last executing test programs: 8m41.254342488s ago: executing program 32 (id=318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) 6m20.334565169s ago: executing program 5 (id=967): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x7000000) fcntl$setpipe(r0, 0x407, 0x100000) 6m18.389648398s ago: executing program 5 (id=972): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x1) 6m17.474328277s ago: executing program 5 (id=977): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x40, 0x200, 0x0, 'queue0\x00', 0xf}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2, 0x0, 0x2}, 0x802}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000300)={0x55, 0x8, 0xe, 0x1ff, 0x3ff, 0x3ff}) 6m16.288989218s ago: executing program 5 (id=983): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x901095, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x202) 6m15.769327872s ago: executing program 5 (id=987): setresuid(0xee00, 0xee01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x296) 6m15.289296667s ago: executing program 5 (id=989): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f00000010c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x4) 6m12.304544231s ago: executing program 33 (id=989): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f00000010c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x4) 4m14.05498086s ago: executing program 6 (id=1636): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000010c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf0400000000fbdbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100000c004300f8"], 0x44}}, 0x0) 4m12.531891984s ago: executing program 6 (id=1638): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@dioread_lock}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x569, &(0x7f0000000700)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000003c0)='ext4_ext_show_extent\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 4m11.076748447s ago: executing program 6 (id=1644): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) 4m10.046677129s ago: executing program 6 (id=1647): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000001440)={[{@noinit_itable}, {@usrquota}, {@jqfmt_vfsv0}, {@abort}, {@nodelalloc}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0x1, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x189000, 0x1) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 4m9.197290197s ago: executing program 6 (id=1653): r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 4m8.361384583s ago: executing program 6 (id=1658): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="120000000c000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000cb"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r2, &(0x7f0000000080)}, 0x20) 4m6.89822143s ago: executing program 34 (id=1658): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="120000000c000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000cb"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r2, &(0x7f0000000080)}, 0x20) 2m20.489305606s ago: executing program 2 (id=2402): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="12000000170000000400000006"], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000100)=@udp=r1}, 0x20) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0xae1}], 0x3a, 0x40010002, 0x0) 2m20.168603909s ago: executing program 2 (id=2404): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', r1, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 2m19.803705073s ago: executing program 2 (id=2407): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa27aaaaaaaaaa2808060001080006"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 2m19.318134121s ago: executing program 2 (id=2411): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x2000000, &(0x7f0000000600)=ANY=[], 0xde, 0xc2d, &(0x7f0000002d80)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) unlink(&(0x7f0000000000)='./file0/file0\x00') 2m18.342039278s ago: executing program 2 (id=2418): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x3, 0x67, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x172f, 0x38, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfd, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="400e16"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m17.656347507s ago: executing program 2 (id=2421): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000001c0)=@int=0x80000000, 0x4) 2m16.287534697s ago: executing program 35 (id=2421): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000001c0)=@int=0x80000000, 0x4) 2m16.248592028s ago: executing program 4 (id=2426): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="120000000e0000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f00000001c0), &(0x7f00000003c0)=""/119}, 0x20) 2m15.697306455s ago: executing program 4 (id=2427): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 2m13.927216044s ago: executing program 4 (id=2433): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 2m13.297901009s ago: executing program 4 (id=2437): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f00000004c0)=ANY=[@ANYBLOB='nodiscard,quota,iocharset=cp950,grpquota,quota,noquota,nointegrity\x00uid=', @ANYRESHEX, @ANYRES64=0x0, @ANYRESHEX=0x0, @ANYBLOB="bf6a8bfcf00ce3cc70200921", @ANYRESHEX=0x0, @ANYRES16, @ANYRES64=0x0, @ANYRES32, @ANYRES64], 0x1, 0x617a, &(0x7f0000000580)="$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") mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2m12.235969944s ago: executing program 4 (id=2443): r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}, 0x4000000) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a40)=""/188, 0xbc}], 0x1, &(0x7f0000000500)=""/87, 0x57}}], 0x1, 0x0, 0x0) 2m11.298037256s ago: executing program 4 (id=2448): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f00000000c0)=0xb, 0x4) bind$bt_hci(r0, &(0x7f0000003f40)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/31, 0x1f}, 0xffffff6d}], 0x1, 0x20, 0x0) 2m9.772670705s ago: executing program 36 (id=2448): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f00000000c0)=0xb, 0x4) bind$bt_hci(r0, &(0x7f0000003f40)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/31, 0x1f}, 0xffffff6d}], 0x1, 0x20, 0x0) 24.193913172s ago: executing program 9 (id=3163): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000800)={r1, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x1, 0xa17433da3c5d69a5, 0x2, 0x8}, 0x9c) 23.705034714s ago: executing program 9 (id=3167): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x81, 0xffffffff}) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x68000080) 23.303123799s ago: executing program 9 (id=3172): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="d45ad7fb0100"}) 22.902799457s ago: executing program 9 (id=3174): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], 0x11, 0x6f2, &(0x7f0000000ac0)="$eJzs3U9sHFcZAPBv1mt7N1Udt03TIFWqaVFBWCSxLRfMJQYhZKQKqiDB2WqcxsrmD7aL3B6wC0hcOXBFKgdzgRMIISEhRSpnuFXcLE4VSFx6Snpg0Pxbr93d9TquvS78ftFk3rw3780338y+2V3J2gD+by1NR/1BNGNp+tXNbHt3Z661uzN3pyjXWhExHhG1iHpHr+S9iMUolvhMVlE19DrOL1YXrr//4e4HxVa9XGpR/NfsHWB9kLPYLpeYioiRcn0M+8Z7/fHGG98rJu3MZAl7qUocDNtoRKT7/ODiXks36UjHRs/XO/DpkRTPzQ7F638y4lxENKoH2nbRWDv9CA91pLlo++TiAAAAgDPj/MOtiM2YGHYcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GlS/v5/Ui6PqvJUJNXv/3+uY/exIYbaX//IGlXhQe00ggEAAAAAAACAk/XCw/jN9TSdqLbTJGrfGyk3muX6zViPlXrE5diM5diIjViLmYiY7BhobHN5Y2NtJl7Mty58lKZpPFH0jLV9PWe79pwdMODmcc8YAAAAAAAAAP6nXJsfz9c/jqWYGHYwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQKYkYKVb5cqEqT0atHhGNiBjL9tuO+FtVPkPqR+3w4GTiAAAAgCEb3bd1/mE8jM2YqLbTJP/MfzH/3N+IN+NubMRqbEQrVuJG/l1A8am/truzNb27M3cnW8phv/Nke9yv/XvvGL+fODSofMQovnvofuRL+R7NuBmrec3leD3uRStuRC3vmblUxdMRV4d3spiSa4U0jfFB0nWjXGdn/vNyfSqah+0wmWdktJ2Rq1lsSZHHp/pnovPqDODgkWai1v7m50LvI7W/jKlyfq3vUZL/pGlROlfVRDzxrb45z++X0SOdzLEczMRsx913sX/OIz7/h99+/1br7u1byfb0qd1Gj+WF7tXj/6iuUJWJwnasxFxHJp4bOBM31894Jnra/01jLZ5tl5fim/HdmI6peC3WYjV+GMuxESsxFd/IS8vl/Zz9P9k/U4v7tl47LKax8rqMHIjps+eLdb+YXsz7TsRqfDvuxY1YiVfyf7MxE1+O+ZiPhY4r/OwAM22ty6v+j72Df+kLZSGb+H62NwGe4qu7lyyvT3XktXPOnczbOmtqkZZPlqeP8DzqPzdW9h5Z2ZX4ScdrcPjamWhE+ylRRfdMlYHRrpn4VT6trLfu3l67tXz/wLjJdvfjvRz7T//sTCTZ/fJ0e47Yf3dkbc90bZvJ2y6022oH237dbLcd9kodK9/DfXyk2bztuYj4ZRlt1pbJ5vCs7VJHv+z9ViNv+yhN0+L9FgBn3rkvnhtr/qv51+a7zZ82bzVfbXx9/Cvjz4/F6F9Gv1q/OvJy7fnkd/Fu/CgO/4QOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcav2tt28vt1orawcKaZpu9Wg6kULUI/bV/PlPHfvkvzUWEYMPmO29WIvIa+pRFgbo/s+IKGu2Hu903nncJPy9vCankvA+hWTgnRs975+ycO/J8nQepWl66qdT/VbbkbunpaFdgk+4UP1E1seaknpEj15DmY6AU3Rl4879K+tvvf2l1TvLb6y8sXJ3YX5+4erC/CtzV26uthrDDg84QfmzPn+fM+xIAAAAAAAAAAAAgEEN9sc5ye3lKGrq3f6K4LDuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMewNB31B5HEzNXLV7Pt3Z25VrZU5Ww9ku/5KCJqEZFMRSTvRSxGscRkx3BJr+NsR1x//8PdD4qternk+9eOfxbb5RJTZbhT3fdrdKtMt3qNl+Tj3O893oCSchlp1yweazz4hPw3AAD//xEwCSs=") mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x40) getdents(r0, 