1843: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 141.034752][ T4009] Bluetooth: hci0: command 0x041b tx timeout [ 141.041476][ T5340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.055697][ T5422] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1439: inode #12: block 7: comm syz.3.535: path /112/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 141.082106][ T5340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.133626][ T5340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.199563][ T5340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.211370][ T5340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.251212][ T5340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.378154][ T5429] loop0: detected capacity change from 0 to 128 [ 141.431902][ T5433] IPv6: sit1: Disabled Multicast RS [ 141.480811][ T5429] EXT4-fs error (device loop0): ext4_fill_super:4840: inode #2: comm syz.0.537: iget: checksum invalid [ 141.536635][ T5429] EXT4-fs (loop0): get root inode failed [ 141.542319][ T5429] EXT4-fs (loop0): mount failed [ 141.585954][ T5340] device hsr_slave_0 entered promiscuous mode [ 141.596016][ T5438] input: syz0 as /devices/virtual/input/input11 [ 141.604763][ T5340] device hsr_slave_1 entered promiscuous mode [ 141.612832][ T5340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.641446][ T5340] Cannot create hsr debugfs directory [ 141.702627][ T5444] loop4: detected capacity change from 0 to 256 [ 141.870464][ T5444] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [ 142.316255][ T154] device hsr_slave_0 left promiscuous mode [ 142.374860][ T154] device hsr_slave_1 left promiscuous mode [ 142.394833][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.414525][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.462680][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.474992][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.493137][ T154] device bridge_slave_1 left promiscuous mode [ 142.502744][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.518160][ T154] device bridge_slave_0 left promiscuous mode [ 142.534765][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.551036][ T26] audit: type=1326 audit(1721041939.539:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5474 comm="syz.4.552" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff29fd1cbd9 code=0x0 [ 142.602997][ T154] device veth1_macvtap left promiscuous mode [ 142.619275][ T154] device veth0_macvtap left promiscuous mode [ 142.641181][ T154] device veth1_vlan left promiscuous mode [ 142.647313][ T154] device veth0_vlan left promiscuous mode [ 142.840168][ T5452] loop3: detected capacity change from 0 to 40427 [ 142.894443][ T5452] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 142.902295][ T5452] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 142.935958][ T5452] F2FS-fs (loop3): invalid crc value [ 142.963203][ T154] team0 (unregistering): Port device team_slave_1 removed [ 142.966288][ T5452] F2FS-fs (loop3): Found nat_bits in checkpoint [ 142.981217][ T154] team0 (unregistering): Port device team_slave_0 removed [ 142.997585][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.018260][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.048308][ T5452] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 143.058535][ T5452] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 143.114496][ T5275] Bluetooth: hci0: command 0x040f tx timeout [ 143.149322][ T154] bond0 (unregistering): Released all slaves [ 143.574848][ T4670] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 143.749885][ T5453] chnl_net:caif_netlink_parms(): no params data found [ 143.822468][ T5497] loop3: detected capacity change from 0 to 256 [ 143.875905][ T4670] usb 5-1: Using ep0 maxpacket: 32 [ 143.882429][ T5497] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [ 143.900285][ T5453] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.908433][ T5453] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.916857][ T5453] device bridge_slave_0 entered promiscuous mode [ 143.938725][ T5340] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 143.952820][ T5453] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.960591][ T5453] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.969212][ T5453] device bridge_slave_1 entered promiscuous mode [ 143.977467][ T5340] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 143.990539][ T5340] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 144.032301][ T4670] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 144.046558][ T5340] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 144.068679][ T5453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.093679][ T4670] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.096514][ T5453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.128317][ T4670] usb 5-1: config 0 descriptor?? [ 144.154598][ T5277] Bluetooth: hci3: command 0x0409 tx timeout [ 144.199715][ T4670] gspca_main: sunplus-2.14.0 probing 041e:400b [ 144.297461][ T5453] team0: Port device team_slave_0 added [ 144.342348][ T5453] team0: Port device team_slave_1 added [ 144.492215][ T5453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.521031][ T5453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.554845][ T5453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.590878][ T5453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.599506][ T5453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.637363][ T5453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.661675][ T5340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.751204][ T5453] device hsr_slave_0 entered promiscuous mode [ 144.772490][ T5453] device hsr_slave_1 entered promiscuous mode [ 144.800260][ T5453] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.820177][ T5453] Cannot create hsr debugfs directory [ 144.833802][ T5340] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.849258][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.858446][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.956707][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.975137][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.994737][ T3546] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.001851][ T3546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.039541][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.064740][ T4670] gspca_sunplus: reg_r err -71 [ 145.069620][ T4670] sunplus: probe of 5-1:0.0 failed with error -71 [ 145.100337][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.109135][ T4670] usb 5-1: USB disconnect, device number 4 [ 145.128002][ T3546] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.135159][ T3546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.183865][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.241571][ T3545] Bluetooth: hci0: command 0x0419 tx timeout [ 145.260135][ T5533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.562'. [ 145.301234][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.310373][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.330715][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.358675][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.384426][ T5521] loop3: detected capacity change from 0 to 32768 [ 145.399892][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.430439][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.495313][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.532089][ T5521] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.561 (5521) [ 145.562939][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.616771][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.655517][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.684859][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.693978][ T5340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.762402][ T5521] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 145.822712][ T5521] BTRFS info (device loop3): use zlib compression, level 3 [ 145.867292][ T5521] BTRFS info (device loop3): using free space tree [ 145.877660][ T5453] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.905393][ T5521] BTRFS info (device loop3): has skinny extents [ 146.183687][ T5453] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.214551][ T5521] BTRFS info (device loop3): enabling ssd optimizations [ 146.234559][ T1280] Bluetooth: hci3: command 0x041b tx timeout [ 146.326701][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.334269][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.379919][ T5584] loop4: detected capacity change from 0 to 128 [ 146.452687][ T5453] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.468787][ T26] audit: type=1804 audit(1721041943.459:91): pid=5521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.561" name="/newroot/124/file0/bus" dev="loop3" ino=263 res=1 errno=0 [ 146.515466][ T5584] EXT4-fs error (device loop4): ext4_fill_super:4840: inode #2: comm syz.4.565: iget: checksum invalid [ 146.568555][ T5340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.594652][ T5584] EXT4-fs (loop4): get root inode failed [ 146.604709][ T5584] EXT4-fs (loop4): mount failed [ 146.612675][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 146.622208][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.744971][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.779262][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.826528][ T5340] device veth0_vlan entered promiscuous mode [ 146.894810][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.922903][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.969260][ T5340] device veth1_vlan entered promiscuous mode [ 147.157615][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 147.180267][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 147.235277][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 147.244052][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 147.294737][ T5340] device veth0_macvtap entered promiscuous mode [ 147.348690][ T5340] device veth1_macvtap entered promiscuous mode [ 147.397160][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 147.406491][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 