last executing test programs: 17m28.272316345s ago: executing program 4 (id=140): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x14, r1, 0x1, 0x120, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004051}, 0x4040) 17m27.414858671s ago: executing program 4 (id=145): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000980}, 0x44020) 17m26.447971928s ago: executing program 4 (id=150): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r0) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x240008c0}, 0x40004) 17m25.451101638s ago: executing program 4 (id=153): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a18800, &(0x7f0000000140)=ANY=[], 0x1, 0x67c, &(0x7f0000000580)="$eJzs3c1rHOcdB/DvrFay5IKjJLaTlkBFDGmpqa0XlFa9xO2h6BBKcA+h0Iuw5Vh4rQRJKUoorfp+7SF/QHrQodBLC70bUuip7S30JnoogUIvOemmMrOz0sp6ya6sF6v5fMzsPDPP6/x25hnNLmYDfG7NXk/zUYrMXn99tdzeWJ9qbaxPXaizW0nKdCNptlcpFpPio+RW2ku+WO6syxcH9fPBwsztjz/d+KS91ayXqnzjsHq9WauXjCUZqNd7DR6pvTsHtne4ue1UsX2EZcCudQIHZ21rj7V+qj/hdQs8DYr2fXOP0eRikuH674DUs0PjdEd3/Pqa5QAAAOCcemYzm1nNpbMeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJwnxe5ko14XYyk6v/8/1FWsTN9unNVg+7J1Yb+9j05/IAAAAAAAAABw7L68mc2s5lJne6v9zf7L1evl6vULeTfLmc9SbmQ1c1nJSpYykWS0q6Gh1bmVlaWJHmpO7ltz8mjj/+PRqgEAAAAAAADA/5ufZ3bn+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgaFMlAe1Utlzvp0TSaSYaTDJXl1pJ/dNLnRLHfzkenPw4AAAB4IsNHqPPMZjazmkud7a2ieua/Wj0vD+fdLGYlC1lJK/O5Wz9Dl0/9jY31qdbG+tTDjfWpquMfbrW12/n2f/saRtVi2p897N/zi1WJkdzLQrXnRu5Ug7mbRlWz9GI9nu1ldyc/K8c08lqtx5HdrddlZ7896FOE49Dot8JoVWlwOyLj9djKhp49PBKf+e40D+1pIo3tT34uH9JT55CKPmN+sVMvya8fi/lr//79D3ps5gRsR6KRKhKTXWff1cNjnnzlz394835r8cH9e8vXT+w0Oi2PnxNTXZF44VxHotln+fEqEle2t2fz3Xw/1zOWN7KUhfwoc1nJfOqZMXP1+Vy+jnZFKdkTqVu7tt74rJEM1e9LexbtZUxjuVCl5vJyVfdSFlLk7dzNfF6t/k1mIt/IdKYz0/UOXznwHa6OrZppG/1d9de+mp1L/TflTN1bveSvvRbsX/uWWsb12a64ds+5o1Ve956dKD3Xw/2oz7mx+aU6Ufbxi6PcNk7M45GY6IrE84dH4nfVtbHcWnywdH/unQPaX3ts+5XBnfSvTvLO3LfyfHkuw/VMsvvsKPOe355ldsdrqP7GpZ3X2JN3pcoris6V+r19rtQy4jNV6av7tjRZ5b2wN2+gHvk//9WVt+vvrbz9t7OJJwB9uvi1i0Mj/xn5+8iHI78cuT/y+vB3LnzzwktDGfzL4Lea4wOvNF4q/pQP85Od538AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODolt97/8FcqzW/tH+icXDW8SaK+od8DirTzEhOYRinmSiStWNvOWd/XD0kOj8i+KTtvHnrqTicc50YSFLv+Wmyc/7Ub9FRflwUOBdurjx85+bye+9/feHh3Fvzb80vDk5Pz4zPTL86dfPeQmt+vP161qMETsLO3wNnPRIAAAAAAAAAAACgV6fxPw26uhs7w0MFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzqnZ62kOpsjE+I3xcntjfapVLp30TslmkkYjKX6cFB8lt9JeMtrVXHFQPx8szNz++NONT3baanbKNw6r15u1eslYkoF6vcfQ0dq7c1B7PSu2j7AM2LVO4OCs/S8AAP//tyUHyQ==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) setxattr$security_evm(&(0x7f0000000280)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) 17m24.250995032s ago: executing program 4 (id=158): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001ac0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 17m23.614706548s ago: executing program 4 (id=161): r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000001940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x18, 0x1, 0x2, {r0, 0xee00}}}], 0x18, 0x8000}}], 0x1, 0x0) 17m20.812854813s ago: executing program 32 (id=161): r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000001940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x18, 0x1, 0x2, {r0, 0xee00}}}], 0x18, 0x8000}}], 0x1, 0x0) 14m5.688660492s ago: executing program 0 (id=885): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x1, 0xffff, 0x46de}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000052000100000000000000000002200000080006"], 0x1c}}, 0x0) 14m4.901920667s ago: executing program 0 (id=889): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x6a, 0x3, 0x0, &(0x7f0000000180)) 14m4.045181126s ago: executing program 0 (id=893): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xfff9, 0x8008000, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) 14m3.136619356s ago: executing program 0 (id=897): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x3, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@uuid_null}], [], 0x2c}) 14m1.863819759s ago: executing program 0 (id=902): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x40, 0x52}}, 0x1c}}, 0x0) 14m0.980517439s ago: executing program 0 (id=907): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x106f) 13m58.872024543s ago: executing program 33 (id=907): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x106f) 12m3.7835698s ago: executing program 2 (id=1410): syz_mount_image$sysv(&(0x7f0000000080), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x83, &(0x7f0000000100)=ANY=[@ANYRES16], 0xa1, 0x9e84, &(0x7f000000a180)="$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") open(&(0x7f00000001c0)='./file0\x00', 0x14967d, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) 12m2.670191382s ago: executing program 2 (id=1415): ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)={"fe080800", 0x0, 0x6, 0x2, 0x0, 0x200, "3377f877c734c4f928875ab8db00", "b800", "020100", '\x00\x00\t\x00', ["a51c00a60100", "00000000fa66ee4000000200", "2c09000000ffd8ffff0000ff", "000500"]}) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) 12m1.430852375s ago: executing program 2 (id=1419): r0 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x4c092, r0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1000, 0x7ff, 0x0) 12m0.510425728s ago: executing program 2 (id=1424): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c666c7573682c646d61736b3d30303030303030303030303030303030303137373737372c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c757466383d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d312c726f6469722c696f636861727365743d757466382c666d61736b3d30303030303030303030303030303030303030303030342c646d61736b3d30303030303030303030303030303030303030303030372c757466383d312c726f6469722c73686f72746e616d653d77696e39352c726f6469722c00743ccfec81d6c7d05b0f2a54ddce151ec4cbbaacb9552647fd950fedfdc024b3953e7669bc9d4f66e3beaecb80fe73633280b1d3e82023d4f5c7f5a4989406c0f0d0cf537f132dc1e63d84a17532cb78ae7a368bc0029207b9b166705972f4e8dad041e6be170bf43057b456d43f100c53b471aa6c8e3751"], 0x6, 0x2a4, &(0x7f0000002680)="$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") syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000001c0)='./file0\x00', 0x89d8acdc520a1335, 0xffffffffffffffff, 0x40, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 11m59.308173273s ago: executing program 2 (id=1430): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00'}) ioperm(0x5, 0x3d, 0x80000000001f) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 11m58.452271066s ago: executing program 2 (id=1435): mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x5) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) 11m55.409482884s ago: executing program 34 (id=1435): mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x5) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) 5m38.17984392s ago: executing program 6 (id=2830): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r0) 5m36.081537924s ago: executing program 6 (id=2839): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x8}]}, 0x6c}}, 0x0) 5m34.947323363s ago: executing program 6 (id=2842): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5m33.84231546s ago: executing program 6 (id=2845): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0x1}, 0x1c) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4001) 5m32.48363538s ago: executing program 6 (id=2851): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f00000007c0)) 5m31.404791532s ago: executing program 6 (id=2854): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={r1, 0x7}, &(0x7f00000000c0)=0x8) 5m15.863392467s ago: executing program 35 (id=2854): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={r1, 0x7}, &(0x7f00000000c0)=0x8) 1m13.162536753s ago: executing program 3 (id=3660): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0x2, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000140)=0xfffffffd, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)=""/31, &(0x7f0000000000)=0xb) 1m11.999685632s ago: executing program 3 (id=3664): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x24, r1, 0x1, 0x70bd24, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x380b}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3aa755b6) 1m10.540683652s ago: executing program 3 (id=3669): r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0xf45) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), 0x4) 1m8.631513103s ago: executing program 3 (id=3675): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) rmdir(&(0x7f0000000580)='./file1\x00') 1m7.382420658s ago: executing program 3 (id=3680): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) 1m4.967617309s ago: executing program 3 (id=3687): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000002200f30c0000000000feff00760000000f00001e37000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x931, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x1, 0x328}) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0, 0x0, 0x10}, {0x0}, {0x0, 0x0, 0xfffe}]}, 0x3}, 0x1) 1m1.665248634s ago: executing program 36 (id=3687): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000002200f30c0000000000feff00760000000f00001e37000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x931, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x1, 0x328}) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0, 0x0, 0x10}, {0x0}, {0x0, 0x0, 0xfffe}]}, 0x3}, 0x1) 9.214197443s ago: executing program 1 (id=3836): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @local}}, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x55}, 0x9c) 8.769764162s ago: executing program 5 (id=3838): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0xff00}, 0x0, r1}) 8.085966825s ago: executing program 9 (id=3839): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) futex(&(0x7f000000cffc), 0x6, 0x0, 0x0, 0x0, 0x0) 7.568322385s ago: executing program 5 (id=3841): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) 7.250816607s ago: executing program 1 (id=3842): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001000000", @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r0}, 0x38) unshare(0x22020400) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) 7.028871536s ago: executing program 7 (id=3843): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) 6.990286511s ago: executing program 9 (id=3844): syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) 6.839252913s ago: executing program 8 (id=3845): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000000540)=[{&(0x7f0000000100)='y\'', 0x2}], 0x1, 0xc) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x12, 0x4) 5.978233072s ago: executing program 5 (id=3846): sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) 5.72924466s ago: executing program 9 (id=3847): r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc0f8565c, &(0x7f0000000200)={0x6, 0x4, 0x2, {0x2, @raw_data="d85f55173ebb003acb4c5ad0c7c6052fabc7eca64d7c4e14527722c742500920626064643f3c9cc7d63e21553e9d8cd1ac0dac52488cd95a62caaa31296efceabda5cfbb55d549142069d76584c07a8546268356be09d98589a858d3451236636c540ea685885af3498ca8a12ab61bbcb40bcaee6594699c3b07961e1cbd00f54c412aeca68c83de2f8f92e79c110443ed278f9f80aca79e41f89bd4fef2043d830105b945f9424e72c8948c01e9505a534162d4df4c22b1dcad87a1231010066113d62c8a78c2f4"}, 0x10}) 5.668824331s ago: executing program 7 (id=3848): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\trwr'], 0xa) 5.557434957s ago: executing program 8 (id=3849): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b8010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001002800000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x1b8}}, 0x0) 4.088550424s ago: executing program 1 (id=3850): r0 = io_uring_setup(0x2624, &(0x7f0000000280)={0x0, 0xfffffffc, 0x800}) r1 = epoll_create1(0x0) r2 = dup3(r1, r0, 0x0) epoll_pwait2(r2, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 4.035916264s ago: executing program 7 (id=3851): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e20}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000c40)="de", 0x1}], 0x1, 0x0, 0x0, 0x4c810}, 0x0) recvmmsg$unix(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)=""/193, 0xc1}], 0x1, &(0x7f0000000680)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x12040, 0x0) 3.871909131s ago: executing program 8 (id=3852): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000980)={0x1, 0x80000000}, 0x8) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 3.858188412s ago: executing program 9 (id=3853): r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) 3.442895547s ago: executing program 5 (id=3854): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty, 0x53}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 2.815891361s ago: executing program 7 (id=3855): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380)='ramfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2.600677312s ago: executing program 8 (id=3856): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x9, @vifc_lcl_addr=@remote, @remote}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x9, @vifc_lcl_addr=@loopback, @multicast2}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000008c0)=0x8, 0x4) 2.553894725s ago: executing program 1 (id=3857): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) read(r1, &(0x7f0000000080)=""/5, 0x5) 2.485290781s ago: executing program 9 (id=3858): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 2.141692556s ago: executing program 5 (id=3859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14}}, 0x6c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 1.372903669s ago: executing program 1 (id=3860): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r2}, {0x0, 0xfffffffffffffffc}}, [@offload={0xc, 0x1c, {r2, 0x4}}]}, 0xc4}}, 0x0) 1.297002834s ago: executing program 7 (id=3861): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r2, 0x9}}, 0x10) 1.24544564s ago: executing program 8 (id=3862): timer_create(0x2, &(0x7f00000006c0)={0x0, 0x20, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000020901"], 0x28}}, 0x0) 1.145611794s ago: executing program 9 (id=3863): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000080)) 596.384442ms ago: executing program 5 (id=3864): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000040)) 183.150426ms ago: executing program 8 (id=3865): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000004c0)={0xaa, 0x48}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) 117.789882ms ago: executing program 1 (id=3866): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'team_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=@newqdisc={0xc8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x98, 0x2, {{0x7, 0x7f, 0x7fffffff, 0x2, 0x489, 0xff}, [@TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x101, 0x6, 0x8, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x39b8, 0x100400, 0x8, 0x8}}, @NETEM_LOSS_GI={0x18, 0x1, {0x2, 0x3, 0x10000, 0x5d, 0xff}}]}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x8000, 0x3, 0xfb, 0x81, 0xffffffffffffff81, 0x6}}]}}}]}, 0xc8}, 0x1, 0x0, 0x0, 0xb1ae54093a5f73d4}, 0x0) 0s ago: executing program 7 (id=3867): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x7}, 0xe) listen(r0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000200)=0x4) kernel console output (not intermixed with test programs): oop3, logical block 13269809, async page read [ 948.376444][T12357] syz.3.2546: attempt to access beyond end of device [ 948.376444][T12357] loop3: rw=0, sector=1157, nr_sectors = 1 limit=128 [ 948.390851][T12357] Buffer I/O error on dev loop3, logical block 1157, async page read [ 948.443516][ T29] audit: type=1800 audit(1739290916.845:69): pid=12357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2546" name="/" dev="loop3" ino=2 res=0 errno=0 [ 948.568449][T12357] sysv_free_block: trying to free block not in datazone [ 949.395589][T12354] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 953.720122][ T5784] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 953.758989][T12376] dvmrp8: entered allmulticast mode [ 953.894496][ T8337] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.916978][T12375] dvmrp8: left allmulticast mode [ 955.282952][ T5848] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 955.512024][T12392] loop3: detected capacity change from 0 to 512 [ 955.563190][ T5848] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 955.573103][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.674559][ T5848] usb 2-1: config 0 descriptor?? [ 955.756500][ T5848] gspca_main: spca508-2.14.0 probing 8086:0110 [ 955.830812][ T5992] udevd[5992]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 955.882190][T12392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 955.901417][T12392] ext4 filesystem being mounted at /535/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 955.983857][ T5848] gspca_spca508: reg_read err -32 [ 956.151166][ T6047] udevd[6047]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 956.165871][T12392] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 956.177550][T12392] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 956.187572][T12392] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.2561: Failed to acquire dquot type 1 [ 956.213766][ T5848] gspca_spca508: reg_read err -71 [ 956.224457][ T5848] gspca_spca508: reg_read err -71 [ 956.271870][ T5848] gspca_spca508: reg_read err -71 [ 956.334264][ T5848] gspca_spca508: reg write: error -71 [ 956.340305][ T5848] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 956.425087][ T5848] usb 2-1: USB disconnect, device number 13 [ 956.656562][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.147548][T12401] loop7: detected capacity change from 0 to 4096 [ 957.720125][T12409] loop6: detected capacity change from 0 to 64 [ 958.271408][ T5951] udevd[5951]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 958.338497][ T5951] udevd[5951]: symlink '../../loop7' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:7' failed: Read-only file system [ 959.140708][T12419] loop6: detected capacity change from 0 to 64 [ 959.282475][T12417] loop5: detected capacity change from 0 to 1024 [ 959.604628][T12417] hfsplus: invalid xattr key length: 0 [ 959.740826][ T5951] udevd[5951]: symlink '../../loop5' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:5' failed: Read-only file system [ 960.460600][T12431] loop7: detected capacity change from 0 to 64 [ 960.477519][T12429] fuse: Unexpected value for 'default_permissions' [ 963.787928][T12459] loop3: detected capacity change from 0 to 2048 [ 963.852186][T12465] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2595'. [ 963.915637][T12459] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 964.070136][T12469] loop1: detected capacity change from 0 to 1024 [ 964.323988][T12469] hfsplus: bad catalog entry type [ 964.768156][ T59] hfsplus: b-tree write err: -5, ino 4 [ 964.800653][ T5951] udevd[5951]: symlink '../../loop1' '/dev/disk/by-label/untitled.tmp-b7:1' failed: Read-only file system [ 964.884929][ T5951] udevd[5951]: symlink '../../loop1' '/dev/disk/by-uuid/3de3d207-fc4e-3c3b-aa08-7cb07cd064ab.tmp-b7:1' failed: Read-only file system [ 966.688747][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 968.627440][T12506] loop1: detected capacity change from 0 to 2048 [ 968.897436][T12514] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 970.090074][T12522] loop1: detected capacity change from 0 to 64 [ 970.366495][ T29] audit: type=1800 audit(1739290938.805:70): pid=12522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2619" name="file1" dev="loop1" ino=1 res=0 errno=0 [ 972.074978][T12540] [U] §OÁÁÿ&Ámo4 [ 972.078922][T12540] [U] RSºr ljÂ^+ã1š·Âí§e†¤¢érÉÎÝU‹ÔÑ0bT±ùÁ7^™¤<KžpP‘JdG Û–âÁ³œÃC‘§X†ïÌ^Ýf`õ¼ gJ½ðäÎ; [ 974.703210][ T2230] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 974.950218][ T2230] usb 4-1: Using ep0 maxpacket: 8 [ 975.043592][ T2230] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 975.053245][ T2230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.061645][ T2230] usb 4-1: Product: syz [ 975.066440][ T2230] usb 4-1: Manufacturer: syz [ 975.071349][ T2230] usb 4-1: SerialNumber: syz [ 975.191325][ T2230] usb 4-1: config 0 descriptor?? [ 975.535119][ T2230] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 975.915725][ T2230] usb write operation failed. (-71) [ 975.948885][ T2230] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 975.968091][ T2230] dvbdev: DVB: registering new adapter (Terratec H7) [ 975.978282][ T2230] usb 4-1: media controller created [ 976.104827][ T2230] usb read operation failed. (-71) [ 976.136966][ T2230] usb write operation failed. (-71) [ 976.179295][ T2230] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 976.275096][ T2230] usb 4-1: USB disconnect, device number 18 [ 977.579688][T12587] loop3: detected capacity change from 0 to 1024 [ 978.100893][ T5992] udevd[5992]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system [ 978.258985][ T5992] udevd[5992]: symlink '../../loop3' '/dev/disk/by-uuid/4da50ae9-7d30-3220-a998-cec1f675fd4a.tmp-b7:3' failed: Read-only file system [ 978.263745][ T4130] hfsplus: b-tree write err: -5, ino 4 [ 978.603513][ T1661] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 978.863173][ T1661] usb 2-1: Using ep0 maxpacket: 16 [ 978.908357][ T1661] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 978.920884][ T1661] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 978.936379][ T1661] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 978.954051][ T1661] usb 2-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 978.963986][ T1661] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.063705][T12600] loop7: detected capacity change from 0 to 2048 [ 979.193997][ T1661] usb 2-1: config 0 descriptor?? [ 979.209271][T12600] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 979.670948][ T6047] udevd[6047]: symlink '../../loop7' '/dev/disk/by-label/LinuxUDF.tmp-b7:7' failed: Read-only file system [ 979.782312][ T6047] udevd[6047]: symlink '../../loop7' '/dev/disk/by-uuid/1234567812345678.tmp-b7:7' failed: Read-only file system [ 979.890104][ T1661] wacom 0003:056A:0022.0024: Unknown device_type for 'HID 056a:0022'. Assuming pen. [ 979.979893][ T1661] wacom 0003:056A:0022.0024: hidraw0: USB HID v0.00 Device [HID 056a:0022] on usb-dummy_hcd.1-1/input0 [ 979.998394][ T1661] input: Wacom Intuos 9x12 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0022.0024/input/input24 [ 980.201693][ T1661] usb 2-1: USB disconnect, device number 14 [ 981.304567][ T1661] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 981.557683][ T1661] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 981.568548][ T1661] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 981.682975][ T1661] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 981.698079][ T1661] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 981.708982][ T1661] usb 7-1: SerialNumber: syz [ 982.053721][ T1661] usb 7-1: 0:2 : does not exist [ 982.195428][ T1661] usb 7-1: USB disconnect, device number 8 [ 982.660409][ T5951] udevd[5951]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 983.373597][ T1661] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 983.430101][T12630] loop5: detected capacity change from 0 to 1024 [ 983.600989][ T1661] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 983.609847][ T1661] usb 4-1: config 0 has no interface number 0 [ 983.616715][ T1661] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 983.628403][ T1661] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 983.764374][ T1661] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice=55.58 [ 983.774297][ T1661] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.782861][ T1661] usb 4-1: Product: syz [ 983.787300][ T1661] usb 4-1: Manufacturer: syz [ 983.792150][ T1661] usb 4-1: SerialNumber: syz [ 983.801039][ T5951] udevd[5951]: symlink '../../loop5' '/dev/disk/by-label/untitled.tmp-b7:5' failed: Read-only file system [ 983.820411][ T5951] udevd[5951]: symlink '../../loop5' '/dev/disk/by-uuid/3de3d207-fc4e-3c3b-aa08-7cb07cd064ab.tmp-b7:5' failed: Read-only file system [ 983.901824][ T1661] usb 4-1: config 0 descriptor?? [ 983.969556][ T1661] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input27 [ 984.030421][ T50] hfsplus: b-tree write err: -5, ino 4 [ 984.245027][ T2230] usb 4-1: USB disconnect, device number 19 [ 985.740948][T12646] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2678'. [ 985.874554][T12649] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2680'. [ 985.962205][T12650] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2681'. [ 986.784697][T12652] loop6: detected capacity change from 0 to 512 [ 986.991134][T12652] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.2683: corrupted in-inode xattr: invalid ea_ino [ 987.104672][T12652] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.2683: couldn't read orphan inode 15 (err -117) [ 987.285276][T12652] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 987.287868][ T6208] udevd[6208]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 987.875628][ T8337] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.545450][T12672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2688'. [ 988.607597][T12673] loop5: detected capacity change from 0 to 64 [ 988.798337][ T5992] udevd[5992]: symlink '../../loop5' '/dev/disk/by-label/untitled.tmp-b7:5' failed: Read-only file system [ 989.991957][T12687] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2695'. [ 990.735836][T12691] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2699'. [ 990.861576][T12693] overlayfs: failed to resolve 'ðˆxx€3CÇ'[9EøqúØm#'“àH‘H€´ iεÄM2ëSmUÒÔ_jŸŸ³ ±‘S™°™à5G!6j6–`q[äëãJŸŒÓá´§QŽz­ÝÇhݽA ©…™–TÄðûïDŸŠý-we(è2 ÔïG|ÊEwW‹œ€Æ„Ì™ú€­—²b«¼ò ‚um¦”åeFõû*³&k': -2 [ 991.059034][T12698] loop5: detected capacity change from 0 to 128 [ 992.007872][T12704] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 992.154691][T12707] loop1: detected capacity change from 0 to 512 [ 992.245473][T12707] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 992.512413][T12707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 992.527287][T12707] ext4 filesystem being mounted at /577/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 992.818302][T12707] EXT4-fs error (device loop1): ext4_get_verity_descriptor_location:335: inode #15: comm syz.1.2706: verity file corrupted; can't find descriptor [ 992.905545][T12707] EXT4-fs (loop1): Remounting filesystem read-only [ 992.912547][T12707] fs-verity (loop1, inode 15): Error -117 getting verity descriptor size [ 993.102538][ T6208] udevd[6208]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 993.306183][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 993.334287][ T5951] udevd[5951]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 994.064823][T12725] program syz.1.2712 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 994.259183][T12729] loop5: detected capacity change from 0 to 128 [ 994.437302][T12729] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 994.451531][T12729] ext4 filesystem being mounted at /511/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 994.925429][ T6352] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 996.760471][T12751] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2724'. [ 996.817504][T12752] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2725'. [ 997.570455][T12758] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2728'. [ 998.421153][T12767] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 999.704485][T12781] devpts: called with bogus options [ 1000.403131][T12784] loop3: detected capacity change from 0 to 1024 [ 1000.654112][T12789] bio_check_eod: 4 callbacks suppressed [ 1000.654198][T12789] syz.3.2741: attempt to access beyond end of device [ 1000.654198][T12789] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1001.280078][ T5951] udevd[5951]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system [ 1001.313391][ T4530] hfsplus: b-tree write err: -5, ino 8 [ 1001.342063][ T5951] udevd[5951]: symlink '../../loop3' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:3' failed: Read-only file system [ 1003.035745][T12813] loop5: detected capacity change from 0 to 512 [ 1003.134285][T12813] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 1003.209148][T12813] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 1003.227232][T12813] System zones: 1-12 [ 1003.233143][T12813] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1003.239827][T12813] EXT4-fs error (device loop5): ext4_read_inode_bitmap:167: comm syz.5.2754: Inode bitmap for bg 0 marked uninitialized [ 1003.369527][T12813] EXT4-fs (loop5): Remounting filesystem read-only [ 1003.379807][T12813] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1003.385968][ T5951] udevd[5951]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1003.860441][ T6352] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1004.444847][T12825] loop5: detected capacity change from 0 to 16 [ 1004.511273][T12825] erofs (device loop5): mounted with root inode @ nid 36. [ 1004.708914][T12828] loop6: detected capacity change from 0 to 256 [ 1004.758066][T12828] exfat: Deprecated parameter 'utf8' [ 1004.764403][T12828] exfat: Deprecated parameter 'utf8' [ 1004.933327][T12828] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1005.798474][T12834] loop5: detected capacity change from 0 to 1024 [ 1005.873224][T12834] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1006.031736][T12834] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1006.229878][T12834] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 1006.321324][ T5992] udevd[5992]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1006.438429][T12845] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 1006.631890][ T5992] udevd[5992]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1007.154620][ T6352] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1007.222340][T12851] netlink: 'syz.1.2769': attribute type 1 has an invalid length. [ 1007.645797][T12847] sctp: failed to load transform for md5: -2 [ 1008.125477][T12855] DRBG: could not allocate digest TFM handle: hmac(sha384) [ 1008.799239][T12871] loop3: detected capacity change from 0 to 256 [ 1009.263854][T12877] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2777'. [ 1009.305418][T12871] FAT-fs (loop3): Directory bread(block 64) failed [ 1009.312307][T12871] FAT-fs (loop3): Directory bread(block 65) failed [ 1009.319928][T12871] FAT-fs (loop3): Directory bread(block 66) failed [ 1009.327126][T12871] FAT-fs (loop3): Directory bread(block 67) failed [ 1009.334341][T12871] FAT-fs (loop3): Directory bread(block 68) failed [ 1009.347327][T12871] FAT-fs (loop3): Directory bread(block 69) failed [ 1009.356394][T12871] FAT-fs (loop3): Directory bread(block 70) failed [ 1009.363389][T12871] FAT-fs (loop3): Directory bread(block 71) failed [ 1009.370424][T12871] FAT-fs (loop3): Directory bread(block 72) failed [ 1009.377510][T12871] FAT-fs (loop3): Directory bread(block 73) failed [ 1010.663725][T12887] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2782'. [ 1010.679868][T12887] syz_tun: entered promiscuous mode [ 1011.604046][T12895] loop6: detected capacity change from 0 to 256 [ 1011.982321][ T29] audit: type=1800 audit(1739290980.415:71): pid=12895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2786" name="file0" dev="loop6" ino=178 res=0 errno=0 [ 1012.028496][T12897] loop1: detected capacity change from 0 to 512 [ 1012.143136][T12897] EXT4-fs: Ignoring removed i_version option [ 1012.350356][T12897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1012.364168][T12897] ext4 filesystem being mounted at /594/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1012.667956][ T5992] udevd[5992]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 1012.880867][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1019.412961][T12958] loop7: detected capacity