0x0, 0x58) 22.201260204s ago: executing program 9 (id=3179): r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000540)={'filter\x00', 0xb001, 0x4, 0x3d0, 0x0, 0x110, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x7, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x10b, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) 21.644555342s ago: executing program 9 (id=3183): setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) 20.461324919s ago: executing program 37 (id=3183): setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) 9.415159976s ago: executing program 0 (id=3236): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000140)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @local, 0x1}, 0x10) 5.046541451s ago: executing program 0 (id=3258): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000007d00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) 4.32515712s ago: executing program 0 (id=3263): r0 = syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r0, 0x0, 0x4004) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x0, 0x0) 3.917177055s ago: executing program 8 (id=3265): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x24, r0, 0x601, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 3.777286077s ago: executing program 0 (id=3266): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x2020) ioctl$int_in(r1, 0x5452, &(0x7f0000002440)=0x1) write$binfmt_misc(r1, &(0x7f0000000200), 0xfffffecc) 3.489060327s ago: executing program 8 (id=3269): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=r1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3.189472846s ago: executing program 7 (id=3271): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}]]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) 3.050616252s ago: executing program 8 (id=3272): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x58, &(0x7f00000003c0)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1}, 0xc) close(r2) 2.878787164s ago: executing program 7 (id=3273): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000400)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000900)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140), 0x3ffffffffffffdd2, r1}) 2.851083715s ago: executing program 1 (id=3274): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="3f000000010000", 0x7) 2.73655929s ago: executing program 8 (id=3276): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000001080)={0x7ff, 0xe73, 0x2, 0x8d12, 0x11, "3f7d3eadd0572825"}) write$UHID_INPUT(r1, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) 2.488919242s ago: executing program 0 (id=3277): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1}) 2.356698239s ago: executing program 1 (id=3279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2000010aaaaaaaaaabb080045"], 0x0) 2.340460406s ago: executing program 7 (id=3280): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d58c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb6220030100dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000066d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c9727ec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f0dafc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa1c22015e53fd8a46be933ab460d8629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8f12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d61800aaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e3c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c59869c9200a1306ffa5a71ca69e89a69fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0dc4b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec086174439af6ee6c7fdb2d19c9280fa9a02e8fa6a38acfff09050d912635fed175fd06f577d40000000000000000000000000000754bffd73c0888ba8834f20b3acea57b7817663e12c1a5503bc4c13af59bda21688d68698c53ce3aa767657774db09ece7ec888d3af290207d36fa433b35e17dc0f3dc728ea1c633a4ef9e7d9bf81b57492e0544800921d1b751c5fbc163"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000660000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='net_dev_start_xmit\x00', r1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6000}, 0x2c) 2.108450087s ago: executing program 0 (id=3281): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 1.927690454s ago: executing program 3 (id=3282): r0 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002"]) 1.456082391s ago: executing program 3 (id=3284): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x1000000, 0x0, 0x2, 0x9, 0x0, 0x0, 0x5}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') pread64(r1, &(0x7f0000000580)=""/150, 0x8f, 0x10) 1.201425125s ago: executing program 1 (id=3285): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="1100000002"], 0x14) 1.025768485s ago: executing program 7 (id=3286): r0 = socket$inet6(0xa, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x40, &(0x7f00000004c0)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=r2, @ANYBLOB="2c63726561746f723dbd3d66f12c63726561746f723d64eb8ba92c6e6f6465636f6d706f73652c756d61736b3d3030303030303030303030303030303030303030303032000000003d", @ANYRESHEX=r1, @ANYRESOCT], 0x3, 0x6a4, &(0x7f0000001b40)="$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") chmod(&(0x7f00000002c0)='./file1\x00', 0x100) 961.221308ms ago: executing program 3 (id=3287): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x11) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12d25}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) 850.315064ms ago: executing program 1 (id=3288): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000000c0)=@v2={0x2, @adiantum, 0x49199f1b499129b0, '\x00', @a}) 801.151511ms ago: executing program 8 (id=3289): syz_mount_image$hfs(&(0x7f00000004c0), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{}, {@codepage={'codepage', 0x3d, 'iso8859-6'}}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {}, {@part={'part', 0x3d, 0x5}}]}, 0x11, 0x2be, &(0x7f0000000a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000500)=""/45, 0x2d) getdents64(r0, 0x0, 0x18) 562.503617ms ago: executing program 3 (id=3290): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 517.507447ms ago: executing program 7 (id=3291): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 294.426126ms ago: executing program 8 (id=3292): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000300)=[@increfs, @increfs], 0x0, 0x0, 0x0}) 255.133884ms ago: executing program 3 (id=3293): r0 = memfd_create(&(0x7f0000000480)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r0, 0xffff) fallocate(r0, 0x0, 0x3, 0x1) lseek(r0, 0x5, 0x3) 247.764445ms ago: executing program 1 (id=3294): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x3040}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}, {0x0}, {&(0x7f0000000280)=""/4086, 0xff6}], &(0x7f0000001540)=[0x2, 0x0, 0x4]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) 226.17891ms ago: executing program 7 (id=3295): ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x40002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 0s ago: executing program 3 (id=3296): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000100)={[{@utf8}, {@fmask={'fmask', 0x3d, 0xa3}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@fmask={'fmask', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@gid}, {@dmask={'dmask', 0x3d, 0x1}}, {@errors_continue}, {}]}, 0x1, 0x152f, &(0x7f00000037c0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) kernel console output (not intermixed with test programs): T11690] FAT-fs (loop0): Directory bread(block 70) failed [ 645.864244][T11690] FAT-fs (loop0): Directory bread(block 71) failed [ 645.871228][T11690] FAT-fs (loop0): Directory bread(block 72) failed [ 645.878702][T11690] FAT-fs (loop0): Directory bread(block 73) failed [ 646.371921][T11703] loop3: detected capacity change from 0 to 512 [ 646.392257][T11705] bridge0: port 3(erspan0) entered blocking state [ 646.399601][T11705] bridge0: port 3(erspan0) entered disabled state [ 646.406930][T11705] erspan0: entered allmulticast mode [ 646.415871][T11705] erspan0: entered promiscuous mode [ 646.423339][T11705] bridge0: port 3(erspan0) entered blocking state [ 646.430517][T11705] bridge0: port 3(erspan0) entered forwarding state [ 646.507958][T11703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.677009][ T30] audit: type=1800 audit(646.648:145): pid=11703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2205" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 646.763809][ T30] audit: type=1800 audit(646.688:146): pid=11703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2205" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 646.841977][T10302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.886328][ T5846] kernel write not supported for file /snd/seq (pid: 5846 comm: kworker/0:3) [ 646.949134][T11716] loop0: detected capacity change from 0 to 512 [ 646.981352][T11716] EXT4-fs (loop0): orphan cleanup on readonly fs [ 647.001603][T11716] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 647.012725][T11716] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 647.022724][T11716] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2210: Failed to acquire dquot type 1 [ 647.057361][T11716] EXT4-fs (loop0): 1 truncate cleaned up [ 647.093584][T11716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 647.199545][T11716] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 647.236169][T11716] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 8 [ 647.457778][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.414802][T11746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2222'. [ 648.542509][T11748] dvmrp8: entered allmulticast mode [ 648.603493][T11749] dvmrp8: left allmulticast mode [ 648.989407][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 649.173703][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 649.210764][ T24] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 649.219310][ T24] usb 4-1: config 0 has no interface number 0 [ 649.263049][T11759] loop2: detected capacity change from 0 to 2048 [ 649.295198][ T24] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 649.304766][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.313374][ T24] usb 4-1: Product: syz [ 649.317806][ T24] usb 4-1: Manufacturer: syz [ 649.322629][ T24] usb 4-1: SerialNumber: syz [ 649.425756][ T24] usb 4-1: config 0 descriptor?? [ 649.430912][T11759] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 649.481821][ T24] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 649.521496][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 649.690310][ T24] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 649.734344][ T24] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 649.786288][T11763] loop7: detected capacity change from 0 to 2048 [ 649.912105][T11763] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 650.079435][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 650.082089][ T5846] usb 4-1: USB disconnect, device number 9 [ 650.155153][ T5846] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 650.216520][T10359] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.221080][ T5846] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 650.239184][ T5846] quatech2 4-1:0.51: device disconnected [ 650.759588][T11786] loop2: detected capacity change from 0 to 64 [ 650.988156][ T5846] IPVS: starting estimator thread 0... [ 651.084167][T11788] loop7: detected capacity change from 0 to 4096 [ 651.093501][T11791] IPVS: using max 240 ests per chain, 12000 per kthread [ 651.233863][T11795] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 651.295942][ T30] audit: type=1800 audit(651.258:147): pid=11788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2241" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 651.318314][T11788] NILFS (loop7): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 651.328210][T11788] NILFS error (device loop7): nilfs_bmap_truncate: broken bmap (inode number=12) [ 651.357186][ T30] audit: type=1326 audit(651.328:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11798 comm="syz.3.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f718e929 code=0x7ffc0000 [ 651.364929][T11788] Remounting filesystem read-only [ 651.385525][T11788] NILFS (loop7): error -5 truncating bmap (ino=12) [ 651.395169][T11796] overlay: filesystem on ./bus not supported [ 651.405161][ T30] audit: type=1326 audit(651.358:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11798 comm="syz.3.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f28f718e929 code=0x7ffc0000 [ 651.428989][ T30] audit: type=1326 audit(651.358:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11798 comm="syz.3.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f718e929 code=0x7ffc0000 [ 651.451641][ T30] audit: type=1326 audit(651.358:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11798 comm="syz.3.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f718e929 code=0x7ffc0000 [ 651.474392][ T30] audit: type=1326 audit(651.358:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11798 comm="syz.3.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f28f718e929 code=0x7ffc0000 [ 651.819356][T10359] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer [ 652.382127][T11805] loop3: detected capacity change from 0 to 32768 [ 652.454725][T11805] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 652.454863][T11805] allowing incompatible features above 0.0: (unknown version) [ 652.454943][T11805] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 652.503404][T11805] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 652.511926][T11805] bcachefs (loop3): initializing new filesystem [ 652.530039][T11805] bcachefs (loop3): going read-write [ 652.608115][T11805] bcachefs (loop3): marking superblocks [ 652.658878][T11805] bcachefs (loop3): initializing freespace [ 652.688259][T11805] bcachefs (loop3): done initializing freespace [ 652.707055][T11805] bcachefs (loop3): reading snapshots table [ 652.713750][T11805] bcachefs (loop3): reading snapshots done [ 652.838024][T11827] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2255'. [ 652.856126][T11827] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.865688][T11827] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.878302][T11827] bridge0: left allmulticast mode [ 652.919293][T11805] bcachefs (loop3): done starting filesystem [ 653.024644][T11830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2254'. [ 653.208927][T10302] bcachefs (loop3): shutting down [ 653.215250][T10302] bcachefs (loop3): going read-only [ 653.220685][T10302] bcachefs (loop3): finished waiting for writes to stop [ 653.254476][T10302] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3 [ 653.415099][T10302] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3 [ 654.166446][T11835] loop0: detected capacity change from 0 to 32768 [ 654.175367][T11835] XFS: attr2 mount option is deprecated. [ 654.212811][T10302] bcachefs (loop3): clean shutdown complete, journal seq 4 [ 654.230109][T10302] bcachefs (loop3): marking filesystem clean [ 654.236464][T11835] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 654.368706][T10302] bcachefs (loop3): shutdown complete [ 654.522126][T11835] XFS (loop0): Ending clean mount [ 654.566762][T11835] XFS (loop0): Quotacheck needed: Please wait. [ 654.628362][T11835] XFS (loop0): Quotacheck: Done. [ 654.782584][ T5794] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 655.493452][ T5846] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 655.683422][ T5846] usb 5-1: Using ep0 maxpacket: 8 [ 655.724196][ T5846] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 655.734146][ T5846] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 655.746226][ T5846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 