147.456019][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.494494][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.514490][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.544483][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.554345][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.598989][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.622039][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.653121][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.685559][ T5340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.702608][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 147.715359][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 147.736992][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.763637][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.802241][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.823277][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.843702][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.858584][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.869552][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.881329][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.893452][ T5340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.954551][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 147.983723][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.025833][ T5340] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.054445][ T5340] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.063283][ T5340] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.141529][ T5340] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.215410][ T5453] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 148.245915][ T5453] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 148.314841][ T3554] Bluetooth: hci3: command 0x040f tx timeout [ 148.341880][ T5453] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 148.375754][ T5622] loop3: detected capacity change from 0 to 256 [ 148.398722][ T5453] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 148.431636][ T5618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.573'. [ 148.579633][ T5622] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [ 148.703424][ T3790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.721849][ T3790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.805720][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 148.813574][ T5596] loop0: detected capacity change from 0 to 65536 [ 148.868264][ T3596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.896184][ T3596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.975343][ T5453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.042399][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 149.091840][ T5596] XFS (loop0): Deprecated V4 format (crc=0) not supported by kernel. [ 149.103287][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.135543][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.176232][ T5640] loop4: detected capacity change from 0 to 4096 [ 149.179573][ T5453] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.241420][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.255405][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.294454][ T5644] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 149.326240][ T5645] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.343432][ T3554] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.350576][ T3554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.390172][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.400509][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.410656][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.421114][ T4670] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.428236][ T4670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.472744][ T5650] netlink: 28 bytes leftover after parsing attributes in process `syz.1.582'. [ 149.514544][ T5650] netlink: 28 bytes leftover after parsing attributes in process `syz.1.582'. [ 149.542109][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.573411][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.587770][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.590740][ T5652] loop1: detected capacity change from 0 to 512 [ 149.605888][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.634055][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.653089][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.663363][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.679070][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.735825][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.809141][ T5453] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.826232][ T5654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.584'. [ 149.975600][ T3546] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 150.075223][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.083669][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.856408][ T1280] Bluetooth: hci3: command 0x0419 tx timeout [ 151.139844][ T5453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.151955][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.161723][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.273403][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 151.285469][ T5686] loop4: detected capacity change from 0 to 64 [ 151.293052][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.302042][ T3546] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 151.311812][ T3546] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.326942][ T3546] usb 4-1: Product: syz [ 151.331201][ T3546] usb 4-1: Manufacturer: syz [ 151.337246][ T3546] usb 4-1: SerialNumber: syz [ 151.347708][ T5687] netlink: 28 bytes leftover after parsing attributes in process `syz.0.594'. [ 151.355792][ T3546] usb 4-1: config 0 descriptor?? [ 151.363219][ T5687] netlink: 28 bytes leftover after parsing attributes in process `syz.0.594'. [ 151.384017][ T5686] hfs: found bad thread record in catalog [ 151.391957][ T5686] hfs: get root inode failed [ 151.399085][ T3546] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 004 [ 151.408914][ T5453] device veth0_vlan entered promiscuous mode [ 151.415981][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.425995][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.436690][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.444939][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.487592][ T5453] device veth1_vlan entered promiscuous mode [ 151.559294][ T5453] device veth0_macvtap entered promiscuous mode [ 151.625383][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 151.630893][ T5691] loop0: detected capacity change from 0 to 2048 [ 151.640461][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 151.665201][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.681834][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.718170][ T5453] device veth1_macvtap entered promiscuous mode [ 151.748928][ T5691] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 151.759985][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 151.768229][ T5691] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038 (0x7fffffff) [ 151.786374][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.868186][ T5453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.896381][ T5453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.911413][ T5453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.964420][ T5453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.999457][ T5699] loop1: detected capacity change from 0 to 512 [ 152.024799][ T3546] i2c i2c-1: failure reading functionality [ 152.041461][ T5453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.075413][ T3546] i2c i2c-1: connected i2c-tiny-usb device [ 152.102624][ T5453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.130256][ T5691] fs-verity: sha512 using implementation "sha512-avx2" [ 152.208542][ T5691] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.597: bg 0: block 288: padding at end of block bitmap is not set [ 152.232619][ T5691] fs-verity (loop0, inode 13): ext4_end_enable_verity() failed with err -117 [ 152.278920][ T5453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.326997][ T5453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.370172][ T5453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.440688][ T5453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.473855][ T5453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.493140][ T5686] loop4: detected capacity change from 0 to 40427 [ 152.510148][ T5453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.530031][ T5453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.543182][ T3546] usb 4-1: USB disconnect, device number 4 [ 152.554179][ T5453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.572768][ T5453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.583414][ T5453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.600958][ T5453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.615581][ T5453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.630533][ T5453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.643038][ T5453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.660629][ T5453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.676228][ T5702] loop3: detected capacity change from 0 to 1024 [ 152.684072][ T5453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.695661][ T5686] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 152.704931][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.718785][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.730572][ T5686] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 152.752522][ T5686] F2FS-fs (loop4): Found nat_bits in checkpoint [ 152.775468][ T5702] EXT4-fs (loop3): Ignoring removed orlov option [ 152.912936][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.921890][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.931297][ T5702] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,data_err=abort,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,orlov,bsdgroups,max_batch_time=0x0000000000000400,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 