change from 0 to 4096 [ 1019.463091][T12958] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 1019.975295][ T5951] udevd[5951]: symlink '../../loop7' '/dev/disk/by-label/쨙ಘ긓kaller.tmp-b7:7' failed: Read-only file system [ 1020.126770][ T5951] udevd[5951]: symlink '../../loop7' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:7' failed: Read-only file system [ 1020.140149][T12958] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1020.175038][T12958] ntfs3(loop7): Failed to initialize $Extend/$ObjId. [ 1021.917118][ T29] audit: type=1326 audit(1739290990.345:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12985 comm="syz.1.2823" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1021.945547][ T29] audit: type=1326 audit(1739290990.345:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12985 comm="syz.1.2823" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1022.199742][ T29] audit: type=1326 audit(1739290990.455:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12985 comm="syz.1.2823" exe="/root/syz-executor" sig=0 arch=40000003 syscall=271 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1022.222812][ T29] audit: type=1326 audit(1739290990.455:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12985 comm="syz.1.2823" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1022.250132][ T29] audit: type=1326 audit(1739290990.455:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12985 comm="syz.1.2823" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1022.394714][T12994] tipc: Started in network mode [ 1022.399953][T12994] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 1022.412900][T12994] tipc: Enabled bearer , priority 10 [ 1022.484100][T12993] tmpfs: Bad value for 'mpol' [ 1023.425473][T13001] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2829'. [ 1023.533921][ T2230] tipc: Node number set to 4269801514 [ 1024.730366][T13012] loop5: detected capacity change from 0 to 1024 [ 1024.782242][T13012] EXT4-fs: Ignoring removed i_version option [ 1024.981424][ T5992] udevd[5992]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1025.077735][T13012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1025.234587][ T2230] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1025.308372][T13012] EXT4-fs error (device loop5): ext4_xattr_inode_iget:440: inode #11: comm syz.5.2834: missing EA_INODE flag [ 1025.443231][T13012] EXT4-fs error (device loop5): ext4_xattr_inode_iget:445: comm syz.5.2834: error while reading EA inode 11 err=-117 [ 1025.457823][ T2230] usb 2-1: Using ep0 maxpacket: 16 [ 1025.535140][ T2230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.546924][ T2230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1025.557325][ T2230] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1025.570831][ T2230] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1025.580365][ T2230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.613986][ T2230] usb 2-1: config 0 descriptor?? [ 1025.730910][T13024] usb usb7: usbfs: process 13024 (syz.7.2838) did not claim interface 0 before use [ 1026.125050][ T6352] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1026.151623][ T2230] ryos 0003:1E7D:31CE.0025: collection stack underflow [ 1026.159415][ T2230] ryos 0003:1E7D:31CE.0025: item 0 2 0 12 parsing failed [ 1026.190511][ T2230] ryos 0003:1E7D:31CE.0025: parse failed [ 1026.197557][ T2230] ryos 0003:1E7D:31CE.0025: probe with driver ryos failed with error -22 [ 1026.393651][ T2230] usb 2-1: USB disconnect, device number 15 [ 1027.945074][T13037] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2844'. [ 1028.125248][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1029.423259][T13055] syz.5.2850 (13055) used obsolete PPPIOCDETACH ioctl [ 1029.526661][ T1661] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1029.691143][ T1661] usb 4-1: Using ep0 maxpacket: 32 [ 1029.843931][ T1661] usb 4-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 1029.857971][ T1661] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.881770][ T1661] usb 4-1: Product: syz [ 1029.889660][ T1661] usb 4-1: Manufacturer: syz [ 1029.894858][ T1661] usb 4-1: SerialNumber: syz [ 1030.007516][ T1661] usb 4-1: config 0 descriptor?? [ 1030.061892][ T1661] cypress_m8 4-1:0.0: HID->COM RS232 Adapter converter detected [ 1030.077670][ T1661] cyphidcom ttyUSB0: required endpoint is missing [ 1030.327511][ T1661] usb 4-1: USB disconnect, device number 20 [ 1030.349326][ T1661] cypress_m8 4-1:0.0: device disconnected [ 1030.635287][T13060] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2855'. [ 1030.715287][T13059] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2855'. [ 1030.841380][T13064] loop7: detected capacity change from 0 to 8 [ 1031.738085][T13062] loop5: detected capacity change from 0 to 4096 [ 1032.352926][T13070] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2860'. [ 1032.362496][T13070] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2860'. [ 1032.474088][ T5992] udevd[5992]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1032.593405][ T5992] udevd[5992]: symlink '../../loop5' '/dev/disk/by-uuid/399AA58E54924951.tmp-b7:5' failed: Read-only file system [ 1032.820928][T13073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2861'. [ 1033.751593][T13077] loop7: detected capacity change from 0 to 512 [ 1033.820359][T13077] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1033.888122][T13079] loop1: detected capacity change from 0 to 128 [ 1033.949894][T13077] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 1033.961897][T13077] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 1034.113869][T13077] EXT4-fs (loop7): 1 truncate cleaned up [ 1034.127444][T13077] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1034.216493][ T5951] udevd[5951]: symlink '../../loop7' '/dev/disk/by-label/\x86\x5b.tmp-b7:7' failed: Read-only file system [ 1035.109552][ T9574] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1035.160979][T13087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2867'. [ 1035.341313][T13089] smc: net device bond0 applied user defined pnetid SYZ0 [ 1037.413628][ T2230] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1037.585036][T13106] loop5: detected capacity change from 0 to 512 [ 1037.623010][ T2230] usb 4-1: Using ep0 maxpacket: 32 [ 1037.664729][ T2230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1037.676450][ T2230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1037.686998][ T2230] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1037.696770][ T2230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.735988][ T2230] usb 4-1: config 0 descriptor?? [ 1037.758671][ T2230] hub 4-1:0.0: USB hub found [ 1038.123882][T13106] EXT4-fs (loop5): 1 orphan inode deleted [ 1038.133996][T13106] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1038.157512][ T9018] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1038.169526][ T9018] EXT4-fs error (device loop5): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 1 [ 1038.196443][ T2230] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1038.314080][T13106] ext4 filesystem being mounted at /544/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1038.329563][ T5992] udevd[5992]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1038.460503][ T2230] usbhid 4-1:0.0: can't add hid device: -71 [ 1038.467518][ T2230] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1038.575667][ T2230] usb 4-1: USB disconnect, device number 21 [ 1039.237660][ T6352] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.801398][T13157] loop5: detected capacity change from 0 to 2048 [ 1044.913678][T13157] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1045.062884][T13160] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1045.358115][ T5951] udevd[5951]: symlink '../../loop5' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:5' failed: Read-only file system [ 1046.078956][T13167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2903'. [ 1047.248051][T13173] loop3: detected capacity change from 0 to 256 [ 1047.643873][T10805] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1047.654274][T10805] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1047.664625][T10805] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1047.680073][T10805] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1047.693038][T10805] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1047.703750][T10805] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1049.287097][T13187] loop3: detected capacity change from 0 to 1024 [ 1049.457744][T13189] netlink: 'syz.7.2912': attribute type 3 has an invalid length. [ 1049.709430][ T5951] udevd[5951]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system [ 1049.804027][T13187] hfsplus: bad catalog entry type [ 1049.854393][ T5800] Bluetooth: hci5: command tx timeout [ 1049.861830][ T5951] udevd[5951]: symlink '../../loop3' '/dev/disk/by-uuid/3de3d207-fc4e-3c3b-aa08-7cb07cd064ab.tmp-b7:3' failed: Read-only file system [ 1050.170307][ T5951] udevd[5951]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system [ 1050.228323][ T5951] udevd[5951]: symlink '../../loop3' '/dev/disk/by-uuid/3de3d207-fc4e-3c3b-aa08-7cb07cd064ab.tmp-b7:3' failed: Read-only file system [ 1050.291000][ T5051] hfsplus: b-tree write err: -5, ino 4 [ 1051.183556][T13177] chnl_net:caif_netlink_parms(): no params data found [ 1051.933125][ T5800] Bluetooth: hci5: command tx timeout [ 1052.216137][ T8337] bond0: (slave syz_tun): Releasing backup interface [ 1053.828440][T13177] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.836741][T13177] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.847165][T13177] bridge_slave_0: entered allmulticast mode [ 1053.861086][T13177] bridge_slave_0: entered promiscuous mode [ 1053.917903][T13177] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.926436][T13177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.935547][T13177] bridge_slave_1: entered allmulticast mode [ 1053.948990][T13177] bridge_slave_1: entered promiscuous mode [ 1054.036552][ T5800] Bluetooth: hci5: command tx timeout [ 1054.352159][T13177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1054.554668][T13177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1055.044979][T13177] team0: Port device team_slave_0 added [ 1055.173944][T13177] team0: Port device team_slave_1 added [ 1055.790775][T13177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.799505][T13177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.830523][T13177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1056.101596][ T5800] Bluetooth: hci5: command tx timeout [ 1056.130885][T13177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1056.145002][T13177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1056.177202][T13177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.825445][T13177] hsr_slave_0: entered promiscuous mode [ 1056.836766][T13177] hsr_slave_1: entered promiscuous mode [ 1056.846725][T13177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1056.860809][T13177] Cannot create hsr debugfs directory [ 1057.310172][T13241] loop1: detected capacity change from 0 to 512 [ 1057.608630][T13241] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002] [ 1057.697626][T13241] System zones: 1-12 [ 1057.769053][T13241] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.2933: corrupted in-inode xattr: invalid ea_ino [ 1057.923531][T13241] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.2933: couldn't read orphan inode 15 (err -117) [ 1057.966116][ T5951] udevd[5951]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 1058.111998][T13241] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1058.458080][T13248] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2935'. [ 1058.641222][T13247] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2935'. [ 1058.795499][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1058.959237][T13250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2936'. [ 1058.968784][T13250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2936'. [ 1058.979017][T13250] netlink: 'syz.3.2936': attribute type 5 has an invalid length. [ 1058.990863][T13250] netlink: 'syz.3.2936': attribute type 6 has an invalid length. [ 1059.408776][T13177] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1059.499724][T13177] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1059.566267][T13177] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1059.664935][T13177] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1060.112523][T13258] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2940'. [ 1060.594152][ T9553] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1060.865565][ T9553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1060.880978][ T9553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1060.891304][ T9553] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1060.908542][ T9553] usb 4-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 1060.918185][ T9553] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.180030][ T9553] usb 4-1: config 0 descriptor?? [ 1061.715699][ T9553] monterey 0003:0566:3004.0026: unknown main item tag 0x6 [ 1061.723646][ T9553] monterey 0003:0566:3004.0026: report_id 29495 is invalid [ 1061.731160][ T9553] monterey 0003:0566:3004.0026: item 0 2 1 8 parsing failed [ 1061.848511][ T9553] monterey 0003:0566:3004.0026: probe with driver monterey failed with error -22 [ 1061.937681][T13177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1062.011825][ T9553] usb 4-1: USB disconnect, device number 22 [ 1062.311099][T13177] 8021q: adding VLAN 0 to HW filter on device team0 [ 1062.441564][ T749] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.449633][ T749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1062.678244][ T749] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.686257][ T749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1064.408771][T13285] loop1: detected capacity change from 0 to 1024 [ 1064.705326][T13285] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1065.406681][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1065.684321][ T5951] udevd[5951]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 1065.931316][T13177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1066.723025][T13305] loop3: detected capacity change from 0 to 128 [ 1066.813215][T13305] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1066.882127][T13305] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1066.906062][T13305] ext4 filesystem being mounted at /618/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1067.160757][T13309] loop5: detected capacity change from 0 to 512 [ 1067.229383][ T5951] udevd[5951]: symlink '../../loop3' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:3' failed: Read-only file system [ 1067.359018][T13309] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 1024: comm syz.5.2959: invalid block [ 1067.440736][ T5992] udevd[5992]: symlink '../../loop5' '/dev/disk/by-label/\x86\x5b.tmp-b7:5' failed: Read-only file system [ 1067.473398][T13309] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2959: invalid indirect mapped block 1024 (level 0) [ 1067.595852][T13309] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2959: bg 0: block 35: padding at end of block bitmap is not set [ 1067.671173][T13309] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1067.686760][T13309] EXT4-fs (loop5): 1 truncate cleaned up [ 1067.695003][T13309] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1067.801762][ T5784] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1067.895463][T13313] loop1: detected capacity change from 0 to 512 [ 1068.105451][T13313] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 1068.118562][T13313] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 1068.136408][T13313] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 1068.146518][ T5951] udevd[5951]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 