655.757738][ T5846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 655.880076][ T5846] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 655.890066][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.899265][ T5846] usb 5-1: Product: syz [ 655.904068][ T5846] usb 5-1: Manufacturer: syz [ 655.908890][ T5846] usb 5-1: SerialNumber: syz [ 655.959681][ T5846] usb 5-1: config 0 descriptor?? [ 655.967348][T11869] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 656.212507][ T5846] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 656.229853][ T5846] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input16 [ 656.328524][T11881] loop2: detected capacity change from 0 to 1024 [ 656.344234][T11881] EXT4-fs: Ignoring removed nobh option [ 656.351124][T11881] EXT4-fs: Ignoring removed bh option [ 656.414663][T11881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.462040][ C0] powermate: config urb returned -71 [ 656.470152][ C0] powermate: config urb returned -71 [ 656.477505][ C0] powermate: config urb returned -71 [ 656.483498][ C0] powermate: config urb returned -71 [ 656.508639][ C0] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 656.517867][ T5846] usb 5-1: USB disconnect, device number 21 [ 656.697095][T11887] block device autoloading is deprecated and will be removed. [ 656.746672][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.082258][T11893] loop0: detected capacity change from 0 to 256 [ 657.162218][T11891] loop2: detected capacity change from 0 to 2048 [ 657.208340][T11893] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 657.252003][T11891] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 657.323030][T11896] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 657.372448][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 657.372520][ T30] audit: type=1804 audit(657.338:157): pid=11893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2279" name="/newroot/521/file2/bus" dev="loop0" ino=1048697 res=1 errno=0 [ 657.964357][T11900] loop7: detected capacity change from 0 to 4096 [ 657.973445][T11900] EXT4-fs: Ignoring removed nobh option [ 658.075312][T11900] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.427801][T10359] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.729655][T11922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2292'. [ 658.753993][T11922] bond_slave_0: entered promiscuous mode [ 658.759977][T11922] bond_slave_1: entered promiscuous mode [ 658.771698][T11922] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 658.783855][T11922] bond_slave_0: left promiscuous mode [ 658.789574][T11922] bond_slave_1: left promiscuous mode [ 660.366113][T11958] input: syz1 as /devices/virtual/input/input17 [ 661.321581][ T30] audit: type=1326 audit(661.278:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.4.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188118e929 code=0x7ffc0000 [ 661.345515][ T30] audit: type=1326 audit(661.288:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.4.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188118e929 code=0x7ffc0000 [ 661.367413][ C0] vkms_vblank_simulate: vblank timer overrun [ 661.378037][ T30] audit: type=1326 audit(661.288:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.4.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f188118e929 code=0x7ffc0000 [ 661.400103][ C0] vkms_vblank_simulate: vblank timer overrun [ 661.562423][T11976] loop2: detected capacity change from 0 to 4096 [ 661.569017][ T30] audit: type=1326 audit(661.398:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.4.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188118e929 code=0x7ffc0000 [ 661.569223][ T30] audit: type=1326 audit(661.408:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.4.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188118e929 code=0x7ffc0000 [ 661.694224][T11976] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 661.898244][T11976] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 661.956980][ T30] audit: type=1800 audit(661.908:163): pid=11976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2316" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 662.744321][T12010] vxcan3: entered allmulticast mode [ 663.171930][T12022] netlink: 'syz.4.2338': attribute type 4 has an invalid length. [ 663.180654][T12022] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2338'. [ 663.239386][T12023] cifs: Unknown parameter 'mode' [ 663.588718][T12032] netlink: 'syz.4.2342': attribute type 4 has an invalid length. [ 664.508481][T12057] loop0: detected capacity change from 0 to 16 [ 664.558938][T12057] erofs (device loop0): mounted with root inode @ nid 36. [ 664.606039][T12057] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 664.634095][T12057] erofs (device loop0): read error -117 @ 43 of nid 36 [ 664.654993][T12057] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 664.664333][T12057] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 664.673022][T12057] erofs (device loop0): readahead error at folio 42 @ nid 36 [ 664.681035][T12057] erofs (device loop0): bogus lookback distance 774 @ lcn 40 of nid 36 [ 664.690011][T12057] erofs (device loop0): readahead error at folio 41 @ nid 36 [ 664.698032][T12057] erofs (device loop0): bogus lookback distance 774 @ lcn 40 of nid 36 [ 664.707549][T12057] erofs (device loop0): readahead error at folio 40 @ nid 36 [ 664.715760][T12057] erofs (device loop0): readahead error at folio 39 @ nid 36 [ 664.723991][T12057] erofs (device loop0): readahead error at folio 38 @ nid 36 [ 664.731942][T12057] erofs (device loop0): readahead error at folio 36 @ nid 36 [ 664.740197][T12057] erofs (device loop0): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 664.749548][T12057] erofs (device loop0): readahead error at folio 31 @ nid 36 [ 664.757873][T12057] erofs (device loop0): readahead error at folio 26 @ nid 36 [ 664.765909][T12057] erofs (device loop0): readahead error at folio 24 @ nid 36 [ 664.774234][T12057] erofs (device loop0): readahead error at folio 19 @ nid 36 [ 664.782522][T12057] erofs (device loop0): readahead error at folio 13 @ nid 36 [ 664.785465][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 664.791197][T12057] erofs (device loop0): readahead error at folio 8 @ nid 36 [ 664.807029][T12057] erofs (device loop0): readahead error at folio 6 @ nid 36 [ 664.815425][T12057] erofs (device loop0): readahead error at folio 4 @ nid 36 [ 664.823654][T12057] erofs (device loop0): invalid logical cluster 0 at nid 36 [ 664.831340][T12057] erofs (device loop0): readahead error at folio 0 @ nid 36 [ 664.839222][T12057] syz.0.2354: attempt to access beyond end of device [ 664.839222][T12057] loop0: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 664.854292][T12057] syz.0.2354: attempt to access beyond end of device [ 664.854292][T12057] loop0: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 664.871928][T12057] syz.0.2354: attempt to access beyond end of device [ 664.871928][T12057] loop0: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 664.886583][T12057] syz.0.2354: attempt to access beyond end of device [ 664.886583][T12057] loop0: rw=524288, sector=720, nr_sectors = 128 limit=16 [ 664.904955][T12057] syz.0.2354: attempt to access beyond end of device [ 664.904955][T12057] loop0: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 664.920277][T12057] syz.0.2354: attempt to access beyond end of device [ 664.920277][T12057] loop0: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 664.938060][T12057] erofs (device loop0): failed to decompress 1919 in[52, 4044] out[4055] [ 664.952106][T12057] erofs (device loop0): readahead error at folio 87 @ nid 36 [ 664.960344][T12057] erofs (device loop0): readahead error at folio 86 @ nid 36 [ 664.968509][T12057] erofs (device loop0): bogus lookback distance 363 @ lcn 82 of nid 36 [ 664.977563][T12057] erofs (device loop0): readahead error at folio 83 @ nid 36 [ 664.985481][T12057] erofs (device loop0): bogus lookback distance 363 @ lcn 82 of nid 36 [ 664.994284][T12057] erofs (device loop0): readahead error at folio 82 @ nid 36 [ 664.995228][T12064] loop4: detected capacity change from 0 to 256 [ 665.002278][T12057] erofs (device loop0): readahead error at folio 79 @ nid 36 [ 665.017916][T12057] erofs (device loop0): readahead error at folio 78 @ nid 36 [ 665.026100][T12057] erofs (device loop0): bogus lookback distance 1485 @ lcn 75 of nid 36 [ 665.034944][T12057] erofs (device loop0): readahead error at folio 76 @ nid 36 [ 665.037753][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 665.043498][T12057] erofs (device loop0): bogus lookback distance 1485 @ lcn 75 of nid 36 [ 665.051334][ T24] usb 3-1: config 0 has no interface number 0 [ 665.060044][T12057] erofs (device loop0): readahead error at folio 75 @ nid 36 [ 665.060279][T12057] erofs (device loop0): readahead error at folio 74 @ nid 36 [ 665.060458][T12057] erofs (device loop0): readahead error at folio 72 @ nid 36 [ 665.060564][T12057] erofs (device loop0): readahead error at folio 71 @ nid 36 [ 665.060697][T12057] erofs (device loop0): readahead error at folio 70 @ nid 36 [ 665.061537][T12057] erofs (device loop0): readahead error at folio 63 @ nid 36 [ 665.115811][T12057] erofs (device loop0): readahead error at folio 61 @ nid 36 [ 665.124191][T12057] erofs (device loop0): bogus lookback distance 1024 @ lcn 58 of nid 36 [ 665.133056][T12057] erofs (device loop0): readahead error at folio 59 @ nid 36 [ 665.140894][T12057] erofs (device loop0): bogus lookback distance 1024 @ lcn 58 of nid 36 [ 665.149868][T12057] erofs (device loop0): readahead error at folio 58 @ nid 36 [ 665.158386][T12057] erofs (device loop0): readahead error at folio 56 @ nid 36 [ 665.166916][T12057] erofs (device loop0): readahead error at folio 54 @ nid 36 [ 665.175097][T12057] erofs (device loop0): readahead error at folio 50 @ nid 36 [ 665.183032][T12057] erofs (device loop0): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 665.191877][T12057] erofs (device loop0): readahead error at folio 47 @ nid 36 [ 665.200034][T12057] erofs (device loop0): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 665.209041][T12057] erofs (device loop0): readahead error at folio 46 @ nid 36 [ 665.217813][T12057] erofs (device loop0): readahead error at folio 45 @ nid 36 [ 665.226231][T12057] syz.0.2354: attempt to access beyond end of device [ 665.226231][T12057] loop0: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 665.240447][T12057] syz.0.2354: attempt to access beyond end of device [ 665.240447][T12057] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 665.254715][T12057] syz.0.2354: attempt to access beyond end of device [ 665.254715][T12057] loop0: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 665.275308][T12057] erofs (device loop0): failed to decompress 1919 in[52, 4044] out[5297] [ 665.323697][ T24] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 665.333599][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.337806][T12066] loop3: detected capacity change from 0 to 512 [ 665.341763][ T24] usb 3-1: Product: syz [ 665.353166][ T24] usb 3-1: Manufacturer: syz [ 665.358085][ T24] usb 3-1: SerialNumber: syz [ 665.410233][T12066] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 665.555171][T12066] EXT4-fs (loop3): 1 truncate cleaned up [ 665.563046][T12066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 665.602338][ T24] usb 3-1: config 0 descriptor?? [ 665.644894][T12066] EXT4-fs error (device loop3): ext4_get_verity_descriptor_location:298: inode #15: comm syz.3.2358: verity file has no extents [ 665.682183][T12064] FAT-fs (loop4): Directory bread(block 64) failed [ 665.689467][T12064] FAT-fs (loop4): Directory bread(block 65) failed [ 665.696743][T12064] FAT-fs (loop4): Directory bread(block 66) failed [ 665.703917][T12064] FAT-fs (loop4): Directory bread(block 67) failed [ 665.710816][T12064] FAT-fs (loop4): Directory bread(block 68) failed [ 665.717825][T12064] FAT-fs (loop4): Directory bread(block 69) failed [ 665.724938][T12064] FAT-fs (loop4): Directory bread(block 70) failed [ 665.732619][T12064] FAT-fs (loop4): Directory bread(block 71) failed [ 665.740048][T12064] FAT-fs (loop4): Directory bread(block 72) failed [ 665.746986][T12064] FAT-fs (loop4): Directory bread(block 73) failed [ 665.772435][T12066] EXT4-fs (loop3): Remounting filesystem read-only [ 665.779571][T12066] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size [ 665.872964][ T24] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 665.907265][ T24] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 665.918824][ T24] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 665.927531][ T24] usb 3-1: media controller created [ 666.032166][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 666.066990][T10302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.271505][ T24] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 666.293685][ T5846] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 666.485906][ T5846] usb 1-1: Using ep0 maxpacket: 8 [ 666.502557][ T24] usb 3-1: USB disconnect, device number 12 [ 666.512210][ T5846] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.523207][ T5846] usb 1-1: config 0 has no interfaces? [ 666.561360][ T5846] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 666.571218][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.580368][ T5846] usb 1-1: Product: syz [ 666.585619][ T5846] usb 1-1: Manufacturer: syz [ 666.590960][ T5846] usb 1-1: SerialNumber: syz [ 666.620637][ T5846] usb 1-1: config 0 descriptor?? [ 666.704702][T12084] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 666.838194][ T24] usb 1-1: USB disconnect, device number 11 [ 666.883932][T12086] loop3: detected capacity change from 0 to 256 [ 666.933568][ T5846] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 666.964174][T12086] FAT-fs (loop3): Directory bread(block 64) failed [ 666.971086][T12086] FAT-fs (loop3): Directory bread(block 65) failed [ 666.978336][T12086] FAT-fs (loop3): Directory bread(block 66) failed [ 666.985326][T12086] FAT-fs (loop3): Directory bread(block 67) failed [ 666.992392][T12086] FAT-fs (loop3): Directory bread(block 68) failed [ 666.999906][T12086] FAT-fs (loop3): Directory bread(block 69) failed [ 667.006972][T12086] FAT-fs (loop3): Directory bread(block 70) failed [ 667.014022][T12086] FAT-fs (loop3): Directory bread(block 71) failed [ 667.020882][T12086] FAT-fs (loop3): Directory bread(block 72) failed [ 667.027766][T12086] FAT-fs (loop3): Directory bread(block 73) failed [ 667.146167][ T5846] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 667.155800][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.165000][ T5846] usb 5-1: Product: syz [ 667.169410][ T5846] usb 5-1: Manufacturer: syz [ 667.174836][ T5846] usb 5-1: SerialNumber: syz [ 667.202689][ T5846] usb 5-1: config 0 descriptor?? [ 667.716162][T12095] loop0: detected capacity change from 0 to 512 [ 667.754248][T12095] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2370: bg 0: block 5: invalid block bitmap [ 667.776536][T12095] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 667.827603][T12095] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2370: invalid indirect mapped block 3 (level 2) [ 667.854933][T12095] EXT4-fs (loop0): 2 truncates cleaned up [ 667.862816][T12095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 667.863864][T12100] loop3: detected capacity change from 0 to 1024 [ 667.887546][T12100] EXT4-fs: inline encryption not supported [ 667.894600][T12100] EXT4-fs: Ignoring removed nomblk_io_submit option [ 668.012814][T12100] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 668.077473][ T5846] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 668.089205][ T5846] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 668.101498][ T5846] asix 5-1:0.0: probe with driver asix failed with error -71 [ 668.145023][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.161007][T12100] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.2372: Allocating blocks 497-513 which overlap fs metadata [ 668.187275][T12099] EXT4-fs (loop3): pa ffff8881244f9230: logic 16, phys. 145, len 23 [ 668.196345][T12099] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 668.216753][ T5846] usb 5-1: USB disconnect, device number 22 [ 668.357140][T10302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.830116][T12114] loop7: detected capacity change from 0 to 64 [ 668.837978][T12111] netlink: 'syz.0.2376': attribute