153.744549][ T5686] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 153.787614][ T5686] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 153.818734][ T5453] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.832752][ T5453] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.842487][ T5453] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.851370][ T5453] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.911060][ T5716] loop1: detected capacity change from 0 to 256 [ 153.951156][ T154] device hsr_slave_0 left promiscuous mode [ 153.965132][ T154] device hsr_slave_1 left promiscuous mode [ 153.976979][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.988787][ T5718] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 154.001964][ T5716] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value [ 154.020419][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.222124][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.234793][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.249960][ T154] device bridge_slave_1 left promiscuous mode [ 154.256377][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.279564][ T154] device bridge_slave_0 left promiscuous mode [ 154.288997][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.075247][ T154] device veth1_macvtap left promiscuous mode [ 155.115061][ T154] device veth0_macvtap left promiscuous mode [ 155.121226][ T154] device veth1_vlan left promiscuous mode [ 155.154861][ T5727] UBIFS error (pid: 5727): cannot open "", error -22 [ 155.162932][ T154] device veth0_vlan left promiscuous mode [ 155.388462][ T5731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.607'. [ 155.548763][ T5735] loop4: detected capacity change from 0 to 512 [ 155.616356][ T5735] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.606: casefold flag without casefold feature [ 155.637434][ T5735] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #2: comm syz.4.606: missing EA_INODE flag [ 155.657438][ T5735] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.606: error while reading EA inode 2 err=-117 [ 155.679120][ T5735] EXT4-fs (loop4): 1 orphan inode deleted [ 155.685220][ T5735] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 155.688517][ T154] team0 (unregistering): Port device team_slave_1 removed [ 155.729549][ T154] team0 (unregistering): Port device team_slave_0 removed [ 155.734157][ T5735] syz.4.606 (pid 5735) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 155.747953][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.773786][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.876495][ T154] bond0 (unregistering): Released all slaves [ 156.067452][ T5738] overlayfs: failed to create directory ./bus/work (errno: 126); mounting read-only [ 156.844270][ T4021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.862085][ T4021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.870216][ T5746] loop0: detected capacity change from 0 to 512 [ 156.874839][ T4009] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 156.897412][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 156.942907][ T5389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.952405][ T5389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.955964][ T5744] loop4: detected capacity change from 0 to 8192 [ 157.121025][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 157.128922][ T5744] loop4: AHDI p1 p2 p3 [ 157.142431][ T5744] loop4: p1 start 4278255615 is beyond EOD, truncated [ 157.178308][ T5744] loop4: p2 size 3409408 extends beyond EOD, truncated [ 158.024612][ T4009] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.044525][ T4009] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.054547][ T4009] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 158.063600][ T4009] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.095766][ T4009] usb 2-1: config 0 descriptor?? [ 158.132263][ T5754] UBIFS error (pid: 5754): cannot open "", error -22 [ 158.325318][ T3600] udevd[3600]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 159.071459][ T5740] loop1: detected capacity change from 0 to 256 [ 159.097833][ T4395] udevd[4395]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 159.249945][ T5766] loop2: detected capacity change from 0 to 512 [ 159.253013][ T5740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.609'. [ 159.308866][ T5769] loop4: detected capacity change from 0 to 2048 [ 159.327614][ T5771] loop0: detected capacity change from 0 to 256 [ 159.372717][ T5756] chnl_net:caif_netlink_parms(): no params data found [ 159.382289][ T5771] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 159.428395][ T5769] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 159.468948][ T5769] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 159.509930][ T4009] sony 0003:054C:0268.0001: item fetching failed at offset 3/5 [ 159.540492][ T4009] sony 0003:054C:0268.0001: parse failed [ 159.546376][ T4009] sony: probe of 0003:054C:0268.0001 failed with error -22 [ 159.556538][ T5769] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 159.640168][ T5766] EXT4-fs (loop2): 1 orphan inode deleted [ 159.647124][ T5769] EXT4-fs (loop4): This should not happen!! Data will be lost [ 159.647124][ T5769] [ 159.680472][ T5766] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,errors=continue,. Quota mode: writeback. [ 159.713545][ T5766] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038 (0x7fffffff) [ 160.161202][ T5769] EXT4-fs (loop4): Total free blocks count 0 [ 160.177947][ T3548] usb 2-1: USB disconnect, device number 8 [ 160.195373][ T5769] EXT4-fs (loop4): Free/Dirty block details [ 160.209276][ T5769] EXT4-fs (loop4): free_blocks=66060288 [ 160.217603][ T5769] EXT4-fs (loop4): dirty_blocks=16 [ 160.237167][ T5769] EXT4-fs (loop4): Block reservation details [ 160.260101][ T5769] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 160.414279][ T5787] loop0: detected capacity change from 0 to 256 [ 160.449291][ T5453] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /1/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=4096 fake=0 [ 160.545442][ T5453] EXT4-fs error (device loop2): __ext4_get_inode_loc:4309: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 160.577911][ T5756] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.594022][ T5756] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.603566][ T5787] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 160.664814][ T5453] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 160.669186][ T5756] device bridge_slave_0 entered promiscuous mode [ 160.707052][ T5453] EXT4-fs error (device loop2): ext4_dirty_inode:5993: inode #2: comm syz-executor: mark_inode_dirty error [ 160.736696][ T5756] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.750563][ T5392] EXT4-fs error (device loop2): __ext4_get_inode_loc:4309: comm kworker/u4:15: Invalid inode table block 0 in block_group 0 [ 160.752238][ T5756] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.779204][ T5756] device bridge_slave_1 entered promiscuous mode [ 160.804227][ T3548] Bluetooth: hci1: command 0x0409 tx timeout [ 160.843421][ T5453] EXT4-fs error (device loop2): __ext4_get_inode_loc:4309: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 160.883772][ T5453] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 160.919662][ T5453] EXT4-fs error (device loop2): ext4_quota_off:6485: inode #3: comm syz-executor: mark_inode_dirty error [ 160.998325][ T5756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.043609][ T5756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.379905][ T5756] team0: Port device team_slave_0 added [ 161.754353][ T5756] team0: Port device team_slave_1 added [ 162.194868][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.201850][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.281731][ T5756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.347353][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.354336][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.456031][ T5807] loop0: detected capacity change from 0 to 2048 [ 162.475714][ T5756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.635706][ T5807] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 162.682349][ T5756] device hsr_slave_0 entered promiscuous mode [ 162.712250][ T5807] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 162.752885][ T5756] device hsr_slave_1 entered promiscuous mode [ 162.783908][ T5756] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.802251][ T5807] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 162.825016][ T5274] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 162.846041][ T5756] Cannot create hsr debugfs directory [ 162.874558][ T3548] Bluetooth: hci1: command 0x041b tx timeout [ 162.914000][ T5807] EXT4-fs (loop0): This should not happen!! Data will be lost [ 162.914000][ T5807] [ 162.953802][ T5807] EXT4-fs (loop0): Total free blocks count 0 [ 162.964712][ T5807] EXT4-fs (loop0): Free/Dirty block details [ 162.980326][ T5807] EXT4-fs (loop0): free_blocks=66060288 [ 162.986868][ T5807] EXT4-fs (loop0): dirty_blocks=16 [ 162.992971][ T5807] EXT4-fs (loop0): Block reservation details [ 162.999881][ T5807] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 163.144496][ T1280] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 163.154984][ T5756] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.189711][ T5274] usb 5-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=6c.69 [ 163.226630][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.237009][ T5756] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.246618][ T5274] usb 5-1: config 0 descriptor?? [ 163.266691][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 163.306623][ T5274] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 163.322105][ T5832] loop0: detected capacity change from 0 to 512 [ 163.368576][ T5756] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.423597][ T5832] EXT4-fs (loop0): 1 truncate cleaned up [ 163.431775][ T5832] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 163.470601][ T5756] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.485573][ T5832] EXT4-fs warning (device loop0): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 