1068.236787][T13313] EXT4-fs (loop1): 1 truncate cleaned up [ 1068.245416][T13313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1068.555160][ T6352] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1069.124944][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1070.671293][T13177] veth0_vlan: entered promiscuous mode [ 1070.916783][T13177] veth1_vlan: entered promiscuous mode [ 1071.570708][T13177] veth0_macvtap: entered promiscuous mode [ 1071.680398][T13339] loop1: detected capacity change from 0 to 2048 [ 1071.725276][T13177] veth1_macvtap: entered promiscuous mode [ 1072.128091][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1072.142435][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.153246][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1072.167390][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.177802][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1072.188771][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.202659][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1072.221217][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.233934][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1072.248859][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.259318][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1072.270227][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.291320][T13177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1072.871183][T13349] netlink: 'syz.7.2972': attribute type 10 has an invalid length. [ 1072.919781][T13349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1072.961386][T13349] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1073.086243][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1073.104513][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.115010][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1073.129289][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.146819][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1073.162886][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.173284][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1073.187428][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.197716][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1073.208709][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.222257][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1073.233311][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.262221][T13177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1073.901008][T13177] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.914102][T13177] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.924124][T13177] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.933612][T13177] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.267787][ T9553] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1074.475379][ T9553] usb 6-1: Using ep0 maxpacket: 32 [ 1074.553341][ T9553] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1074.683221][ T9553] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1074.696233][ T9553] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.705004][ T9553] usb 6-1: Product: syz [ 1074.709454][ T9553] usb 6-1: Manufacturer: syz [ 1074.714516][ T9553] usb 6-1: SerialNumber: syz [ 1074.865974][ T9553] usb 6-1: config 0 descriptor?? [ 1074.880574][T13355] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1074.990390][ T9553] hub 6-1:0.0: bad descriptor, ignoring hub [ 1075.001732][ T9553] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1075.020661][ T9553] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input28 [ 1075.604772][ T2230] usb 6-1: USB disconnect, device number 15 [ 1075.606034][ C1] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1076.188164][T13371] loop7: detected capacity change from 0 to 256 [ 1076.389263][T13371] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1079.819945][T13399] loop5: detected capacity change from 0 to 1024 [ 1079.882073][T13399] EXT4-fs: Ignoring removed i_version option [ 1079.968818][T13399] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 1080.159568][ T5951] udevd[5951]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 1080.210002][T13399] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 1080.223541][T13399] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 1080.233624][T13399] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.2990: Failed to acquire dquot type 0 [ 1080.386542][T13399] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1080.402052][T13399] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #13: comm syz.5.2990: corrupted inode contents [ 1080.501778][T13399] EXT4-fs error (device loop5): ext4_dirty_inode:6042: inode #13: comm syz.5.2990: mark_inode_dirty error [ 1080.618662][T13399] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #13: comm syz.5.2990: corrupted inode contents [ 1080.648431][T13399] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #13: comm syz.5.2990: mark_inode_dirty error [ 1080.719217][T13399] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #13: comm syz.5.2990: corrupted inode contents [ 1080.780006][T13399] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 1080.866717][T13399] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #13: comm syz.5.2990: corrupted inode contents [ 1080.951589][T13399] EXT4-fs error (device loop5): ext4_truncate:4240: inode #13: comm syz.5.2990: mark_inode_dirty error [ 1081.061445][T13399] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 1081.169330][T13399] EXT4-fs (loop5): 1 truncate cleaned up [ 1081.177466][T13399] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1081.449080][T13399] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 1082.213216][ T6352] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.568594][T13423] loop3: detected capacity change from 0 to 16 [ 1082.698339][T13423] erofs (device loop3): mounted with root inode @ nid 36. [ 1083.036982][ T5992] udevd[5992]: symlink '../../loop3' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:3' failed: Read-only file system [ 1083.135544][T13428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2999'. [ 1083.145144][T13428] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2999'. [ 1084.104050][T13434] loop7: detected capacity change from 0 to 164 [ 1084.505191][T13434] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1084.550074][T13436] netlink: 'syz.3.3003': attribute type 3 has an invalid length. [ 1084.558833][T13436] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3003'. [ 1084.587382][T13438] loop5: detected capacity change from 0 to 256 [ 1084.728628][ T4530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.737367][ T4530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.861625][T13440] sp0: Synchronizing with TNC [ 1085.004418][T13438] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 1085.164483][ T4130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1085.172912][ T4130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.899893][ T9553] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 1089.168954][ T9553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1089.181294][ T9553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1089.191680][ T9553] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1089.209971][ T9553] usb 4-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 1089.225917][ T9553] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.456560][ T9553] usb 4-1: config 0 descriptor?? [ 1089.569611][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1090.096056][ T9553] betop 0003:11C0:5506.0027: hidraw0: USB HID v0.00 Device [HID 11c0:5506] on usb-dummy_hcd.3-1/input0 [ 1090.111330][ T9553] betop 0003:11C0:5506.0027: no inputs found [ 1090.311161][ T2230] usb 4-1: USB disconnect, device number 23 [ 1092.126108][T13487] loop1: detected capacity change from 0 to 512 [ 1092.231663][T13491] usb usb9: usbfs: process 13491 (syz.7.3027) did not claim interface 0 before use [ 1092.241990][T13487] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1092.519601][T13487] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #17: comm syz.1.3025: iget: bad i_size value: -6917529027641081756 [ 1092.617950][T13487] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.3025: couldn't read orphan inode 17 (err -117) [ 1092.686903][ T6208] udevd[6208]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 1092.717263][T13487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1092.793403][ T2230] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1093.033761][ T2230] usb 9-1: Using ep0 maxpacket: 16 [ 1093.123378][ T2230] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1093.135699][ T2230] usb 9-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 1093.145712][ T2230] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.266727][ T2230] usb 9-1: config 0 descriptor?? [ 1093.490183][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1093.507490][T13502] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3031'. [ 1093.799701][T13504] loop7: detected capacity change from 0 to 512 [ 1093.900795][ T2230] elecom 0003:056E:00E6.0028: hidraw0: USB HID v0.00 Device [HID 056e:00e6] on usb-dummy_hcd.8-1/input0 [ 1094.117299][ T2230] usb 9-1: USB disconnect, device number 2 [ 1094.177263][T13504] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.3032: corrupted in-inode xattr: invalid ea_ino [ 1094.293547][T13504] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.3032: couldn't read orphan inode 15 (err -117) [ 1094.373309][T13504] EXT4-fs (loop7): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1095.037978][ T9574] EXT4-fs (loop7): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 1095.171704][ T6047] udevd[6047]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 1095.320484][ T6047] udevd[6047]: symlink '../../loop7' '/dev/disk/by-uuid/00000007-0000-0000-0000-000000000000.tmp-b7:7' failed: Read-only file system [ 1096.023447][T13519] netlink: zone id is out of range [ 1096.028986][T13519] netlink: zone id is out of range [ 1096.034727][T13519] netlink: zone id is out of range [ 1096.040060][T13519] netlink: zone id is out of range [ 1096.045544][T13519] netlink: zone id is out of range [ 1096.050888][T13519] netlink: zone id is out of range [ 1096.056873][T13519] netlink: zone id is out of range [ 1096.062198][T13519] netlink: zone id is out of range [ 1096.067694][T13519] netlink: zone id is out of range [ 1096.080221][T13519] netlink: zone id is out of range [ 1102.343051][T13550] sp0: Synchronizing with TNC [ 1106.689236][T13572] i2c i2c-0: Invalid block write size 34 [ 1107.282063][T13574] loop8: detected capacity change from 0 to 2048 [ 1107.582230][T13574] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1108.323623][ T2230] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1108.605431][ T2230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.616969][ T2230] usb 6-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 1108.626630][ T2230] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.833666][ T2230] usb 6-1: config 0 descriptor?? [ 1109.509935][T13593] loop8: detected capacity change from 0 to 1024 [ 1109.518541][ T2230] hid-alps 0003:044E:121E.0029: hidraw0: USB HID v0.00 Device [HID 044e:121e] on usb-dummy_hcd.5-1/input0 [ 1109.666347][ T2230] usb 6-1: USB disconnect, device number 16 [ 1109.890779][ T5951] udevd[5951]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 1109.928923][T13593] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1110.403963][ T5951] udevd[5951]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 1110.957394][T13177] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1113.163300][ T29] audit: type=1326 audit(1739291081.585:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13615 comm="syz.5.3084" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x0 [ 1113.369584][T13618] loop3: detected capacity change from 0 to 512 [ 1113.511897][T13623] netlink: 'syz.8.3086': attribute type 1 has an invalid length. [ 1113.523835][T13623] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3086'. [ 1113.607435][T13618] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.3085: corrupted in-inode xattr: invalid ea_ino [ 1113.698960][T13618] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.3085: couldn't read orphan inode 15 (err -117) [ 1113.824365][T13618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1114.046376][T13618] EXT4-fs error (device loop3): ext4_lookup:1817: inode #2: comm syz.3.3085: deleted inode referenced: 15 [ 1114.110800][ T5992] udevd[5992]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 1114.175618][T13627] loop1: detected capacity change from 0 to 1764 [ 1114.658316][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1115.586523][T13637] sp0: Synchronizing with TNC [ 1117.113914][T13650] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3099'. [ 1118.241403][T13658] mkiss: ax0: crc mode is auto. [ 1118.570931][T13662] loop7: detected capacity change from 0 to 512 [ 1118.726523][T13662] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1118.958180][T13662] EXT4-fs (loop7): warning: maximal mount count reached, running e2fsck is recommended [ 1118.980681][ T6208] udevd[6208]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 1119.141513][T13662] EXT4-fs error (device loop7): ext4_orphan_get:1389: comm syz.7.3105: inode #15: comm syz.7.3105: iget: illegal inode # [ 1119.233812][T13662] EXT4-fs (loop7): Remounting filesystem read-only [ 1119.242875][T13662] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1119.845351][ T9574] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1123.774609][T13698] loop1: detected capacity change from 0 to 4096 [ 1123.916303][ T9553] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1124.008888][T13710] netlink: 'syz.7.3126': attribute type 15 has an invalid length. [ 1124.150384][ T9553] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1124.163225][ T9553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1124.297899][ T9553] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1124.307769][ T9553] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1124.320174][ T9553] usb 4-1: Manufacturer: syz [ 1124.414684][ T9553] usb 4-1: config 0 descriptor?? [ 1124.581497][ T5951] udevd[5951]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 1124.691971][ T5951] udevd[5951]: symlink '../../loop1' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:1' failed: Read-only file system [ 1125.174119][ T9553] rc_core: IR keymap rc-hauppauge not found [ 1125.180328][ T9553] Registered IR keymap rc-empty [ 1125.188632][ T9553] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1125.206698][ T9553] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input30 [ 1125.477960][T13718] loop8: detected capacity change from 0 to 256 [ 1125.515769][ C1] igorplugusb 4-1:0.0: receive overflow, at least 33 lost [ 1125.792307][ T2230] usb 4-1: USB disconnect, device number 24 [ 1126.023876][T13718] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1126.458162][T13722] loop5: detected capacity change from 0 to 256 [ 1126.520816][T13722] exfat: Deprecated parameter 'namecase' [ 1126.526903][T13724] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 1126.768916][T13722] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1127.645328][T13728] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3133'. [ 1127.885477][T13734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3135'. [ 1128.442256][T13737] loop5: detected capacity change from 0 to 1024 [ 1128.966017][T13742] loop7: detected capacity change from 0 to 16 [ 1129.024297][T13742] erofs (device loop7): mounted with root inode @ nid 36. [ 1129.036413][T13745] loop1: detected capacity change from 0 to 64 [ 1129.549363][ T5951] udevd[5951]: symlink '../../loop1' '/dev/disk/by-label/untitled.tmp-b7:1' failed: Read-only file system [ 1129.875233][T13747] dummy0: entered promiscuous mode [ 