type 7 has an invalid length. [ 669.608516][T12128] loop3: detected capacity change from 0 to 512 [ 669.650002][T12128] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.2384: invalid block [ 669.668699][T12128] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2384: invalid indirect mapped block 4294967295 (level 1) [ 669.685415][T12128] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2384: invalid indirect mapped block 4294967295 (level 1) [ 669.721099][T12128] EXT4-fs (loop3): 2 truncates cleaned up [ 669.729607][T12128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 670.073787][T10302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.439180][T12137] loop0: detected capacity change from 0 to 16 [ 670.474964][T12137] erofs (device loop0): mounted with root inode @ nid 36. [ 670.536793][T12137] erofs (device loop0): corrupted dir block 8200 @ nid 36 [ 671.136493][T12151] syzkaller0: tun_chr_ioctl cmd 35108 [ 671.535289][T12145] loop3: detected capacity change from 0 to 4096 [ 671.861700][T12149] loop0: detected capacity change from 0 to 40427 [ 671.880424][T12149] F2FS-fs (loop0): build fault injection rate: 690 [ 671.888286][T12149] F2FS-fs (loop0): Image doesn't support compression [ 671.896157][T12149] F2FS-fs (loop0): Image doesn't support compression [ 671.911752][T12149] F2FS-fs (loop0): invalid crc value [ 672.200765][T12149] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 672.267660][T12149] syz.0.2393: attempt to access beyond end of device [ 672.267660][T12149] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 672.363305][T12164] loop4: detected capacity change from 0 to 1024 [ 672.462006][T12164] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 672.500215][T12169] loop7: detected capacity change from 0 to 1024 [ 672.742665][T12164] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.2399: Abort forced by user [ 672.779308][T12164] EXT4-fs (loop4): Remounting filesystem read-only [ 672.786506][T12164] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 673.044231][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.362117][T12183] netlink: 'syz.4.2406': attribute type 2 has an invalid length. [ 673.953399][T12192] loop2: detected capacity change from 0 to 2048 [ 674.015066][T12192] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 674.116703][ C1] sd 0:0:1:0: [sda] tag#1689 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 674.127896][ C1] sd 0:0:1:0: [sda] tag#1689 CDB: Write(6) 0a 00 4e 23 00 00 04 01 00 00 00 00 [ 674.136697][T12198] netlink: 612 bytes leftover after parsing attributes in process `syz.7.2412'. [ 674.158843][T12192] overlayfs: upper fs needs to support d_type. [ 674.224216][T12192] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 674.232361][T12192] overlayfs: failed to set xattr on upper [ 674.241010][T12192] overlayfs: ...falling back to redirect_dir=nofollow. [ 674.248468][T12192] overlayfs: ...falling back to index=off. [ 674.254854][T12192] overlayfs: ...falling back to uuid=null. [ 674.604496][ T5793] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 674.613788][ T5793] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 674.732351][T12208] loop4: detected capacity change from 0 to 512 [ 674.788951][T12208] ext3: Unknown parameter 'smackfsdef' [ 675.013668][T12204] loop7: detected capacity change from 0 to 4096 [ 675.058917][T12204] ntfs3(loop7): try to read out of volume at offset 0x3fffffc0c00 [ 675.067510][T12204] ntfs3(loop7): try to read out of volume at offset 0x3fffffc0c00 [ 675.076447][T12204] ntfs3(loop7): try to read out of volume at offset 0x3fffffc0c00 [ 675.085253][T12204] ntfs3(loop7): try to read out of volume at offset 0x3fffffc0c00 [ 675.096155][T12204] ntfs3(loop7): try to read out of volume at offset 0x3fffffc1c00 [ 675.105182][T12204] ntfs3(loop7): try to read out of volume at offset 0x3fffffc2c00 [ 675.113761][T12204] ntfs3(loop7): try to read out of volume at offset 0x3fffffc4c00 [ 675.122241][T12204] ntfs3(loop7): try to read out of volume at offset 0x3fffffc8c00 [ 675.130725][T12204] ntfs3(loop7): try to read out of volume at offset 0x3fffffd0c00 [ 675.139208][T12204] ntfs3(loop7): try to read out of volume at offset 0x3fffffe0c00 [ 675.167259][ T1853] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.397603][ T1853] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.560405][ T1853] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.683731][T12212] loop3: detected capacity change from 0 to 4096 [ 675.737192][ T1853] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.755855][T12212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 675.885042][T12212] EXT4-fs (loop3): shut down requested (1) [ 676.039029][ T1853] erspan0: left allmulticast mode [ 676.045338][ T1853] erspan0: left promiscuous mode [ 676.051216][ T1853] bridge0: port 3(erspan0) entered disabled state [ 676.075210][T10302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.091877][ T1853] bridge_slave_1: left allmulticast mode [ 676.098576][ T1853] bridge_slave_1: left promiscuous mode [ 676.105335][ T1853] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.120220][ T1853] bridge_slave_0: left allmulticast mode [ 676.128081][ T1853] bridge_slave_0: left promiscuous mode [ 676.136870][ T1853] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.546172][ T1853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 676.569328][ T1853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 676.597048][ T1853] bond0 (unregistering): Released all slaves [ 676.829690][T12219] loop0: detected capacity change from 0 to 1024 [ 677.094983][ T5846] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 677.334612][ T5846] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 677.346655][ T5846] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 677.359111][ T5846] usb 4-1: config 0 interface 0 has no altsetting 0 [ 677.366208][ T5846] usb 4-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 677.375774][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.421240][ T5846] usb 4-1: config 0 descriptor?? [ 677.426676][T12219] EXT4-fs: Ignoring removed orlov option [ 677.433042][T12219] EXT4-fs: Ignoring removed i_version option [ 677.442790][T12223] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 677.477954][T12230] loop7: detected capacity change from 0 to 64 [ 677.485515][T12219] EXT4-fs (loop0): Test dummy encryption mode enabled [ 677.505695][T12219] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 677.518670][ T1853] hsr_slave_0: left promiscuous mode [ 677.530865][ T1853] hsr_slave_1: left promiscuous mode [ 677.540209][ T1853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.548932][ T1853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 677.572265][ T1853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 677.580457][ T1853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 677.612763][T12219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 677.629432][ T1853] veth1_macvtap: left promiscuous mode [ 677.635794][ T1853] veth0_macvtap: left promiscuous mode [ 677.641765][ T1853] veth1_vlan: left promiscuous mode [ 677.647961][ T1853] veth0_vlan: left promiscuous mode [ 677.655705][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 677.715560][ T5803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 677.783010][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 677.802951][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 677.817448][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 677.977890][ T1853] pimreg2 (unregistering): left allmulticast mode [ 678.147661][ T5846] holtek_mouse 0003:04D9:A067.000D: unbalanced delimiter at end of report description [ 678.214169][ T5846] holtek_mouse 0003:04D9:A067.000D: hid parse failed: -22 [ 678.223896][ T5846] holtek_mouse 0003:04D9:A067.000D: probe with driver holtek_mouse failed with error -22 [ 678.349114][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.395553][ T24] usb 4-1: USB disconnect, device number 10 [ 678.413443][ T1853] team0 (unregistering): Port device team_slave_1 removed [ 678.521452][ T1853] team0 (unregistering): Port device team_slave_0 removed [ 678.740308][T12244] loop7: detected capacity change from 0 to 1024 [ 679.406250][ T3577] hfsplus: b-tree write err: -5, ino 4 [ 679.723895][T12233] chnl_net:caif_netlink_parms(): no params data found [ 679.894520][ T5803] Bluetooth: hci0: command tx timeout [ 680.047960][T12264] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2439'. [ 680.347145][T12269] loop0: detected capacity change from 0 to 8 [ 680.541766][T12260] loop4: detected capacity change from 0 to 32768 [ 680.700259][T12272] loop3: detected capacity change from 0 to 256 [ 681.070914][T12278] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2445'. [ 681.082218][T12278] netem: unknown loss type 13 [ 681.089398][T12278] netem: change failed [ 681.269445][T12233] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.277209][T12233] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.285080][T12233] bridge_slave_0: entered allmulticast mode [ 681.296049][T12233] bridge_slave_0: entered promiscuous mode [ 681.320026][T12233] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.329449][T12233] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.338117][T12233] bridge_slave_1: entered allmulticast mode [ 681.347544][T12233] bridge_slave_1: entered promiscuous mode [ 681.494024][T12233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.518859][T12233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.612426][ T4298] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.680011][T12233] team0: Port device team_slave_0 added [ 681.714863][ T4298] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.739532][T12233] team0: Port device team_slave_1 added [ 681.782749][ T4298] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.915077][ T4298] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.932961][T12233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.940711][T12233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.969094][T12233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.993558][ T5803] Bluetooth: hci0: command tx timeout [ 682.148104][T12233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.156009][T12233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.183008][T12233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.203006][ T4298] bridge_slave_1: left allmulticast mode [ 682.209097][ T4298] bridge_slave_1: left promiscuous mode [ 682.217290][ T4298] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.230476][ T4298] bridge_slave_0: left allmulticast mode [ 682.238278][ T4298] bridge_slave_0: left promiscuous mode [ 682.246372][ T4298] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.620727][ T4298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.639952][ T4298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 682.662485][ T4298] bond0 (unregistering): Released all slaves [ 682.842145][T12233] hsr_slave_0: entered promiscuous mode [ 682.852103][T12233] hsr_slave_1: entered promiscuous mode [ 682.862952][T12233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 682.871534][T12233] Cannot create hsr debugfs directory [ 682.936708][ T4298] IPVS: stopping backup sync thread 7155 ... [ 683.173709][ T4298] macvlan0: left promiscuous mode [ 683.215218][ T4298] hsr_slave_0: left promiscuous mode [ 683.228548][ T4298] hsr_slave_1: left promiscuous mode [ 683.237017][ T4298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 683.245386][ T4298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 683.264603][ T4298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 683.272545][ T4298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.387992][ T4298] veth1_macvtap: left promiscuous mode [ 683.394304][ T4298] veth0_macvtap: left promiscuous mode [ 683.400394][ T4298] veth1_vlan: left promiscuous mode [ 683.407586][ T4298] veth0_vlan: left promiscuous mode [ 684.043422][ T5809] Bluetooth: hci0: command tx timeout [ 684.126292][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 684.135398][ T4298] team0 (unregistering): Port device team_slave_1 removed [ 684.164516][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 684.174453][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 684.187244][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 684.198695][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 684.233717][ T4298] team0 (unregistering): Port device team_slave_0 removed [ 685.582624][T12233] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 685.666514][T12233] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 685.734754][T12233] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 685.784821][T12233] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 685.854978][T12297] chnl_net:caif_netlink_parms(): no params data found [ 686.137497][ T5809] Bluetooth: hci0: command tx timeout [ 686.199770][T12330] loop7: detected capacity change from 0 to 256 [ 686.209461][T12330] exfat: Deprecated parameter 'utf8' [ 686.215168][T12330] exfat: Deprecated parameter 'utf8' [ 686.221265][T12330] exfat: Deprecated parameter 'utf8' [ 686.284300][T12330] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 686.315553][T12330] exFAT-fs (loop7): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 686.324808][T12330] exFAT-fs (loop7): Filesystem has been set read-only [ 686.449975][ T5809] Bluetooth: hci3: command tx timeout [ 686.474999][T12328] loop0: detected capacity change from 0 to 2048 [ 686.632101][T12328] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 686.675749][T12233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.755006][T12332] loop3: detected capacity change from 0 to 4096 [ 686.825504][T12332] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 686.900273][T12297] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.908063][T12297] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.916214][T12297] bridge_slave_0: entered allmulticast mode [ 686.926829][T12297] bridge_slave_0: entered promiscuous mode [ 686.970752][T12233] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.049897][ T3681] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.057618][ T3681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.091123][T12297] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.099353][T12297] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.107214][T12297] bridge_slave_1: entered allmulticast mode [ 687.116538][T12297] bridge_slave_1: entered promiscuous mode [ 687.153642][T12332] ntfs3(loop3): ino=1a, mi_enum_attr [ 687.153679][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.153988][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.159267][T12332] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 687.276319][T12332] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 687.422541][T12332] ntfs3(loop3): ino=5, "/" ntfs_readdir [ 687.455350][T12297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.520445][T12297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.826715][T12297] team0: Port device team_slave_0 added [ 687.882033][T12297] team0: Port device team_slave_1 added [ 688.163036][T12349] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2475'. [ 688.186204][T12297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.194866][T12297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 688.222688][T12297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 688.340483][T12297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.349497][T12297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 688.378043][T12297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.525008][ T5809] Bluetooth: hci3: command tx timeout [ 688.774744][T12297] hsr_slave_0: entered promiscuous mode [ 688.784501][T12297] hsr_slave_1: entered promiscuous mode [ 688.792977][T12297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 688.801217][T12297] Cannot create hsr debugfs directory [ 688.824369][T12360] ip6gretap0: entered promiscuous mode [ 688.830369][T12360] macsec1: entered allmulticast mode [ 688.836043][T12360] ip6gretap0: entered allmulticast mode [ 688.850130][T12360] ip6gretap0: left allmulticast mode [ 688.856099][T12360] ip6gretap0: left promiscuous mode [ 689.111809][T12362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2480'. [ 689.228151][T12233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.465308][T12367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2482'. [ 