163.503496][ T5832] EXT4-fs warning (device loop0): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 163.517944][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.524970][ T5832] EXT4-fs warning (device loop0): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 163.525009][ T5832] EXT4-fs warning (device loop0): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 163.552594][ T5274] gspca_sunplus: reg_r err -71 [ 163.554452][ T1280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.559117][ T5274] sunplus: probe of 5-1:0.0 failed with error -71 [ 163.568773][ T1280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.584755][ T1280] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 163.595721][ T5274] usb 5-1: USB disconnect, device number 5 [ 163.613050][ T1280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.614040][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.635891][ T1280] usb 2-1: config 0 descriptor?? [ 163.647355][ T5809] device bridge_slave_0 entered promiscuous mode [ 163.658074][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.666034][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.674292][ T5809] device bridge_slave_1 entered promiscuous mode [ 163.746291][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.761610][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.837229][ T5809] team0: Port device team_slave_0 added [ 163.875489][ T5809] team0: Port device team_slave_1 added [ 163.921611][ T5824] loop1: detected capacity change from 0 to 256 [ 163.931616][ T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.971108][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.978146][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.012723][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.631565][ T4667] Bluetooth: hci3: command 0x0409 tx timeout [ 164.682917][ T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.726594][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.743101][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.794179][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.806508][ T5824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.635'. [ 164.851945][ T5809] device hsr_slave_0 entered promiscuous mode [ 164.863020][ T5809] device hsr_slave_1 entered promiscuous mode [ 164.869897][ T5809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.888941][ T5809] Cannot create hsr debugfs directory [ 164.958484][ T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.973496][ T1280] sony 0003:054C:0268.0002: item fetching failed at offset 3/5 [ 164.983621][ T1280] sony 0003:054C:0268.0002: parse failed [ 164.989403][ T1280] sony: probe of 0003:054C:0268.0002 failed with error -22 [ 165.001481][ T1280] Bluetooth: hci1: command 0x040f tx timeout [ 165.132122][ T5853] loop4: detected capacity change from 0 to 512 [ 165.366095][ T5853] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 165.420044][ T5853] EXT4-fs warning (device loop4): ext4_begin_enable_verity:136: inode #13: comm syz.4.641: verity is only allowed on extent-based files [ 165.448698][ T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.571692][ T5858] loop0: detected capacity change from 0 to 16 [ 165.585556][ T3546] usb 2-1: USB disconnect, device number 9 [ 165.701719][ T5858] erofs: (device loop0): mounted with root inode @ nid 36. [ 165.761092][ T5858] attempt to access beyond end of device [ 165.761092][ T5858] loop0: rw=0, want=40, limit=16 [ 165.818490][ T5756] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 165.868718][ T5756] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 165.956039][ T5756] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 165.965100][ T5862] loop4: detected capacity change from 0 to 512 [ 165.979661][ T5756] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 166.025419][ T5866] loop0: detected capacity change from 0 to 512 [ 166.051305][ T5862] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.647: bg 0: block 5: invalid block bitmap [ 166.080309][ T5866] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.648: casefold flag without casefold feature [ 166.106328][ T5866] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #2: comm syz.0.648: missing EA_INODE flag [ 166.119648][ T5862] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6186: Corrupt filesystem [ 166.175276][ T5866] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.648: error while reading EA inode 2 err=-117 [ 166.192923][ T5862] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.647: invalid indirect mapped block 3 (level 2) [ 166.193032][ T5866] EXT4-fs (loop0): 1 orphan inode deleted [ 166.212739][ T5866] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 166.434709][ T5862] EXT4-fs (loop4): 1 orphan inode deleted [ 166.440666][ T5862] EXT4-fs (loop4): 1 truncate cleaned up [ 166.446984][ T5862] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 166.559232][ T5872] overlayfs: failed to create directory ./bus/work (errno: 126); mounting read-only [ 166.794675][ T5274] Bluetooth: hci3: command 0x041b tx timeout [ 166.954173][ T5875] EXT4-fs warning (device loop4): ext4_resize_begin:73: won't resize using backup superblock at 1 [ 167.034552][ T4009] Bluetooth: hci1: command 0x0419 tx timeout [ 167.153171][ T5756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.164892][ T5274] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 167.253640][ T5756] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.269669][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.279274][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.349231][ T5809] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 167.390210][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.409036][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.465048][ T3546] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.472257][ T3546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.521659][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.567623][ T5887] loop0: detected capacity change from 0 to 4096 [ 167.571969][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.592101][ T3546] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.599395][ T3546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.616160][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.625825][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.705056][ T5274] usb 2-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=6c.69 [ 167.738813][ T5274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.891412][ T5274] usb 2-1: config 0 descriptor?? [ 167.937317][ T5274] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 168.132541][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 168.142629][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 168.154790][ T5274] gspca_sunplus: reg_r err -71 [ 168.159645][ T5274] sunplus: probe of 2-1:0.0 failed with error -71 [ 168.163806][ T5756] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 168.202171][ T5756] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.215292][ T5809] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 168.216766][ T5274] usb 2-1: USB disconnect, device number 10 [ 168.237027][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.246171][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.256337][ T5887] ntfs: volume version 3.1. [ 168.264010][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.275905][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.304863][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.315420][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.324179][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.333922][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.379985][ T26] audit: type=1800 audit(1721041965.369:92): pid=5901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.652" name="file1" dev="loop0" ino=67 res=0 errno=0 [ 168.409032][ T5809] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 168.436309][ T5809] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 168.469421][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.777732][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.786453][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.801150][ T5756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.043831][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.143247][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.339678][ T4009] Bluetooth: hci3: command 0x040f tx timeout [ 169.395204][ T5917] netlink: 'syz.1.655': attribute type 1 has an invalid length. [ 169.402880][ T5917] netlink: 'syz.1.655': attribute type 2 has an invalid length. [ 169.427656][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.436783][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.470434][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.489774][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.499460][ T3549] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.506604][ T3549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.542034][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.551389][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.573566][ T3549] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.580722][ T3549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.605405][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.622329][ T5932] loop1: detected capacity change from 0 to 512 [ 169.630456][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 169.640488][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 169.656250][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 169.665580][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 169.689490][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 169.702447][ T5932] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.659: casefold flag without casefold feature [ 169.716273][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 169.724970][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.733473][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 169.741638][ T5932] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #2: comm syz.1.659: missing EA_INODE flag [ 169.742166][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.764229][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.772182][ T5932] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.659: error while reading EA inode 2 err=-117 [ 169.772498][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 169.795330][ T5809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 169.826875][ T5932] EXT4-fs (loop1): 1 orphan inode deleted [ 169.833012][ T5932] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 169.855542][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.865702][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.113045][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 170.123501][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 170.183379][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 170.203377][ T5942] overlayfs: failed to create directory ./bus/work (errno: 126); mounting read-only [ 170.339104][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.536515][ T5912] loop0: detected capacity change from 0 to 40427 [ 170.559423][ T5945] loop4: detected capacity change from 0 to 64 [ 170.685045][ T5912] F2FS-fs (loop0): invalid crc value [ 170.739553][ T5756] device veth0_vlan entered promiscuous mode [ 170.786000][ T5756] device veth1_vlan entered promiscuous mode [ 170.796642][ T5912] F2FS-fs (loop0): Found nat_bits in checkpoint [ 170.963705][ T5912] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 171.117238][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.125684][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.252451][ T5957] loop4: detected capacity change from 0 to 512 [ 171.292777][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.498469][ T5957] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 171.590448][ T5957] EXT4-fs warning (device loop4): ext4_begin_enable_verity:136: inode #13: comm syz.4.664: verity is only allowed on extent-based files [ 171.770523][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 171.790848][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 171.836953][ T5756] device veth0_macvtap entered promiscuous mode [ 171.892101][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 171.892523][ T3548] Bluetooth: hci3: command 0x0419 tx timeout [ 171.906807][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.920711][ T3510] attempt to access beyond end of device [ 171.920711][ T3510] loop0: rw=2049, want=45104, limit=40427 [ 171.971683][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.977154][ T5966] loop1: detected capacity change from 0 to 8 [ 172.019193][ T5966] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 172.039650][ T5966] cramfs: empty filesystem [ 172.108763][ T5756] device veth1_macvtap entered promiscuous mode [ 172.143779][ T5809] device veth0_vlan entered promiscuous mode [ 172.202992][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.233345][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.261877][ T5809] device veth1_vlan entered promiscuous mode [ 172.295912][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.309737][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.336565][ T5975] binder: 5971:5975 ioctl c0306201 0 returned -14 [ 172.385295][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 172.395812][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.400751][ T5977] loop1: detected capacity change from 0 to 512 [ 172.420520][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.448246][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.463059][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.480913][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.495147][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.513995][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.543037][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.560016][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.573843][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.602273][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.635431][ T154] device hsr_slave_0 left promiscuous mode [ 172.669632][ T5977] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.672: casefold flag without casefold feature [ 172.674891][ T154] device hsr_slave_1 left promiscuous mode [ 172.694107][ T5977] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #2: comm syz.1.672: missing EA_INODE flag [ 172.714117][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.722224][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.733467][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.741497][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.749958][ T5977] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.672: error while reading EA inode 2 err=-117 [ 172.770227][ T154] device bridge_slave_1 left promiscuous mode [ 172.782576][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.792482][ T5977] EXT4-fs (loop1): 1 orphan inode deleted [ 172.827435][ T5977] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 173.000519][ T154] device bridge_slave_0 left promiscuous mode [ 173.024729][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.110906][ T5984] overlayfs: failed to create directory ./bus/work (errno: 126); mounting read-only [ 173.509424][ T154] device hsr_slave_0 left promiscuous mode [ 173.565502][ T154] device hsr_slave_1 left promiscuous mode [ 173.595110][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.604776][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.620645][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.631319][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.640498][ T154] device bridge_slave_1 left promiscuous mode [ 173.647295][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.658353][ T154] device bridge_slave_0 left promiscuous mode [ 173.664947][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.683059][ T154] device veth1_macvtap left promiscuous mode [ 173.690914][ T154] device veth0_macvtap left promiscuous mode [ 173.705488][ T154] device veth1_vlan left promiscuous mode [ 173.711421][ T154] device veth0_vlan left promiscuous mode [ 173.732897][ T154] device veth1_macvtap left promiscuous mode [ 173.740713][ T154] device veth0_macvtap left promiscuous mode [ 173.752613][ T154] device veth1_vlan left promiscuous mode [ 173.758963][ T154] device veth0_vlan left promiscuous mode [ 173.846879][ T3549] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 174.089902][ T154] team0 (unregistering): Port device team_slave_1 removed [ 174.111541][ T154] team0 (unregistering): Port device team_slave_0 removed [ 174.126640][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.141231][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.220994][ T154] bond0 (unregistering): Released all slaves [ 174.235821][ T3549] usb 2-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=6c.69 [ 174.245614][ T3549] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.256147][ T3549] usb 2-1: config 0 descriptor?? [ 174.314799][ T3549] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 174.400767][ T154] team0 (unregistering): Port device team_slave_1 removed [ 174.421513][ T154] team0 (unregistering): Port device team_slave_0 removed [ 174.434655][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.450686][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.534702][ T3549] gspca_sunplus: reg_r err -71 [ 174.535114][ T154] bond0 (unregistering): Released all slaves [ 174.539646][ T3549] sunplus: probe of 2-1:0.0 failed with error -71 [ 174.563139][ T3549] usb 2-1: USB disconnect, device number 11 [ 174.601574][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 174.620247][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.633943][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.645145][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.655409][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.667257][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.677402][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.688285][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.699606][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.748945][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.768213][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.873224][ T5994] loop4: detected capacity change from 0 to 8192 [ 174.972462][ T5756] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.981659][ T5756] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.989677][ T5994] loop4: AHDI p1 p2 p3 [ 174.990913][ T5756] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.000024][ T5994] loop4: p1 start 4278255615 is beyond EOD, truncated [ 175.003219][ T5756] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.028813][ T5994] loop4: p2 size 3409408 extends beyond EOD, truncated [ 175.120366][ T5998] loop0: detected capacity change from 0 to 512 [ 175.398777][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 175.502187][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 175.516645][ T5998] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 175.597474][ T5998] EXT4-fs warning (device loop0): ext4_begin_enable_verity:136: inode #13: comm syz.0.677: verity is only allowed on extent-based files [ 175.793855][ T5809] device veth0_macvtap entered promiscuous mode [ 175.808332][ T4667] Bluetooth: hci2: command 0x0406 tx timeout [ 175.836391][ T4395] udevd[4395]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 175.847693][ T3651] udevd[3651]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 175.907018][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 175.928295][ T5809] device veth1_macvtap entered promiscuous mode [ 176.056446][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.077235][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.112593][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.144128][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.173510][ T6015] netlink: 100 bytes leftover after parsing attributes in process `syz.4.680'. [ 