1129.882410][T13746] dummy0: left promiscuous mode [ 1130.873500][ T9553] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1131.104860][ T9553] usb 2-1: Using ep0 maxpacket: 32 [ 1131.133015][ T9553] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.224866][ T9553] usb 2-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 1131.234759][ T9553] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.246436][ T9553] usb 2-1: Product: syz [ 1131.250973][ T9553] usb 2-1: Manufacturer: syz [ 1131.256032][ T9553] usb 2-1: SerialNumber: syz [ 1131.333955][ T2230] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1131.456934][ T9553] usb 2-1: config 0 descriptor?? [ 1131.603045][ T2230] usb 6-1: Using ep0 maxpacket: 32 [ 1131.696640][ T2230] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1131.807503][ T9553] kaweth 2-1:0.0: Firmware present in device. [ 1131.828674][ T2230] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1131.838957][ T2230] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.847482][ T2230] usb 6-1: Product: syz [ 1131.851913][ T2230] usb 6-1: Manufacturer: syz [ 1131.857442][ T2230] usb 6-1: SerialNumber: syz [ 1132.068104][ T9553] kaweth 2-1:0.0: Statistics collection: 0 [ 1132.074539][ T9553] kaweth 2-1:0.0: Multicast filter limit: 0 [ 1132.080841][ T9553] kaweth 2-1:0.0: MTU: 0 [ 1132.085713][ T9553] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 1132.114235][ T2230] usb 6-1: config 0 descriptor?? [ 1132.252460][ T9553] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 1132.308807][ T9553] usb 2-1: USB disconnect, device number 16 [ 1132.673663][ T2230] gs_usb 6-1:0.0: Configuring for 234 interfaces [ 1132.680515][ T2230] gs_usb 6-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 1132.688857][ T2230] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -22 [ 1132.983685][ T2230] usb 6-1: USB disconnect, device number 17 [ 1134.094819][ T9553] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1134.302410][T13779] loop8: detected capacity change from 0 to 64 [ 1134.304234][ T9553] usb 4-1: Using ep0 maxpacket: 16 [ 1134.359620][ T9553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1134.377429][ T9553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1134.394290][ T9553] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1134.404178][ T9553] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.607159][ T9553] usb 4-1: config 0 descriptor?? [ 1135.123402][ T9553] konepure 0003:1E7D:2DB4.002A: unknown main item tag 0x0 [ 1135.131178][ T9553] konepure 0003:1E7D:2DB4.002A: unknown main item tag 0x0 [ 1135.139158][ T9553] konepure 0003:1E7D:2DB4.002A: unknown main item tag 0x0 [ 1135.150784][ T9553] konepure 0003:1E7D:2DB4.002A: unknown main item tag 0x0 [ 1135.158069][ T5992] udevd[5992]: symlink '../../loop8' '/dev/disk/by-label/untitled.tmp-b7:8' failed: Read-only file system [ 1135.483298][ T9553] konepure 0003:1E7D:2DB4.002A: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.3-1/input0 [ 1135.658344][ T9553] usb 4-1: USB disconnect, device number 25 [ 1137.428565][T13797] loop8: detected capacity change from 0 to 1024 [ 1137.815669][T13797] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1138.235038][ T6324] udevd[6324]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 1138.525950][ T5951] udevd[5951]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 1138.647417][T13808] loop7: detected capacity change from 0 to 1024 [ 1138.744512][T13807] loop3: detected capacity change from 0 to 1024 [ 1139.018544][T13807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1139.085153][T13177] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1139.154829][T13808] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 1139.338499][ T5951] udevd[5951]: symlink '../../loop7' '/dev/disk/by-label/untitled.tmp-b7:7' failed: Read-only file system [ 1139.406057][ T6047] udevd[6047]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 1139.461853][ T5951] udevd[5951]: symlink '../../loop7' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:7' failed: Read-only file system [ 1139.677948][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1139.688384][ T5992] udevd[5992]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 1140.366553][T13818] loop8: detected capacity change from 0 to 256 [ 1140.775784][T13827] syz.8.3173: attempt to access beyond end of device [ 1140.775784][T13827] loop8: rw=0, sector=272, nr_sectors = 4 limit=256 [ 1140.909598][T13827] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 198) [ 1140.918512][T13827] FAT-fs (loop8): Filesystem has been set read-only [ 1140.980406][T13827] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 198) [ 1145.013906][T13866] program syz.5.3192 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1146.121605][ T29] audit: type=1326 audit(1739291114.555:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13873 comm="syz.8.3196" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1146.148011][ T29] audit: type=1326 audit(1739291114.555:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13873 comm="syz.8.3196" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1146.432183][T13869] loop1: detected capacity change from 0 to 2048 [ 1146.687123][T13869] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1147.256989][ T5951] udevd[5951]: symlink '../../loop1' '/dev/disk/by-label/LinuxUDF.tmp-b7:1' failed: Read-only file system [ 1147.322082][ T5951] udevd[5951]: symlink '../../loop1' '/dev/disk/by-uuid/1234567812345678.tmp-b7:1' failed: Read-only file system [ 1150.203596][T13913] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3209'. [ 1150.213610][T13913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3209'. [ 1150.223187][T13913] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3209'. [ 1151.006304][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1154.063053][ T2230] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1154.305223][ T2230] usb 2-1: Using ep0 maxpacket: 16 [ 1154.379834][ T2230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1154.391235][ T2230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1154.401672][ T2230] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1154.415249][ T2230] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1154.424779][ T2230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.692001][ T2230] usb 2-1: config 0 descriptor?? [ 1155.231221][T13956] loop5: detected capacity change from 0 to 128 [ 1155.311215][ T2230] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.002B/input/input31 [ 1155.402933][T10188] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1155.585642][ T2230] microsoft 0003:045E:07DA.002B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1155.623409][T10188] usb 4-1: Using ep0 maxpacket: 8 [ 1155.697637][T10188] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1155.724588][ T5992] udevd[5992]: symlink '../../loop5' '/dev/disk/by-uuid/8AF2-7630.tmp-b7:5' failed: Read-only file system [ 1155.731012][T10188] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 1155.748040][T10188] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 1155.759740][T10188] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1155.813806][ T2230] usb 2-1: USB disconnect, device number 17 [ 1156.053050][T10188] usb 4-1: string descriptor 0 read error: -22 [ 1156.059970][T10188] usb 4-1: New USB device found, idVendor=05ac, idProduct=021a, bcdDevice= 0.40 [ 1156.069689][T10188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.231554][T13957] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1156.893413][T10188] appletouch 4-1:1.0: Geyser mode initialized. [ 1156.911513][T10188] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input32 [ 1156.954704][T13963] nftables ruleset with unbound chain [ 1157.039925][T13964] loop7: detected capacity change from 0 to 1024 [ 1157.147770][T10188] usb 4-1: USB disconnect, device number 26 [ 1157.276836][T10188] appletouch 4-1:1.0: input: appletouch disconnected [ 1157.957835][ T59] hfsplus: b-tree write err: -5, ino 4 [ 1158.067558][T13969] netlink: 'syz.8.3235': attribute type 2 has an invalid length. [ 1158.339347][ T6047] udevd[6047]: symlink '../../loop7' '/dev/disk/by-label/untitled.tmp-b7:7' failed: Read-only file system [ 1158.458033][ T6047] udevd[6047]: symlink '../../loop7' '/dev/disk/by-uuid/3de3d207-fc4e-3c3b-aa08-7cb07cd064ab.tmp-b7:7' failed: Read-only file system [ 1159.054453][T13978] syz.3.3239 (13978): drop_caches: 4 [ 1160.196359][T13987] loop3: detected capacity change from 0 to 256 [ 1160.463035][T13987] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1160.663687][ T29] audit: type=1800 audit(1739291129.085:80): pid=13987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3243" name="bus" dev="loop3" ino=191 res=0 errno=0 [ 1160.982775][ T5800] Bluetooth: hci5: command tx timeout [ 1161.329207][T13995] loop1: detected capacity change from 0 to 128 [ 1165.777538][T14033] loop7: detected capacity change from 0 to 16 [ 1165.856820][T14033] erofs: Unknown parameter 'ÿÿÿÿt’5Æ;Àâ} ï7_cŠúÏèðÎîËN”Øü÷û"LŽõ‚öaÂm)p÷«ñ„°ƒº'6~—' [ 1165.995498][T14033] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3265'. [ 1166.025868][T14035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3266'. [ 1166.248022][T14037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3267'. [ 1166.407040][T14041] loop5: detected capacity change from 0 to 16 [ 1166.414307][T14021] Bluetooth: hci5: command 0x0405 tx timeout [ 1166.493116][T14040] loop8: detected capacity change from 0 to 1024 [ 1166.513398][T14041] erofs (device loop5): mounted with root inode @ nid 36. [ 1166.586999][T14041] erofs (device loop5): unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 1166.597224][T14041] erofs (device loop5): unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 1166.607726][T14041] erofs (device loop5): read error -95 @ 8200 of nid 36 [ 1166.857917][T14040] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1167.688013][T13177] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1167.946025][T14046] loop3: detected capacity change from 0 to 4096 [ 1167.980662][T14052] loop5: detected capacity change from 0 to 1024 [ 1168.195026][T14052] hfsplus: bad catalog entry type [ 1168.661845][T13363] hfsplus: b-tree write err: -5, ino 4 [ 1169.870139][ T5992] udevd[5992]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 1169.958981][ T5992] udevd[5992]: symlink '../../loop3' '/dev/disk/by-uuid/399AA58E54924951.tmp-b7:3' failed: Read-only file system [ 1171.870290][T14077] loop1: detected capacity change from 0 to 512 [ 1171.974190][T14080] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3285'. [ 1171.983663][T14080] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3285'. [ 1172.063197][T14077] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1172.248318][T14077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1172.269244][T14077] ext4 filesystem being mounted at /704/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1172.390835][T14084] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 1172.587041][ T6047] udevd[6047]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 1173.176013][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1173.339258][T14091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3289'. [ 1173.352097][T14091] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3289'. [ 1173.361721][T14091] netlink: 'syz.5.3289': attribute type 19 has an invalid length. [ 1174.385267][T14099] loop8: detected capacity change from 0 to 1024 [ 1174.767375][T14101] loop3: detected capacity change from 0 to 1024 [ 1174.888619][ T5951] udevd[5951]: symlink '../../loop8' '/dev/disk/by-label/untitled.tmp-b7:8' failed: Read-only file system [ 1174.910147][T14101] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1174.928210][T14101] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1175.036017][ T5951] udevd[5951]: symlink '../../loop8' '/dev/disk/by-uuid/3de3d207-fc4e-3c3b-aa08-7cb07cd064ab.tmp-b7:8' failed: Read-only file system [ 1175.062438][ T5992] udevd[5992]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 1175.076678][T14101] JBD2: no valid journal superblock found [ 1175.076835][T14101] EXT4-fs (loop3): Could not load journal inode [ 1175.399732][ T4130] hfsplus: b-tree write err: -5, ino 4 [ 1175.551870][ T5951] udevd[5951]: symlink '../../loop8' '/dev/disk/by-label/untitled.tmp-b7:8' failed: Read-only file system [ 1175.679577][ T5951] udevd[5951]: symlink '../../loop8' '/dev/disk/by-uuid/3de3d207-fc4e-3c3b-aa08-7cb07cd064ab.tmp-b7:8' failed: Read-only file system [ 1177.302257][T14121] loop5: detected capacity change from 0 to 256 [ 1177.900673][T14121] FAT-fs (loop5): Directory bread(block 64) failed [ 1177.907723][T14121] FAT-fs (loop5): Directory bread(block 65) failed [ 1177.915060][T14121] FAT-fs (loop5): Directory bread(block 66) failed [ 1177.921956][T14121] FAT-fs (loop5): Directory bread(block 67) failed [ 1177.929251][T14121] FAT-fs (loop5): Directory bread(block 68) failed [ 1177.937157][T14121] FAT-fs (loop5): Directory bread(block 69) failed [ 1177.944471][T14121] FAT-fs (loop5): Directory bread(block 70) failed [ 1177.951358][T14121] FAT-fs (loop5): Directory bread(block 71) failed [ 1177.958532][T14121] FAT-fs (loop5): Directory bread(block 72) failed [ 1177.965558][T14121] FAT-fs (loop5): Directory bread(block 73) failed [ 1178.957231][T14131] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3307'. [ 1178.967123][T14131] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3307'. [ 1179.294922][T14135] loop8: detected capacity change from 0 to 64 [ 1180.888443][T14147] loop8: detected capacity change from 0 to 512 [ 1181.045036][T14147] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.3315: invalid indirect mapped block 32768 (level 0) [ 1181.087166][T14147] EXT4-fs (loop8): Remounting filesystem read-only [ 1181.139474][ T5951] udevd[5951]: symlink '../../loop8' '/dev/disk/by-label/\x86\x5b.tmp-b7:8' failed: Read-only file system [ 1181.173646][T14147] EXT4-fs (loop8): 1 truncate cleaned up [ 1181.181802][T14147] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1181.518545][ T5951] udevd[5951]: symlink '../../loop8' '/dev/disk/by-label/\x86\x5b.tmp-b7:8' failed: Read-only file system [ 1181.617189][T14155] loop1: detected capacity change from 0 to 16 [ 1181.773479][T14155] erofs (device loop1): invalid checksum 0xe62de0bb, 0xc6d5fae7 expected [ 1181.829288][ T5951] udevd[5951]: symlink '../../loop8' '/dev/disk/by-label/\x86\x5b.tmp-b7:8' failed: Read-only file system [ 1181.994408][T14155] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1182.021324][T14155] CIFS mount error: No usable UNC path provided in device string! [ 1182.021324][T14155] [ 1182.031974][T14155] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1182.048807][T13177] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1184.317143][T14178] loop7: detected capacity change from 0 to 256 [ 1184.401519][T14178] exfat: Deprecated parameter 'namecase' [ 1184.713521][T14178] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1185.192931][T14184] nbd: must specify a size in bytes for the device [ 1185.423457][T14186] loop8: detected capacity change from 0 to 16 [ 1185.891768][ T5951] udevd[5951]: symlink '../../loop8' '/dev/disk/by-label/Compressed.tmp-b7:8' failed: Read-only file system [ 1186.377338][T14191] loop1: detected capacity change from 0 to 4096 [ 1186.567604][T14191] NILFS (loop1): invalid segment: Checksum error in segment payload [ 1186.577160][T14191] NILFS (loop1): trying rollback from an earlier position [ 1186.729995][T14191] NILFS (loop1): recovery complete [ 1186.790213][T14198] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1186.826449][T14197] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3337'. [ 1187.387077][ T5951] udevd[5951]: symlink '../../loop1' '/dev/disk/by-uuid/53ef1790-6acb-496c-bd13-8113447d28c8.tmp-b7:1' failed: Read-only file system [ 1187.848811][ T5951] udevd[5951]: symlink '../../loop1' '/dev/disk/by-uuid/53ef1790-6acb-496c-bd13-8113447d28c8.tmp-b7:1' failed: Read-only file system [ 1188.071136][T14206] loop8: detected capacity change from 0 to 64 [ 1188.460836][T14210] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3342'. [ 1189.121770][T14214] loop5: detected capacity change from 0 to 64 [ 1189.621728][T14216] loop3: detected capacity change from 0 to 1024 [ 1189.838060][T14216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1190.055357][T14216] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.3346: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 1190.143191][T14216] EXT4-fs (loop3): Remounting filesystem read-only [ 1190.681508][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1190.930023][ T5992] udevd[5992]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 1191.117245][T14228] loop5: detected capacity change from 0 to 1024 [ 1191.337312][ T5951] udevd[5951]: symlink '../../loop5' '/dev/disk/by-label/untitled.tmp-b7:5' failed: Read-only file system [ 1191.538282][T14235] loop3: detected capacity change from 0 to 16 [ 1191.557709][ T5951] udevd[5951]: symlink '../../loop5' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:5' failed: Read-only file system [ 1191.601847][ T5992] udevd[5992]: symlink '../../loop3' '/dev/disk/by-uuid/75500962-132d-43aa-bb98-c3833f701d6f.tmp-b7:3' failed: Read-only file system [ 1191.634810][T14235] erofs (device loop3): mounted with root inode @ nid 36. [ 1192.442445][T14243] loop1: detected capacity change from 0 to 256 [ 1193.111830][T14243] FAT-fs (loop1): Directory bread(block 64) failed [ 1193.119120][T14243] FAT-fs (loop1): Directory bread(block 65) failed [ 1193.126609][T14243] FAT-fs (loop1): Directory bread(block 66) failed [ 1193.133703][T14243] FAT-fs (loop1): Directory bread(block 67) failed [ 1193.140704][T14243] FAT-fs (loop1): Directory bread(block 68) failed [ 1193.154857][T14243] FAT-fs (loop1): Directory bread(block 69) failed [ 1193.161912][T14243] FAT-fs (loop1): Directory bread(block 70) failed [ 1193.170962][T14243] FAT-fs (loop1): Directory bread(block 71) failed [ 1193.178513][T14243] FAT-fs (loop1): Directory bread(block 72) failed [ 1193.185569][T14243] FAT-fs (loop1): Directory bread(block 73) failed [ 1193.203174][T13262] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1193.469019][T13262] usb 6-1: Using ep0 maxpacket: 8 [ 1193.524544][T13262] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1193.535043][T13262] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1193.551715][T13262] usb 6-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 1193.567477][T13262] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.616912][T14250] loop7: detected capacity change from 0 to 512 [ 1193.686268][T13262] usb 6-1: config 0 descriptor?? [ 1193.690211][T14250] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1194.044690][T14250] EXT4-fs warning (device loop7): dx_probe:869: inode #2: comm syz.7.3360: Unimplemented hash flags: 0x0001 [ 1194.057274][T14250] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.3360: Corrupt directory, running e2fsck is recommended [ 1194.194319][T14250] EXT4-fs error (device loop7): ext4_readdir:261: inode #2: block 3: comm syz.7.3360: path /362/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 1194.300033][T13262] belkin 0003:050D:3201.002C: unexpected long global item [ 1194.411292][T13262] belkin 0003:050D:3201.002C: parse failed [ 1194.417903][T13262] belkin 0003:050D:3201.002C: probe with driver belkin failed with error -22 [ 1194.578485][ T9574] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1194.651887][T13262] usb 6-1: USB disconnect, device number 18 [ 1194.851017][ T5992] udevd[5992]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 1194.970057][T14257] loop3: detected capacity change from 0 to 256 [ 1195.185123][T14257] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xd8d18a93, utbl_chksum : 0xe619d30d) [ 1195.266202][T14259] loop1: detected capacity change from 0 to 64 [ 1196.574893][T14268] loop7: detected capacity change from 0 to 512 [ 1196.673974][T14268] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1197.011215][T14268] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1197.026142][T14268] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1197.291749][T14279] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 1197.317543][T13262] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1197.574470][T13262] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1197.581459][T13262] usb 9-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1197.594347][T13262] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.710229][ T5951] udevd[5951]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 1197.802429][T13262] usb 9-1: config 0 descriptor?? [ 1198.102153][ T5951] udevd[5951]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 1198.217574][ T9574] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1198.593469][T13262] video4linux radio48: keene_cmd_set failed (-71) [ 1198.600243][T13262] radio-keene 9-1:0.0: V4L2 device registered as radio48 [ 1198.723330][T13262] usb 9-1: USB disconnect, device number 3 [ 1201.700027][T14308] loop8: detected capacity change from 0 to 256 [ 1201.917192][T14308] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1201.926610][T14308] FAT-fs (loop8): Filesystem has been set read-only [ 1205.085186][T14338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3393'. [ 1206.236142][T13262] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 1206.434020][T13262] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1206.448639][T13262] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1206.467712][T13262] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1206.491840][T13262] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 99, setting to 64 [ 1206.506398][T13262] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1206.750533][T13262] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1206.760284][T13262] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.774942][T13262] usb 4-1: Product: syz [ 1206.779369][T13262] usb 4-1: Manufacturer: syz [ 1206.789511][T13262] usb 4-1: SerialNumber: syz [ 1206.828225][T14349] loop1: detected capacity change from 0 to 512 [ 1206.912140][T13262] usb 4-1: config 0 descriptor?? [ 1206.927932][T14346] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1207.038807][T13262] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input34 [ 1207.165079][T14349] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1207.318833][ T6047] udevd[6047]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 1207.447452][ T6047] udevd[6047]: symlink '../../loop1' '/dev/disk/by-uuid/00800000-0000-0000-0000-000000000000.tmp-b7:1' failed: Read-only file system [ 1208.174403][T10188] usb 4-1: USB disconnect, device number 27 [ 1208.937852][ T5788] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1209.779479][T14366] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3406'. [ 1209.834054][T14368] loop7: detected capacity change from 0 to 512 [ 1209.994892][T14368] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1210.221170][T14368] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1210.234647][T14368] ext4 filesystem being mounted at /371/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1210.540120][T14373] loop3: detected capacity change from 0 to 64 [ 1210.815490][T14373] hfs: small file entry [ 1211.152870][ T9574] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1211.860592][T14385] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3413'. [ 1211.870522][T14385] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3413'. [ 1211.880016][T14385] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3413'. [ 1211.918262][T14385] vlan2: entered allmulticast mode [ 1211.924574][T14385] gretap0: entered allmulticast mode [ 1212.450942][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1213.806542][T14399] mkiss: ax0: crc mode is auto. [ 1214.127688][ T29] audit: type=1326 audit(1739291182.565:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14400 comm="syz.5.3421" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 1214.157351][ T29] audit: type=1326 audit(1739291182.565:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14400 comm="syz.5.3421" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 1214.414507][ T29] audit: type=1326 audit(1739291182.645:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14400 comm="syz.5.3421" exe="/root/syz-executor" sig=0 arch=40000003 syscall=261 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 1214.441121][ T29] audit: type=1326 audit(1739291182.665:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14400 comm="syz.5.3421" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 1214.475667][ T29] audit: type=1326 audit(1739291182.665:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14400 comm="syz.5.3421" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 1214.574296][T14405] ptrace attach of ""[14406] was attempted by "./syz-executor exec"[14405] [ 1216.564174][T14420] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3431'. [ 1216.861832][T14417] loop7: detected capacity change from 0 to 4096 [ 1216.944429][T14417] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512). [ 1217.907330][T14431] loop8: detected capacity change from 0 to 64 [ 1218.166204][ T29] audit: type=1800 audit(1739291186.585:86): pid=14431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3433" name="file1" dev="loop8" ino=18 res=0 errno=0 [ 1218.980420][T14435] loop3: detected capacity change from 0 to 64 [ 1220.439514][T14445] loop5: detected capacity change from 0 to 64 [ 1220.689882][ T5784] hfs: node 4:3 still has 1 user(s)! [ 1220.879822][T14451] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3444'. [ 1220.889512][T14451] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3444'. [ 1225.721125][T14481] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3460'. [ 1225.731241][T14481] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3460'. [ 1226.665128][T14489] loop8: detected capacity change from 0 to 256 [ 1226.737747][T14489] exfat: Deprecated parameter 'namecase' [ 1226.751216][T14489] exfat: Deprecated parameter 'utf8' [ 1226.950746][T14489] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1227.166839][T14487] loop3: detected capacity change from 0 to 4096 [ 1227.594172][T14498] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1230.039897][ T29] audit: type=1326 audit(1739291198.485:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14511 comm="syz.1.3471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1230.053852][T14512] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3472'. [ 1230.066438][ T29] audit: type=1326 audit(1739291198.485:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14511 comm="syz.1.3471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1230.371391][ T29] audit: type=1326 audit(1739291198.615:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14511 comm="syz.1.3471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1230.397811][ T29] audit: type=1326 audit(1739291198.615:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14511 comm="syz.1.3471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1230.426273][ T29] audit: type=1326 audit(1739291198.625:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14511 comm="syz.1.3471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=325 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1230.454024][ T29] audit: type=1326 audit(1739291198.625:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14511 comm="syz.1.3471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1230.665374][T14515] tmpfs: Cannot change global quota limit on remount [ 1231.053116][T14519] loop8: detected capacity change from 0 to 128 [ 1231.226181][T14519] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1231.381325][T14519] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1232.701056][T14531] loop8: detected capacity change from 0 to 128 [ 1232.916778][T14531] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1233.109300][T14531] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1233.129226][T14529] loop3: detected capacity change from 0 to 2048 [ 1233.523612][T14538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3483'. [ 1233.577700][T14541] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3483'. [ 1233.587897][T14541] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3483'. [ 1233.615336][T14529] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1233.899057][T14529] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1234.965759][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1235.080046][T14551] loop8: detected capacity change from 0 to 128 [ 1238.474883][T14572] loop5: detected capacity change from 0 to 1024 [ 1238.833327][T10188] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1239.038642][T10188] usb 2-1: Using ep0 maxpacket: 32 [ 1239.078289][T10188] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1239.208600][T10188] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1239.218554][T10188] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1239.232787][T10188] usb 2-1: Product: syz [ 1239.239391][T10188] usb 2-1: Manufacturer: syz [ 1239.244410][T10188] usb 2-1: SerialNumber: syz [ 1239.382440][ T4108] hfsplus: b-tree write err: -5, ino 4 [ 1239.438891][T10188] usb 2-1: config 0 descriptor?? [ 1239.449948][T14577] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1239.546555][T10188] hub 2-1:0.0: bad descriptor, ignoring hub [ 1239.553057][T10188] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1239.890198][T10188] usb 2-1: USB disconnect, device number 18 [ 1240.473190][ T9553] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1240.711160][ T9553] usb 2-1: Using ep0 maxpacket: 32 [ 1240.749557][ T9553] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1240.886738][ T9553] usb 2-1: string descriptor 0 read error: -22 [ 1240.894014][ T9553] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1240.903720][ T9553] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1240.994525][ T9553] usb 2-1: config 0 descriptor?? [ 1241.007380][T14577] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1241.038392][ T9553] hub 2-1:0.0: bad descriptor, ignoring hub [ 1241.044880][ T9553] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1241.464183][ T9553] usb 2-1: USB disconnect, device number 19 [ 1242.474095][T14597] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3507'. [ 1244.311725][T14609] trusted_key: encrypted_key: key user:syz not found [ 1247.225659][T14630] loop1: detected capacity change from 0 to 2048 [ 1247.375642][T14630] loop1: p1 < > p2 < > p3 p4 < > [ 1247.381176][T14630] loop1: partition table partially beyond EOD, truncated [ 1247.389835][T14630] loop1: p1 start 2305 is beyond EOD, truncated [ 1247.397380][T14630] loop1: p2 start 4294902784 is beyond EOD, truncated [ 1247.404602][T14630] loop1: p3 start 3724543488 is beyond EOD, truncated [ 1249.142316][T14649] net_ratelimit: 336 callbacks suppressed [ 1249.142404][T14649] sock: sock_set_timeout: `syz.5.3533' (pid 14649) tries to set negative timeout [ 1252.308831][T14667] loop1: detected capacity change from 0 to 4096 [ 1252.615175][T14667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1253.029224][T14677] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #15: comm syz.1.3541: corrupted inode contents [ 1253.196803][T14677] EXT4-fs (loop1): Remounting filesystem read-only [ 1253.203890][T14677] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -5) [ 1253.245686][ T1845] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1253.263486][ T1845] Quota error (device loop1): write_blk: dquota write failed [ 1253.273470][ T1845] Quota error (device loop1): free_dqentry: Can't write quota data block 5 [ 1253.744047][ T29] audit: type=1326 audit(1739291222.165:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.5.3546" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 