176.185765][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.200772][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.233171][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.278313][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.320952][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.349805][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.389919][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.444923][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.474050][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.511689][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.550108][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.591143][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.637529][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.680884][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.740525][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.821390][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.882085][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.893404][ T4009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.938733][ T2587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.941341][ T5809] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.981155][ T2587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.005742][ T5809] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.049250][ T5809] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.092695][ T5809] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.157662][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 177.229684][ T5389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.266666][ T5389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.360655][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 177.428778][ T4265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.452745][ T4265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.518923][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 177.644248][ T5750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.685378][ T6030] binder: 6026:6030 ioctl c0306201 0 returned -14 [ 177.695818][ T5750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.785156][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 177.981470][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 178.592437][ T6039] loop4: detected capacity change from 0 to 4096 [ 178.721888][ T6039] ntfs: volume version 3.1. [ 178.990355][ T6047] loop0: detected capacity change from 0 to 512 [ 179.152042][ T6047] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.695: casefold flag without casefold feature [ 179.170946][ T6032] loop3: detected capacity change from 0 to 32768 [ 179.173510][ T6051] loop4: detected capacity change from 0 to 256 [ 179.286433][ T6047] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #2: comm syz.0.695: missing EA_INODE flag [ 179.377721][ T6047] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.695: error while reading EA inode 2 err=-117 [ 179.397842][ T6032] XFS (loop3): Mounting V5 Filesystem [ 179.426767][ T6047] EXT4-fs (loop0): 1 orphan inode deleted [ 179.513372][ T6032] XFS (loop3): Ending clean mount [ 179.518678][ T6047] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 179.571986][ T6032] XFS (loop3): Quotacheck needed: Please wait. [ 179.587162][ T6036] loop1: detected capacity change from 0 to 40427 [ 179.743532][ T6032] XFS (loop3): Quotacheck: Done. [ 179.930290][ T6036] F2FS-fs (loop1): Found nat_bits in checkpoint [ 180.014773][ T6067] overlayfs: failed to create directory ./bus/work (errno: 126); mounting read-only [ 180.609919][ T6036] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 180.669620][ T5756] XFS (loop3): Unmounting Filesystem [ 180.832448][ T6045] loop2: detected capacity change from 0 to 32768 [ 180.907429][ T5340] attempt to access beyond end of device [ 180.907429][ T5340] loop1: rw=2049, want=45104, limit=40427 [ 180.985639][ T6045] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.693 (6045) [ 181.015072][ T6075] netlink: 40 bytes leftover after parsing attributes in process `syz.4.699'. [ 181.118609][ T6075] netlink: 32 bytes leftover after parsing attributes in process `syz.4.699'. [ 181.150832][ T6080] netlink: 100 bytes leftover after parsing attributes in process `syz.0.700'. [ 181.170331][ T6045] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 181.184949][ T6083] netlink: 32 bytes leftover after parsing attributes in process `syz.4.699'. [ 181.210637][ T6045] BTRFS info (device loop2): enabling auto defrag [ 181.234507][ T6045] BTRFS info (device loop2): max_inline at 0 [ 181.240554][ T6045] BTRFS info (device loop2): enabling ssd optimizations [ 181.272128][ T6075] netlink: 32 bytes leftover after parsing attributes in process `syz.4.699'. [ 181.296794][ T6045] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 181.351108][ T6045] BTRFS info (device loop2): use lzo compression, level 0 [ 181.379994][ T6045] BTRFS info (device loop2): using free space tree [ 181.442534][ T6045] BTRFS info (device loop2): has skinny extents [ 181.861480][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 182.222917][ T6117] loop1: detected capacity change from 0 to 16 [ 182.292063][ T6117] erofs: (device loop1): mounted with root inode @ nid 36. [ 182.306104][ T6045] BTRFS error (device loop2): open_ctree failed [ 182.333411][ T6117] attempt to access beyond end of device [ 182.333411][ T6117] loop1: rw=0, want=1049264, limit=16 [ 182.504688][ T1065] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 182.884624][ T1065] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 182.893730][ T1065] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.936628][ T1065] usb 5-1: config 0 descriptor?? [ 183.287823][ T6143] loop3: detected capacity change from 0 to 64 [ 183.401238][ T6116] PKCS7: Unknown OID: [4] 2.19.13055.940354.15722 [ 183.438785][ T6116] PKCS7: Only support pkcs7_signedData type [ 183.440401][ T6149] binder: 6148:6149 ioctl 4018620d 0 returned -22 [ 183.454712][ T1065] hackrf 5-1:0.0: Board ID: 00 [ 183.462940][ T1065] hackrf 5-1:0.0: Firmware version: [ 183.535845][ T1065] hackrf 5-1:0.0: Registered as swradio16 [ 183.557956][ T1065] hackrf 5-1:0.0: Registered as swradio17 [ 183.567916][ T1065] hackrf 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 183.708428][ T1065] usb 5-1: USB disconnect, device number 6 [ 183.835810][ T6124] loop1: detected capacity change from 0 to 40427 [ 183.943888][ T6124] F2FS-fs (loop1): Found nat_bits in checkpoint [ 184.063453][ T6141] loop0: detected capacity change from 0 to 32768 [ 184.070171][ T6124] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 184.129797][ T6141] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.718 (6141) [ 184.140999][ T5340] attempt to access beyond end of device [ 184.140999][ T5340] loop1: rw=2049, want=45104, limit=40427 [ 184.171641][ T6141] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 184.185198][ T6141] BTRFS info (device loop0): enabling auto defrag [ 184.213473][ T6141] BTRFS info (device loop0): max_inline at 0 [ 184.232545][ T6141] BTRFS info (device loop0): enabling ssd optimizations [ 184.274458][ T6141] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 184.283767][ T6141] BTRFS info (device loop0): use lzo compression, level 0 [ 184.305837][ T6141] BTRFS info (device loop0): using free space tree [ 184.324516][ T6141] BTRFS info (device loop0): has skinny extents [ 184.833000][ T6162] loop3: detected capacity change from 0 to 32768 [ 184.852321][ T6196] loop2: detected capacity change from 0 to 64 [ 185.104562][ T6162] XFS (loop3): Mounting V5 Filesystem [ 186.049795][ T6162] XFS (loop3): Ending clean mount [ 186.092608][ T6162] XFS (loop3): Quotacheck needed: Please wait. [ 186.196881][ T6162] XFS (loop3): Quotacheck: Done. [ 186.202398][ T6211] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 186.242109][ T5756] XFS (loop3): Unmounting Filesystem [ 186.254182][ T6211] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 186.854033][ T6236] loop0: detected capacity change from 0 to 16 [ 186.931079][ T6236] erofs: (device loop0): mounted with root inode @ nid 36. [ 186.971780][ T6236] attempt to access beyond end of device [ 186.971780][ T6236] loop0: rw=0, want=1049264, limit=16 [ 187.183833][ T6244] loop0: detected capacity change from 0 to 1024 [ 187.368118][ T6244] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 188.386652][ T5013] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 188.484312][ T6272] loop2: detected capacity change from 0 to 16 [ 188.521188][ T6272] erofs: (device loop2): mounted with root inode @ nid 36. [ 188.557530][ T6272] attempt to access beyond end of device [ 188.557530][ T6272] loop2: rw=0, want=1049264, limit=16 [ 188.672457][ T6276] netlink: 40 bytes leftover after parsing attributes in process `syz.1.757'. [ 188.723505][ T6276] netlink: 32 bytes leftover after parsing attributes in process `syz.1.757'. [ 188.746658][ T6276] netlink: 32 bytes leftover after parsing attributes in process `syz.1.757'. [ 188.773751][ T6278] loop2: detected capacity change from 0 to 512 [ 188.775389][ T6276] netlink: 32 bytes leftover after parsing attributes in process `syz.1.757'. [ 188.804890][ T5013] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.831781][ T5013] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.864559][ T5013] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 188.900617][ T6278] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.758: casefold flag without casefold feature [ 188.913618][ T5013] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.932660][ T6278] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #2: comm syz.2.758: missing EA_INODE flag [ 188.956510][ T5013] usb 1-1: config 0 descriptor?? [ 188.964305][ T6278] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.758: error while reading EA inode 2 err=-117 [ 189.063594][ T6278] EXT4-fs (loop2): 1 orphan inode deleted [ 189.071883][ T6278] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 189.469536][ T6290] overlayfs: failed to create directory ./bus/work (errno: 126); mounting read-only [ 189.511203][ T5013] itetech 0003:258A:6A88.0003: item fetching failed at offset 0/1 [ 189.617057][ T5013] itetech: probe of 0003:258A:6A88.0003 failed with error -22 [ 189.654827][ T5013] usb 1-1: USB disconnect, device number 5 [ 189.679321][ T6289] loop1: detected capacity change from 0 to 1024 [ 190.089644][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.762'. [ 190.315316][ T6289] hfsplus: xattr searching failed [ 190.321157][ T26] audit: type=1800 audit(1721041987.309:93): pid=6289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.762" name="bus" dev="loop1" ino=25 res=0 errno=0 [ 190.382504][ T6289] hfsplus: xattr searching failed [ 190.500899][ T6296] loop0: detected capacity change from 0 to 2048 [ 190.851007][ T6307] loop2: detected capacity change from 0 to 16 [ 190.975536][ T6307] erofs: (device loop2): mounted with root inode @ nid 36. [ 191.007093][ T6307] attempt to access beyond end of device [ 191.007093][ T6307] loop2: rw=0, want=1049264, limit=16 [ 191.994506][ T5013] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 192.264659][ T5013] usb 1-1: Using ep0 maxpacket: 16 [ 192.395302][ T5013] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 192.412792][ T5013] usb 1-1: config 0 has no interface number 0 [ 192.444871][ T5013] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 82, changing to 10 [ 192.500131][ T5013] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 17491, setting to 1024 [ 192.719988][ T6312] loop2: detected capacity change from 0 to 32768 [ 192.810127][ T6331] loop1: detected capacity change from 0 to 2048 [ 192.821932][ T6312] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.770 (6312) [ 192.864676][ T5013] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 192.884143][ T5013] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 192.917321][ T5013] usb 1-1: Product: syz [ 192.921540][ T5013] usb 1-1: Manufacturer: syz [ 192.930368][ T5013] usb 1-1: SerialNumber: syz [ 192.939942][ T5013] usb 1-1: config 0 descriptor?? [ 192.957024][ T6312] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 192.966760][ T6322] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 192.998438][ T6312] BTRFS info (device loop2): using free space tree [ 193.006850][ T5013] keyspan 1-1:0.107: Keyspan 4 port adapter converter detected [ 193.021241][ T6341] blktrace: Concurrent blktraces are not allowed on sg0 [ 193.031052][ T6312] BTRFS info (device loop2): has skinny extents [ 193.035160][ T5013] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 81 [ 193.096086][ T5013] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 1 [ 193.129571][ T5013] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 193.188961][ T5013] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 2 [ 193.210834][ T6352] loop4: detected capacity change from 0 to 8 [ 193.214983][ T5013] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 193.310432][ T5013] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 4 [ 193.330285][ T5013] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 193.377784][ T5013] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6 [ 193.403794][ T5013] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 193.420582][ T6312] BTRFS info (device loop2): enabling ssd optimizations [ 193.425212][ T5013] usb 1-1: USB disconnect, device number 6 [ 193.570279][ T5013] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 193.600069][ T5013] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 193.622913][ T5013] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 193.637747][ T5013] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 193.670941][ T5013] keyspan 1-1:0.107: device disconnected [ 194.170630][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.177121][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.311437][ T6388] netlink: 104 bytes leftover after parsing attributes in process `syz.3.790'. [ 194.363661][ T6312] BTRFS error (device loop2): unrecognized mount option 'ÿÿÿÿ017777777777777777777770177777777777777777777701777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 195.223038][ T6384] loop0: detected capacity change from 0 to 40427 [ 195.417990][ T6384] F2FS-fs (loop0): Found nat_bits in checkpoint [ 195.560647][ T6384] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 195.643053][ T6416] input: syz1 as /devices/virtual/input/input12 [ 195.708949][ T6419] loop4: detected capacity change from 0 to 128 [ 195.721923][ T3510] attempt to access beyond end of device [ 195.721923][ T3510] loop0: rw=2049, want=45104, limit=40427 [ 195.814537][ T6419] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 195.903439][ T6419] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 195.982919][ T6424] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 195.989485][ T6423] device syzkaller0 entered promiscuous mode [ 196.234491][ T5267] Bluetooth: hci4: command 0x0406 tx timeout [ 197.284675][ T5267] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 197.443032][ T6451] input: syz1 as /devices/virtual/input/input13 [ 197.637163][ T6455] loop3: detected capacity change from 0 to 128 [ 197.659551][ T6448] loop0: detected capacity change from 0 to 8192 [ 197.734758][ T5267] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 197.738352][ T6455] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 197.805886][ T6448] loop0: p1 < > p4 [ 197.809751][ T6448] loop0: partition table partially beyond EOD, truncated [ 197.824622][ T6448] loop0: p1 start 295168 is beyond EOD, truncated [ 197.835267][ T5267] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 197.851941][ T6448] loop0: p4 start 16777216 is beyond EOD, truncated [ 197.854445][ T5267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 197.884499][ T5267] usb 5-1: SerialNumber: syz [ 198.033030][ T26] audit: type=1800 audit(1721041995.019:94): pid=6455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.813" name="bus" dev="loop3" ino=115 res=0 errno=0 [ 198.113241][ T6464] device syzkaller0 entered promiscuous mode [ 198.272682][ T6466] netlink: 'syz.3.818': attribute type 8 has an invalid length. [ 198.280609][ T5271] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 198.350409][ T6468] loop3: detected capacity change from 0 to 256 [ 198.483993][ T6468] FAT-fs (loop3): Directory bread(block 64) failed [ 198.509427][ T6468] FAT-fs (loop3): Directory bread(block 65) failed [ 198.521442][ T6468] FAT-fs (loop3): Directory bread(block 66) failed [ 198.534590][ T5271] usb 3-1: Using ep0 maxpacket: 16 [ 198.550928][ T6468] FAT-fs (loop3): Directory bread(block 67) failed [ 198.580090][ T6479] input: syz1 as /devices/virtual/input/input14 [ 198.601404][ T5267] cdc_ether 5-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.4-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 198.614875][ T6468] FAT-fs (loop3): Directory bread(block 68) failed [ 198.621438][ T6468] FAT-fs (loop3): Directory bread(block 69) failed [ 198.637895][ T6468] FAT-fs (loop3): Directory bread(block 70) failed [ 198.727910][ T6468] FAT-fs (loop3): Directory bread(block 71) failed [ 198.768875][ T6468] FAT-fs (loop3): Directory bread(block 72) failed [ 198.789220][ T5267] usb 5-1: USB disconnect, device number 7 [ 198.805659][ T5267] cdc_ether 5-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.4-1, Mobile Broadband Network Device [ 198.827038][ T5271] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 198.836586][ T6468] FAT-fs (loop3): Directory bread(block 73) failed [ 198.845518][ T5271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.866407][ T5271] usb 3-1: Product: syz [ 198.871329][ T5271] usb 3-1: Manufacturer: syz [ 198.895603][ T6492] loop0: detected capacity change from 0 to 128 [ 198.910633][ T5271] usb 3-1: SerialNumber: syz [ 198.934000][ T5271] usb 3-1: config 0 descriptor?? [ 198.986938][ T5271] usb 3-1: Found UVC 0.00 device syz (045e:0721) [ 198.993349][ T5271] usb 3-1: No valid video chain found. [ 199.034783][ T6492] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 199.054911][ T6492] ext4 filesystem being mounted at /186/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 199.239249][ T3545] usb 3-1: USB disconnect, device number 8 [ 200.782055][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.831'. [ 200.806521][ T6532] input: syz1 as /devices/virtual/input/input15 [ 201.011685][ T6544] loop2: detected capacity change from 0 to 128 [ 201.053769][ T6527] netlink: 'syz.3.831': attribute type 6 has an invalid length. [ 201.156686][ T6544] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 201.190007][ T6544] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 201.394528][ T5267] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 201.447243][ T6553] capability: warning: `syz.3.842' uses 32-bit capabilities (legacy support in use) [ 201.516240][ T6553] program syz.3.842 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.606580][ T6557] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 201.757127][ T5267] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 201.879363][ T5267] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.909678][ T5267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 201.922936][ T6559] loop2: detected capacity change from 0 to 8192 [ 201.929161][ T5267] usb 5-1: SerialNumber: syz [ 201.980409][ T6559] loop2: p1 < > p4 [ 202.020943][ T6559] loop2: partition table partially beyond EOD, truncated [ 202.044116][ T6559] loop2: p1 start 295168 is beyond EOD, truncated [ 202.070216][ T6559] loop2: p4 start 16777216 is beyond EOD, truncated [ 202.440867][ T6581] netlink: 20 bytes leftover after parsing attributes in process `syz.2.854'. [ 202.655069][ T5267] cdc_ether 5-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.4-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 202.745030][ T6584] loop2: detected capacity change from 0 to 4096 [ 202.873901][ T3545] usb 5-1: USB disconnect, device number 8 [ 202.893480][ T3545] cdc_ether 5-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.4-1, Mobile Broadband Network Device [ 202.915465][ T6587] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 203.351628][ T6571] loop3: detected capacity change from 0 to 32768 [ 204.187015][ T6620] loop2: detected capacity change from 0 to 256 [ 204.282956][ T6621] ------------[ cut here ]------------ [ 204.307015][ T6620] FAT-fs (loop2): Directory bread(block 64) failed [ 204.313848][ T6621] WARNING: CPU: 1 PID: 6621 at net/mac80211/rate.c:282 ieee80211_check_rate_mask+0x23b/0x3b0 [ 204.313960][ T6621] Modules linked in: [ 204.313982][ T6621] CPU: 1 PID: 6621 Comm: syz.4.866 Not tainted 5.15.162-syzkaller #0 [ 204.384729][ T6621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 