1253.773004][ T29] audit: type=1326 audit(1739291222.165:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.5.3546" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x7ffc0000 [ 1253.916477][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1256.868516][T14705] dvmrp8: entered allmulticast mode [ 1256.989270][T14704] dvmrp8: left allmulticast mode [ 1257.478493][T14703] loop5: detected capacity change from 0 to 4096 [ 1258.417644][T14703] ntfs3(loop5): ino=1e, "file1" attr_set_size [ 1258.424291][T14703] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1258.914073][T14717] tipc: Started in network mode [ 1258.919331][T14717] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 1258.933358][T14717] tipc: Enabled bearer , priority 26 [ 1260.043003][T10188] tipc: Node number set to 4269801488 [ 1261.485714][T14737] loop1: detected capacity change from 0 to 764 [ 1263.217364][T14749] ptrace attach of "./syz-executor exec"[13177] was attempted by ""[14749] [ 1264.586907][T14759] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3580'. [ 1264.674394][T14754] loop5: detected capacity change from 0 to 2048 [ 1264.688214][T14764] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3583'. [ 1264.796902][T14754] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1264.884377][T14754] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1266.846598][T14772] loop1: detected capacity change from 0 to 4096 [ 1267.821088][T14782] syz.5.3591 (14782): /proc/14781/oom_adj is deprecated, please use /proc/14781/oom_score_adj instead. [ 1269.258597][ T9553] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1269.503108][ T9553] usb 2-1: Using ep0 maxpacket: 32 [ 1269.582215][ T9553] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1269.600630][ T9553] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1269.616271][ T9553] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1269.625843][ T9553] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.809774][ T9553] usb 2-1: config 0 descriptor?? [ 1269.820812][T14791] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1269.825923][T14799] netlink: 'syz.3.3599': attribute type 29 has an invalid length. [ 1269.940875][ T9553] hub 2-1:0.0: USB hub found [ 1269.992919][T14799] netlink: 'syz.3.3599': attribute type 29 has an invalid length. [ 1270.216931][ T9553] hub 2-1:0.0: 2 ports detected [ 1270.413302][ T9553] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 1270.419973][ T9553] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1270.568709][ T9553] usbhid 2-1:0.0: can't add hid device: -71 [ 1270.586961][ T9553] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1270.743058][ T9553] usb 2-1: USB disconnect, device number 20 [ 1271.842945][T10188] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1271.972287][T14813] loop8: detected capacity change from 0 to 256 [ 1272.063760][T10188] usb 6-1: Using ep0 maxpacket: 8 [ 1272.104066][T10188] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1272.115603][T10188] usb 6-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1272.128939][T10188] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1272.136022][T10188] usb 6-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 1272.145672][T10188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.347974][T10188] usb 6-1: config 0 descriptor?? [ 1272.955092][T10188] chicony 0003:04F2:1421.002D: unbalanced delimiter at end of report description [ 1272.980528][T10188] chicony 0003:04F2:1421.002D: Chicony hid parse failed: -22 [ 1272.990722][T10188] chicony 0003:04F2:1421.002D: probe with driver chicony failed with error -22 [ 1273.183434][T10188] usb 6-1: USB disconnect, device number 19 [ 1273.728308][T14822] loop7: detected capacity change from 0 to 512 [ 1273.890377][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1273.952719][T14822] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1273.978573][T14829] loop3: detected capacity change from 0 to 8 [ 1274.071085][T14829] SQUASHFS error: Failed to read block 0x2fc: -5 [ 1274.078792][T14829] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 1274.089772][T14829] SQUASHFS error: Unable to read directory block [247:26] [ 1274.368270][T14822] EXT4-fs (loop7): 1 truncate cleaned up [ 1274.376461][T14822] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1275.313767][ T9574] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1276.110863][T14847] No buffer was provided with the request [ 1276.261187][T14851] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3617'. [ 1279.201796][T14874] loop1: detected capacity change from 0 to 1024 [ 1279.350953][T14874] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1279.361423][T14874] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1279.378587][T14874] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1279.546299][T14874] EXT4-fs error (device loop1): ext4_get_journal_inode:5798: inode #5: comm syz.1.3628: unexpected bad inode w/o EXT4_IGET_BAD [ 1279.668227][T14877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3630'. [ 1279.673319][T14874] EXT4-fs (loop1): no journal found [ 1279.688833][T14877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3630'. [ 1279.702936][T14874] EXT4-fs (loop1): can't get journal size [ 1279.841194][T14874] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1280.582212][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1281.237598][T14891] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3636'. [ 1282.188509][T14898] sch_fq: defrate 0 ignored. [ 1284.663124][ T29] audit: type=1326 audit(1739291253.085:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14917 comm="syz.1.3648" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1284.823280][ T29] audit: type=1326 audit(1739291253.155:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14917 comm="syz.1.3648" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1284.846083][ T29] audit: type=1326 audit(1739291253.165:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14917 comm="syz.1.3648" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1284.868678][ T29] audit: type=1326 audit(1739291253.165:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14917 comm="syz.1.3648" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1284.891658][ T29] audit: type=1326 audit(1739291253.165:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14917 comm="syz.1.3648" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1284.921868][ T29] audit: type=1326 audit(1739291253.205:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14917 comm="syz.1.3648" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1284.947100][ T29] audit: type=1326 audit(1739291253.205:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14917 comm="syz.1.3648" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1284.969746][ T29] audit: type=1326 audit(1739291253.205:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14917 comm="syz.1.3648" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1284.992364][ T29] audit: type=1326 audit(1739291253.225:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14917 comm="syz.1.3648" exe="/root/syz-executor" sig=0 arch=40000003 syscall=372 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1285.021757][ T29] audit: type=1326 audit(1739291253.225:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14917 comm="syz.1.3648" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 1286.191931][T14021] Bluetooth: hci5: command 0x0405 tx timeout [ 1286.553080][T14931] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3653'. [ 1287.365812][T14934] loop1: detected capacity change from 0 to 4096 [ 1287.423797][T14934] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1287.945989][T14934] ntfs3(loop1): ino=19, mi_enum_attr [ 1287.951777][T14934] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1289.140262][T14947] loop5: detected capacity change from 0 to 1024 [ 1290.190054][ T29] audit: type=1326 audit(1739291258.605:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14954 comm="syz.8.3665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1290.216208][ T29] audit: type=1326 audit(1739291258.625:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14954 comm="syz.8.3665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1290.385130][ T4530] hfsplus: b-tree write err: -5, ino 4 [ 1290.438114][ T29] audit: type=1326 audit(1739291258.725:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14954 comm="syz.8.3665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1290.464087][ T29] audit: type=1326 audit(1739291258.725:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14954 comm="syz.8.3665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1290.486866][ T29] audit: type=1326 audit(1739291258.735:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14954 comm="syz.8.3665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=427 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1290.509618][ T29] audit: type=1326 audit(1739291258.735:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14954 comm="syz.8.3665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1290.537905][ T29] audit: type=1326 audit(1739291258.735:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14954 comm="syz.8.3665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1295.870559][ T5784] bond0: (slave syz_tun): Releasing backup interface [ 1296.226049][T13363] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.518852][T13363] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.857913][T13363] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.171606][T13363] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.930962][T13363] bridge_slave_1: left allmulticast mode [ 1297.937124][T13363] bridge_slave_1: left promiscuous mode [ 1297.944166][T13363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.018662][T13363] bridge_slave_0: left allmulticast mode [ 1298.025012][T13363] bridge_slave_0: left promiscuous mode [ 1298.031784][T13363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.904642][T13363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1298.965603][T13363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1299.013715][T13363] bond0 (unregistering): Released all slaves [ 1299.199347][T13363] tipc: Disabling bearer [ 1299.206328][T13363] tipc: Left network mode [ 1299.818618][T13363] hsr_slave_0: left promiscuous mode [ 1299.883251][T13363] hsr_slave_1: left promiscuous mode [ 1299.891476][T13363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1299.903389][T13363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1300.001204][T13363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1300.009734][T13363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1300.133805][T13363] macvtap0: left promiscuous mode [ 1300.141125][T13363] veth1_macvtap: left promiscuous mode [ 1300.150750][T13363] veth0_macvtap: left promiscuous mode [ 1300.164470][T13363] veth1_vlan: left promiscuous mode [ 1300.170155][T13363] veth0_vlan: left promiscuous mode [ 1300.183943][T15017] loop5: detected capacity change from 0 to 512 [ 1300.607495][T15015] loop7: detected capacity change from 0 to 2048 [ 1300.892166][T15017] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1300.905723][T15017] ext4 filesystem being mounted at /716/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1301.008722][T15021] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1301.185338][ T29] audit: type=1800 audit(1739291269.605:112): pid=15022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3694" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1301.363253][ T29] audit: type=1800 audit(1739291269.665:113): pid=15015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3693" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1301.713000][T10188] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1301.831101][T13363] team0 (unregistering): Port device team_slave_1 removed [ 1301.871304][T13363] team0 (unregistering): Port device team_slave_0 removed [ 1301.913305][T10188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1301.924873][T10188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1301.935069][T10188] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1301.948404][T10188] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 1301.957932][T10188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.043457][T15021] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1302.054937][T15021] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1302.179062][T10188] usb 2-1: config 0 descriptor?? [ 1302.257379][ T6352] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1302.289925][T15021] Remounting filesystem read-only [ 1302.439132][T15026] loop8: detected capacity change from 0 to 1024 [ 1302.458595][ T9574] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 1302.635881][T15026] EXT4-fs: Ignoring removed i_version option [ 1302.646233][T15026] EXT4-fs: inline encryption not supported [ 1302.668834][T15026] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1302.683359][T14021] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1302.754614][T14021] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1302.784340][T14021] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1302.842744][T14021] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1302.843744][T15026] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1303.009911][T10188] aureal 0003:0755:2626.002E: unknown main item tag 0x0 [ 1303.017599][T10188] aureal 0003:0755:2626.002E: unknown main item tag 0x0 [ 1303.034398][T10188] aureal 0003:0755:2626.002E: unknown main item tag 0x0 [ 1303.041787][T10188] aureal 0003:0755:2626.002E: unknown main item tag 0x0 [ 1303.051877][T10188] aureal 0003:0755:2626.002E: unknown main item tag 0x0 [ 1303.060484][T14021] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1303.078162][T14021] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1303.088232][T10188] aureal 0003:0755:2626.002E: hidraw0: USB HID v0.0b Device [HID 0755:2626] on usb-dummy_hcd.1-1/input0 [ 1303.176647][T13363] IPVS: stop unused estimator thread 0... [ 1303.296360][ T9553] usb 2-1: USB disconnect, device number 21 [ 1304.117305][T13177] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1305.215865][ T5800] Bluetooth: hci0: command tx timeout [ 1305.653591][T15027] chnl_net:caif_netlink_parms(): no params data found [ 1306.597476][T15053] loop8: detected capacity change from 0 to 2048 [ 1306.807463][T15053] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1306.850354][T15057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3705'. [ 1306.887186][T15053] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 1306.896510][T15053] UDF-fs: Scanning with blocksize 512 failed [ 1306.908868][T15058] loop7: detected capacity change from 0 to 1024 [ 1306.953763][T15058] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1307.031721][T15058] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1307.043360][T15058] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 1307.058103][T15058] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1307.173773][T15053] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1307.186248][T15058] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1307.303729][ T5800] Bluetooth: hci0: command tx timeout [ 1307.955298][ T9574] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1308.578916][T15027] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.587523][T15027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.595779][T15027] bridge_slave_0: entered allmulticast mode [ 1308.609020][T15027] bridge_slave_0: entered promiscuous mode [ 1308.745901][T15027] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.766513][T15027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.774789][T15027] bridge_slave_1: entered allmulticast mode [ 1308.788671][T15027] bridge_slave_1: entered promiscuous mode [ 1309.264624][T15027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1309.378878][ T5800] Bluetooth: hci0: command tx timeout [ 1309.523023][T15027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1309.633848][T15074] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3712'. [ 1310.109821][T15027] team0: Port device team_slave_0 added [ 1310.276084][T15027] team0: Port device team_slave_1 added [ 1310.874468][T15027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1310.881788][T15027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1310.919384][T15027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1311.147050][T15027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1311.147138][T15027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1311.147325][T15027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1311.463328][ T5800] Bluetooth: hci0: command tx timeout [ 1311.862199][T15027] hsr_slave_0: entered promiscuous mode [ 1311.880117][T15027] hsr_slave_1: entered promiscuous mode [ 1311.890075][T15027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1311.898129][T15027] Cannot create hsr debugfs directory [ 1312.891364][T15097] bond1: entered promiscuous mode [ 1312.901053][T15097] bond1: entered allmulticast mode [ 1312.909233][T15097] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1313.052837][T15097] bond1 (unregistering): Released all slaves [ 1314.791536][T15027] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1314.914161][T15027] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1315.010710][T15027] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1315.119952][T15027] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1317.500557][T15027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1317.684610][T15131] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1317.830237][T15027] 8021q: adding VLAN 0 to HW filter on device team0 [ 1317.964370][ T749] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.972253][ T749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1318.205533][ T749] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.213521][ T749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1320.253125][ T5800] Bluetooth: hci4: command 0x0406 tx timeout [ 1320.505021][T15151] netlink: 'syz.1.3746': attribute type 25 has an invalid length. [ 1320.516876][T15151] netlink: 'syz.1.3746': attribute type 7 has an invalid length. [ 1321.854106][ T29] audit: type=1326 audit(1739291290.295:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15157 comm="syz.8.3748" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1322.006372][ T29] audit: type=1326 audit(1739291290.375:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15157 comm="syz.8.3748" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1322.032395][ T29] audit: type=1326 audit(1739291290.375:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15157 comm="syz.8.3748" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1322.058564][ T29] audit: type=1326 audit(1739291290.375:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15157 comm="syz.8.3748" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1322.086208][ T29] audit: type=1326 audit(1739291290.405:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15157 comm="syz.8.3748" exe="/root/syz-executor" sig=0 arch=40000003 syscall=196 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1322.094080][T15027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1322.116051][ T29] audit: type=1326 audit(1739291290.405:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15157 comm="syz.8.3748" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1322.116302][ T29] audit: type=1326 audit(1739291290.405:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15157 comm="syz.8.3748" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1325.232145][T15184] loop8: detected capacity change from 0 to 16 [ 1326.796175][T15194] loop8: detected capacity change from 0 to 16 [ 1326.834481][T15192] loop5: detected capacity change from 0 to 512 [ 1326.927014][T15192] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1327.144699][T15192] EXT4-fs (loop5): 1 truncate cleaned up [ 1327.152936][T15192] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1327.348048][T15027] veth0_vlan: entered promiscuous mode [ 1327.563739][T15027] veth1_vlan: entered promiscuous mode [ 1328.047105][T15027] veth0_macvtap: entered promiscuous mode [ 1328.186270][ T6352] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1328.204068][T15027] veth1_macvtap: entered promiscuous mode [ 1328.633797][T15027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1328.644724][T15027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.658315][T15027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1328.669241][T15027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.679682][T15027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1328.693911][T15027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.704609][T15027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1328.715551][T15027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.735809][T15027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1328.748923][T15027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.762738][T15027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1328.773744][T15027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.794020][T15027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1329.110026][T15027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1329.124482][T15027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.142360][T15027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1329.159146][T15027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.169437][T15027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1329.180456][T15027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.193984][T15027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1329.204862][T15027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.215221][T15027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1329.229330][T15027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.246926][T15027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1329.263222][T15027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.280225][T15027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1329.918505][T15027] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.927887][T15027] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.938128][T15027] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.950439][T15027] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.967318][T15210] syz.7.3768: attempt to access beyond end of device [ 1329.967318][T15210] loop15: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1329.967496][T15210] FAT-fs (loop15): unable to read boot sector [ 1330.346848][ T9553] kernel write not supported for file /snd/seq (pid: 9553 comm: kworker/1:1) [ 1331.562084][T13363] Bluetooth: hci1: Frame reassembly failed (-84) [ 1331.649027][T15223] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1333.088199][T15234] loop7: detected capacity change from 0 to 2048 [ 1333.266423][T15234] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1333.413739][T15234] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1333.612885][T14021] Bluetooth: hci1: command 0x1003 tx timeout [ 1333.619310][ T5800] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1334.510386][T15247] input: syz0 as /devices/virtual/input/input36 [ 1335.327681][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1335.774873][T15257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3784'. [ 1335.910511][T15257] netlink: 173 bytes leftover after parsing attributes in process `syz.1.3784'. [ 1335.953241][T15258] loop8: detected capacity change from 0 to 512 [ 1336.103114][T15258] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1336.411344][T15258] EXT4-fs (loop8): 1 truncate cleaned up [ 1336.429125][T15258] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1337.220662][T13177] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1337.402810][T15272] loop5: detected capacity change from 0 to 64 [ 1337.742393][T15274] loop7: detected capacity change from 0 to 128 [ 1339.322710][T15287] loop7: detected capacity change from 0 to 128 [ 1339.411689][T15287] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1339.646065][T15287] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1339.861406][ T29] audit: type=1800 audit(1739291308.285:121): pid=15287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3794" name="file0" dev="loop7" ino=89 res=0 errno=0 [ 1340.723501][ T5051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1340.731642][ T5051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1341.151236][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1341.159643][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1343.586447][T15316] loop1: detected capacity change from 0 to 1024 [ 1343.951274][T15321] loop7: detected capacity change from 0 to 256 [ 1344.140435][T15321] netlink: 340 bytes leftover after parsing attributes in process `syz.7.3808'. [ 1344.236048][T15323] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3809'. [ 1345.781409][T15333] loop8: detected capacity change from 0 to 512 [ 1347.428358][T15349] loop5: detected capacity change from 0 to 8 [ 1349.081052][T15360] lo speed is unknown, defaulting to 1000 [ 1349.087455][T15360] lo speed is unknown, defaulting to 1000 [ 1349.094792][T15360] lo speed is unknown, defaulting to 1000 [ 1349.173795][T15360] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1349.448145][T15360] lo speed is unknown, defaulting to 1000 [ 1349.457558][T15360] lo speed is unknown, defaulting to 1000 [ 1349.467032][T15360] lo speed is unknown, defaulting to 1000 [ 1349.477104][T15360] lo speed is unknown, defaulting to 1000 [ 1349.486649][T15360] lo speed is unknown, defaulting to 1000 [ 1349.495818][T15360] lo speed is unknown, defaulting to 1000 [ 1349.533566][T15360] lo speed is unknown, defaulting to 1000 [ 1350.313223][ T2230] kernel read not supported for file /adsp1 (pid: 2230 comm: kworker/0:2) [ 1356.757450][T15410] netlink: 128 bytes leftover after parsing attributes in process `syz.8.3849'. [ 1356.767641][T15410] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3849'. [ 1359.292160][T15431] lo: entered allmulticast mode [ 1359.360249][T15431] lo: left allmulticast mode [ 1359.762739][T15437] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3859'. [ 1360.398098][T15440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3860'. [ 1360.596857][T15443] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3862'. [ 1360.848109][T15446] tun0: tun_chr_ioctl cmd 2147767517 [ 1361.506406][ T59] ===================================================== [ 1361.514066][ T59] BUG: KMSAN: uninit-value in n_tty_receive_buf_closing+0x539/0xb40 [ 1361.522768][ T59] n_tty_receive_buf_closing+0x539/0xb40 [ 1361.528718][ T59] n_tty_receive_buf_common+0x196b/0x2490 [ 1361.538296][ T59] n_tty_receive_buf2+0x4c/0x60 [ 1361.543599][ T59] tty_ldisc_receive_buf+0xd0/0x290 [ 1361.549076][ T59] tty_port_default_receive_buf+0xdf/0x190 [ 1361.555276][ T59] flush_to_ldisc+0x473/0xdb0 [ 1361.561298][ T59] process_scheduled_works+0xae0/0x1c40 [ 1361.570592][ T59] worker_thread+0xea7/0x14f0 [ 1361.576317][ T59] kthread+0x6b9/0xef0 [ 1361.580625][ T59] ret_from_fork+0x6d/0x90 [ 1361.585458][ T59] ret_from_fork_asm+0x1a/0x30 [ 1361.590487][ T59] [ 1361.596957][ T59] Uninit was created at: [ 1361.601565][ T59] __kmalloc_noprof+0x923/0x1230 [ 1361.615276][ T59] __tty_buffer_request_room+0x36e/0x6d0 [ 1361.621200][ T59] __tty_insert_flip_string_flags+0x140/0x570 [ 1361.634561][ T59] uart_insert_char+0x39e/0xa10 [ 1361.639731][ T59] serial8250_read_char+0x1a7/0x5d0 [ 1361.645775][ T59] serial8250_handle_irq+0x971/0x1130 [ 1361.651440][ T59] serial8250_default_handle_irq+0x120/0x2b0 [ 1361.661042][ T59] serial8250_interrupt+0xc5/0x360 [ 1361.667459][ T59] __handle_irq_event_percpu+0x118/0xca0 [ 1361.673619][ T59] handle_irq_event+0xef/0x2c0 [ 1361.678675][ T59] handle_edge_irq+0x340/0xfb0 [ 1361.686832][ T59] __common_interrupt+0x97/0x1f0 [ 1361.692022][ T59] common_interrupt+0x92/0xb0 [ 1361.703715][ T59] asm_common_interrupt+0x2b/0x40 [ 1361.709006][ T59] [ 1361.713316][ T59] CPU: 1 UID: 0 PID: 59 Comm: kworker/u8:4 Tainted: G W 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1361.729008][ T59] Tainted: [W]=WARN [ 1361.733166][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1361.743590][ T59] Workqueue: events_unbound flush_to_ldisc [ 1361.749661][ T59] ===================================================== [ 1361.759994][ T59] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1361.766544][ T59] Kernel panic - not syncing: kmsan.panic set ... [ 1361.773153][ T59] CPU: 1 UID: 0 PID: 59 Comm: kworker/u8:4 Tainted: G B W 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1361.785624][ T59] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1361.790799][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1361.801070][ T59] Workqueue: events_unbound flush_to_ldisc [ 1361.807145][ T59] Call Trace: [ 1361.810576][ T59] [ 1361.813652][ T59] dump_stack_lvl+0x216/0x2d0 [ 1361.818541][ T59] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1361.824598][ T59] dump_stack+0x1e/0x24 [ 1361.828952][ T59] panic+0x4e2/0xcf0 [ 1361.833111][ T59] ? kmsan_get_metadata+0xe1/0x1c0 [ 1361.838473][ T59] kmsan_report+0x2c7/0x2d0 [ 1361.843204][ T59] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1361.849240][ T59] ? __msan_warning+0x95/0x120 [ 1361.854218][ T59] ? n_tty_receive_buf_closing+0x539/0xb40 [ 1361.860295][ T59] ? n_tty_receive_buf_common+0x196b/0x2490 [ 1361.866486][ T59] ? n_tty_receive_buf2+0x4c/0x60 [ 1361.871790][ T59] ? tty_ldisc_receive_buf+0xd0/0x290 [ 1361.877412][ T59] ? tty_port_default_receive_buf+0xdf/0x190 [ 1361.883648][ T59] ? flush_to_ldisc+0x473/0xdb0 [ 1361.888753][ T59] ? process_scheduled_works+0xae0/0x1c40 [ 1361.894869][ T59] ? worker_thread+0xea7/0x14f0 [ 1361.900138][ T59] ? kthread+0x6b9/0xef0 [ 1361.904615][ T59] ? ret_from_fork+0x6d/0x90 [ 1361.909456][ T59] ? ret_from_fork_asm+0x1a/0x30 [ 1361.914639][ T59] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1361.920721][ T59] ? kmsan_get_metadata+0x13e/0x1c0 [ 1361.926159][ T59] ? kmsan_get_metadata+0x13e/0x1c0 [ 1361.931687][ T59] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1361.937736][ T59] ? ret_from_fork+0x6d/0x90 [ 1361.942560][ T59] ? filter_irq_stacks+0x60/0x1a0 [ 1361.947852][ T59] ? kmsan_get_metadata+0x13e/0x1c0 [ 1361.953286][ T59] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1361.959350][ T59] ? kmsan_get_metadata+0x13e/0x1c0 [ 1361.964808][ T59] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1361.970891][ T59] __msan_warning+0x95/0x120 [ 1361.975916][ T59] n_tty_receive_buf_closing+0x539/0xb40 [ 1361.982075][ T59] n_tty_receive_buf_common+0x196b/0x2490 [ 1361.988178][ T59] n_tty_receive_buf2+0x4c/0x60 [ 1361.993291][ T59] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 1361.999095][ T59] tty_ldisc_receive_buf+0xd0/0x290 [ 1362.004547][ T59] tty_port_default_receive_buf+0xdf/0x190 [ 1362.010600][ T59] flush_to_ldisc+0x473/0xdb0 [ 1362.015539][ T59] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 1362.022228][ T59] ? __pfx_flush_to_ldisc+0x10/0x10 [ 1362.027648][ T59] process_scheduled_works+0xae0/0x1c40 [ 1362.033533][ T59] worker_thread+0xea7/0x14f0 [ 1362.038473][ T59] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1362.044579][ T59] kthread+0x6b9/0xef0 [ 1362.048933][ T59] ? __pfx_worker_thread+0x10/0x10 [ 1362.054350][ T59] ? __pfx_kthread+0x10/0x10 [ 1362.059128][ T59] ret_from_fork+0x6d/0x90 [ 1362.063767][ T59] ? __pfx_kthread+0x10/0x10 [ 1362.068592][ T59] ret_from_fork_asm+0x1a/0x30 [ 1362.073586][ T59] [ 1362.077084][ T59] Kernel Offset: disabled [ 1362.081495][ T59] Rebooting in 86400 seconds..