204.401647][ T6621] RIP: 0010:ieee80211_check_rate_mask+0x23b/0x3b0 [ 204.408182][ T6620] FAT-fs (loop2): Directory bread(block 65) failed [ 204.408293][ T6620] FAT-fs (loop2): Directory bread(block 66) failed [ 204.408329][ T6620] FAT-fs (loop2): Directory bread(block 67) failed [ 204.408400][ T6620] FAT-fs (loop2): Directory bread(block 68) failed [ 204.408435][ T6620] FAT-fs (loop2): Directory bread(block 69) failed [ 204.408554][ T6620] FAT-fs (loop2): Directory bread(block 70) failed [ 204.408603][ T6620] FAT-fs (loop2): Directory bread(block 71) failed [ 204.408673][ T6620] FAT-fs (loop2): Directory bread(block 72) failed [ 204.408706][ T6620] FAT-fs (loop2): Directory bread(block 73) failed [ 204.535051][ T6621] Code: b6 04 38 84 c0 0f 85 99 00 00 00 89 2a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ce 1a d2 f7 0f 0b eb e8 e8 c5 1a d2 f7 <0f> 0b eb df 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 0a fe ff ff e8 8c [ 204.588700][ T6621] RSP: 0018:ffffc90002dd7270 EFLAGS: 00010287 [ 204.627363][ T6621] RAX: ffffffff89ae409b RBX: ffff888061cccc80 RCX: 0000000000040000 [ 204.658945][ T6621] RDX: ffffc9000c946000 RSI: 000000000000028f RDI: 0000000000000290 [ 204.668501][ T6621] RBP: ffff88807e0fb550 R08: ffffffff89ae3f29 R09: ffffffff89b02206 [ 204.677180][ T6621] R10: 0000000000000002 R11: ffff88801cc61dc0 R12: 0000000000000000 [ 204.685671][ T6621] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88807e0f8da0 [ 204.693829][ T6621] FS: 00007ff29e79d6c0(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 204.711211][ T6621] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 204.719888][ T6621] CR2: 0000001b3060aff8 CR3: 00000000642ca000 CR4: 00000000003506e0 [ 204.739382][ T6621] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 204.774148][ T6621] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 204.782844][ T6621] Call Trace: [ 204.792623][ T6621] [ 204.796668][ T6621] ? __warn+0x15b/0x300 [ 204.801044][ T6621] ? ieee80211_check_rate_mask+0x23b/0x3b0 [ 204.825542][ T6621] ? report_bug+0x1b7/0x2e0 [ 204.844100][ T6621] ? handle_bug+0x3d/0x70 [ 204.849156][ T6621] ? exc_invalid_op+0x16/0x40 [ 204.854068][ T6621] ? asm_exc_invalid_op+0x16/0x20 [ 204.861393][ T6621] ? ieee80211_change_bss+0x276/0x910 [ 204.867741][ T6621] ? ieee80211_check_rate_mask+0xc9/0x3b0 [ 204.873647][ T6621] ? ieee80211_check_rate_mask+0x23b/0x3b0 [ 204.888051][ T6621] ? ieee80211_check_rate_mask+0x23b/0x3b0 [ 204.894026][ T6621] ieee80211_change_bss+0x462/0x910 [ 204.903647][ T6621] nl80211_set_bss+0x84c/0xce0 [ 204.911390][ T6621] ? nl80211_del_mpath+0x3a0/0x3a0 [ 204.921902][ T6621] genl_rcv_msg+0xfbd/0x14a0 [ 204.927076][ T6621] ? genl_bind+0x420/0x420 [ 204.931608][ T6621] ? local_bh_enable+0x5/0x20 [ 204.938767][ T6621] ? mark_lock+0x98/0x340 [ 204.943136][ T6621] ? __lock_acquire+0x1295/0x1ff0 [ 204.948308][ T6621] ? nl80211_del_mpath+0x3a0/0x3a0 [ 204.953685][ T6621] netlink_rcv_skb+0x1cf/0x410 [ 204.959268][ T6621] ? genl_bind+0x420/0x420 [ 204.963751][ T6621] ? netlink_ack+0xb10/0xb10 [ 204.969806][ T6621] ? down_read+0x1b3/0x2e0 [ 204.974232][ T6621] ? genl_rcv+0x9/0x40 [ 204.978552][ T6621] genl_rcv+0x24/0x40 [ 204.982731][ T6621] netlink_unicast+0x7b6/0x980 [ 204.987566][ T6621] ? netlink_detachskb+0x90/0x90 [ 204.992523][ T6621] ? __virt_addr_valid+0x39e/0x450 [ 204.997704][ T6621] ? 0xffffffff81000000 [ 205.001867][ T6621] ? __check_object_size+0x300/0x410 [ 205.007210][ T6621] ? bpf_lsm_netlink_send+0x5/0x10 [ 205.012453][ T6621] netlink_sendmsg+0xa30/0xd60 [ 205.017721][ T6621] ? netlink_getsockopt+0x5b0/0x5b0 [ 205.023976][ T6621] ? futex_wait+0x634/0x740 [ 205.028615][ T6621] ? aa_sock_msg_perm+0x91/0x150 [ 205.033585][ T6621] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 205.050988][ T6621] ? security_socket_sendmsg+0x7d/0xa0 [ 205.057296][ T6621] ? netlink_getsockopt+0x5b0/0x5b0 [ 205.062538][ T6621] ____sys_sendmsg+0x59e/0x8f0 [ 205.067491][ T6621] ? iovec_from_user+0x300/0x390 [ 205.072476][ T6621] ? __sys_sendmsg_sock+0x30/0x30 [ 205.082546][ T6621] ___sys_sendmsg+0x252/0x2e0 [ 205.087331][ T6621] ? __sys_sendmsg+0x260/0x260 [ 205.092148][ T6621] ? __fdget+0x191/0x220 [ 205.100547][ T6621] __se_sys_sendmsg+0x19a/0x260 [ 205.105508][ T6621] ? __x64_sys_sendmsg+0x80/0x80 [ 205.110497][ T6621] ? syscall_enter_from_user_mode+0x2e/0x240 [ 205.120604][ T6621] ? lockdep_hardirqs_on+0x94/0x130 [ 205.126509][ T6621] ? syscall_enter_from_user_mode+0x2e/0x240 [ 205.132546][ T6621] do_syscall_64+0x3b/0xb0 [ 205.137122][ T6621] ? clear_bhb_loop+0x15/0x70 [ 205.141832][ T6621] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 205.147815][ T6621] RIP: 0033:0x7ff29fd1cbd9 [ 205.152249][ T6621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.172749][ T6621] RSP: 002b:00007ff29e79d048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.181250][ T6621] RAX: ffffffffffffffda RBX: 00007ff29feaaf60 RCX: 00007ff29fd1cbd9 [ 205.190324][ T6621] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000005 [ 205.198482][ T6621] RBP: 00007ff29fd8be60 R08: 0000000000000000 R09: 0000000000000000 [ 205.206561][ T6621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.214586][ T6621] R13: 000000000000000b R14: 00007ff29feaaf60 R15: 00007ffeddafda58 [ 205.222581][ T6621] [ 205.226233][ T6621] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 205.233541][ T6621] CPU: 0 PID: 6621 Comm: syz.4.866 Not tainted 5.15.162-syzkaller #0 [ 205.241620][ T6621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 205.251672][ T6621] Call Trace: [ 205.254964][ T6621] [ 205.257912][ T6621] dump_stack_lvl+0x1e3/0x2d0 [ 205.262607][ T6621] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 205.268319][ T6621] ? panic+0x860/0x860 [ 205.272409][ T6621] ? ieee80211_check_rate_mask+0x1a0/0x3b0 [ 205.278215][ T6621] ? ieee80211_check_rate_mask+0x1a0/0x3b0 [ 205.284126][ T6621] panic+0x318/0x860 [ 205.288034][ T6621] ? __warn+0x16a/0x300 [ 205.292193][ T6621] ? fb_is_primary_device+0xd0/0xd0 [ 205.297408][ T6621] ? ieee80211_check_rate_mask+0x23b/0x3b0 [ 205.303227][ T6621] __warn+0x2b2/0x300 [ 205.307206][ T6621] ? ieee80211_check_rate_mask+0x23b/0x3b0 [ 205.313010][ T6621] report_bug+0x1b7/0x2e0 [ 205.317346][ T6621] handle_bug+0x3d/0x70 [ 205.321532][ T6621] exc_invalid_op+0x16/0x40 [ 205.326034][ T6621] asm_exc_invalid_op+0x16/0x20 [ 205.330918][ T6621] RIP: 0010:ieee80211_check_rate_mask+0x23b/0x3b0 [ 205.337368][ T6621] Code: b6 04 38 84 c0 0f 85 99 00 00 00 89 2a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ce 1a d2 f7 0f 0b eb e8 e8 c5 1a d2 f7 <0f> 0b eb df 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 0a fe ff ff e8 8c [ 205.356992][ T6621] RSP: 0018:ffffc90002dd7270 EFLAGS: 00010287 [ 205.363108][ T6621] RAX: ffffffff89ae409b RBX: ffff888061cccc80 RCX: 0000000000040000 [ 205.371097][ T6621] RDX: ffffc9000c946000 RSI: 000000000000028f RDI: 0000000000000290 [ 205.379083][ T6621] RBP: ffff88807e0fb550 R08: ffffffff89ae3f29 R09: ffffffff89b02206 [ 205.387188][ T6621] R10: 0000000000000002 R11: ffff88801cc61dc0 R12: 0000000000000000 [ 205.395173][ T6621] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88807e0f8da0 [ 205.403159][ T6621] ? ieee80211_change_bss+0x276/0x910 [ 205.408531][ T6621] ? ieee80211_check_rate_mask+0xc9/0x3b0 [ 205.414248][ T6621] ? ieee80211_check_rate_mask+0x23b/0x3b0 [ 205.420067][ T6621] ieee80211_change_bss+0x462/0x910 [ 205.425298][ T6621] nl80211_set_bss+0x84c/0xce0 [ 205.430101][ T6621] ? nl80211_del_mpath+0x3a0/0x3a0 [ 205.435237][ T6621] genl_rcv_msg+0xfbd/0x14a0 [ 205.439856][ T6621] ? genl_bind+0x420/0x420 [ 205.444279][ T6621] ? local_bh_enable+0x5/0x20 [ 205.448955][ T6621] ? mark_lock+0x98/0x340 [ 205.453280][ T6621] ? __lock_acquire+0x1295/0x1ff0 [ 205.458315][ T6621] ? nl80211_del_mpath+0x3a0/0x3a0 [ 205.463450][ T6621] netlink_rcv_skb+0x1cf/0x410 [ 205.468211][ T6621] ? genl_bind+0x420/0x420 [ 205.472666][ T6621] ? netlink_ack+0xb10/0xb10 [ 205.477276][ T6621] ? down_read+0x1b3/0x2e0 [ 205.481713][ T6621] ? genl_rcv+0x9/0x40 [ 205.485797][ T6621] genl_rcv+0x24/0x40 [ 205.489771][ T6621] netlink_unicast+0x7b6/0x980 [ 205.494541][ T6621] ? netlink_detachskb+0x90/0x90 [ 205.499494][ T6621] ? __virt_addr_valid+0x39e/0x450 [ 205.504622][ T6621] ? 0xffffffff81000000 [ 205.508786][ T6621] ? __check_object_size+0x300/0x410 [ 205.514066][ T6621] ? bpf_lsm_netlink_send+0x5/0x10 [ 205.519183][ T6621] netlink_sendmsg+0xa30/0xd60 [ 205.523971][ T6621] ? netlink_getsockopt+0x5b0/0x5b0 [ 205.529170][ T6621] ? futex_wait+0x634/0x740 [ 205.533690][ T6621] ? aa_sock_msg_perm+0x91/0x150 [ 205.538646][ T6621] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 205.543963][ T6621] ? security_socket_sendmsg+0x7d/0xa0 [ 205.549419][ T6621] ? netlink_getsockopt+0x5b0/0x5b0 [ 205.554617][ T6621] ____sys_sendmsg+0x59e/0x8f0 [ 205.559400][ T6621] ? iovec_from_user+0x300/0x390 [ 205.564381][ T6621] ? __sys_sendmsg_sock+0x30/0x30 [ 205.569442][ T6621] ___sys_sendmsg+0x252/0x2e0 [ 205.574154][ T6621] ? __sys_sendmsg+0x260/0x260 [ 205.578972][ T6621] ? __fdget+0x191/0x220 [ 205.583237][ T6621] __se_sys_sendmsg+0x19a/0x260 [ 205.588114][ T6621] ? __x64_sys_sendmsg+0x80/0x80 [ 205.593076][ T6621] ? syscall_enter_from_user_mode+0x2e/0x240 [ 205.599061][ T6621] ? lockdep_hardirqs_on+0x94/0x130 [ 205.604281][ T6621] ? syscall_enter_from_user_mode+0x2e/0x240 [ 205.610260][ T6621] do_syscall_64+0x3b/0xb0 [ 205.614678][ T6621] ? clear_bhb_loop+0x15/0x70 [ 205.619393][ T6621] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 205.625302][ T6621] RIP: 0033:0x7ff29fd1cbd9 [ 205.629721][ T6621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.649343][ T6621] RSP: 002b:00007ff29e79d048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.657766][ T6621] RAX: ffffffffffffffda RBX: 00007ff29feaaf60 RCX: 00007ff29fd1cbd9 [ 205.665751][ T6621] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000005 [ 205.673732][ T6621] RBP: 00007ff29fd8be60 R08: 0000000000000000 R09: 0000000000000000 [ 205.681713][ T6621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.689815][ T6621] R13: 000000000000000b R14: 00007ff29feaaf60 R15: 00007ffeddafda58 [ 205.697829][ T6621] [ 205.701167][ T6621] Kernel Offset: disabled [ 205.705786][ T6621] Rebooting in 86400 seconds..