689.475384][T12367] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2482'. [ 689.868841][T12297] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 689.944830][T12297] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 689.990087][T12297] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 690.034665][T12297] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 690.612085][ T5809] Bluetooth: hci3: command tx timeout [ 690.876106][T12381] loop7: detected capacity change from 0 to 32768 [ 690.885089][T12381] XFS: ikeep mount option is deprecated. [ 690.891052][T12381] XFS: noikeep mount option is deprecated. [ 690.955642][T12381] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 691.261435][T12381] XFS (loop7): Ending clean mount [ 691.286338][T12381] XFS (loop7): Quotacheck needed: Please wait. [ 691.370546][T12381] XFS (loop7): Quotacheck: Done. [ 691.442234][T12297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.558998][T12233] veth0_vlan: entered promiscuous mode [ 691.583503][T10359] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 691.646889][T12297] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.659258][T12233] veth1_vlan: entered promiscuous mode [ 691.715174][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.722707][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.781774][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.789467][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.870998][T12401] loop0: detected capacity change from 0 to 128 [ 691.954151][T12401] EXT4-fs (loop0): Test dummy encryption mode enabled [ 692.073600][T12233] veth0_macvtap: entered promiscuous mode [ 692.097314][T12233] veth1_macvtap: entered promiscuous mode [ 692.112943][T12401] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 692.169152][T12233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.193302][T12233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 692.213889][T12233] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.222935][T12233] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.232591][T12233] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.241819][T12233] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.686624][ T5809] Bluetooth: hci3: command tx timeout [ 692.824914][ T5794] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 693.506392][T12297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.180830][T12449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2502'. [ 695.385593][T12297] veth0_vlan: entered promiscuous mode [ 695.461882][T12297] veth1_vlan: entered promiscuous mode [ 695.561523][T12457] loop3: detected capacity change from 0 to 512 [ 695.647148][T12457] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 695.656942][T12297] veth0_macvtap: entered promiscuous mode [ 695.702583][T12297] veth1_macvtap: entered promiscuous mode [ 695.708853][T12457] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 695.744734][T12457] System zones: 1-12 [ 695.776545][T12297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.799151][T12457] EXT4-fs (loop3): 1 truncate cleaned up [ 695.809091][T12457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 695.836606][T12297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 695.894701][T12297] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.904481][T12297] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.913614][T12297] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.922701][T12297] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.958240][ T30] audit: type=1800 audit(695.868:164): pid=12457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2504" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 696.369005][T10302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.826037][T12476] tap0: tun_chr_ioctl cmd 1074025677 [ 696.831934][T12476] tap0: linktype set to 825 [ 697.058266][ T3577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.068739][ T3577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.211062][T12481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2510'. [ 697.410589][ T3625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.419088][ T3625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.123939][T12497] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 698.587435][T12507] program syz.8.2518 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 698.667734][T12510] program syz.8.2518 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 698.747523][T12510] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 699.899939][T12531] loop8: detected capacity change from 0 to 1024 [ 700.249354][ T3625] hfsplus: b-tree write err: -5, ino 4 [ 700.333041][T12544] loop0: detected capacity change from 0 to 64 [ 700.415133][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.423776][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.509571][ T1853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.518330][ T1853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.535905][T12549] loop7: detected capacity change from 0 to 256 [ 700.600763][T12549] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 700.668808][T12549] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 701.027302][T12554] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2538'. [ 701.580045][T12568] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2543'. [ 701.938115][T12575] loop3: detected capacity change from 0 to 1024 [ 702.019576][T12575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 702.086543][T12575] EXT4-fs (loop3): shut down requested (2) [ 702.309096][T10302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.459432][T12586] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2550'. [ 702.957731][T12594] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2554'. [ 703.493459][T12606] loop3: detected capacity change from 0 to 1024 [ 703.605252][ T30] audit: type=1800 audit(703.578:165): pid=12606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2560" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 704.487626][T12617] loop8: detected capacity change from 0 to 512 [ 704.498632][T12617] EXT4-fs: inline encryption not supported [ 704.533686][T12617] EXT4-fs (loop8): Test dummy encryption mode enabled [ 704.543384][T12617] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 704.674030][T12617] EXT4-fs (loop8): 1 truncate cleaned up [ 704.682055][T12617] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 704.840886][T12619] loop0: detected capacity change from 0 to 4096 [ 704.878726][T12623] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.8.2565: corrupted xattr block 33: invalid header [ 704.895473][T12619] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 704.968140][T12623] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2962: inode #15: comm syz.8.2565: corrupted xattr block 33: invalid header [ 705.018591][T12623] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -117) [ 705.084074][T12619] ntfs3(loop0): ino=19, mi_enum_attr [ 705.091032][T12619] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 705.161130][T12619] ntfs3(loop0): failed to convert "c46c" to macceltic [ 705.326243][T12619] ntfs3(loop0): ino=20, mi_enum_attr [ 705.377079][T12233] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.545060][T12633] loop8: detected capacity change from 0 to 32768 [ 706.554260][T12633] XFS: attr2 mount option is deprecated. [ 706.647439][T12633] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 707.010018][T12633] XFS (loop8): Ending clean mount [ 707.038888][T12633] XFS (loop8): Quotacheck needed: Please wait. [ 707.069455][T12633] XFS (loop8): Quotacheck: Done. [ 707.174454][T12233] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 707.605852][T12666] loop0: detected capacity change from 0 to 512 [ 707.695169][T12666] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 707.714859][ T42] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 707.923807][ T42] usb 10-1: Using ep0 maxpacket: 8 [ 707.951083][ T42] usb 10-1: config index 0 descriptor too short (expected 6427, got 27) [ 707.960805][ T42] usb 10-1: config 0 has an invalid interface number: 21 but max is 0 [ 707.969613][ T42] usb 10-1: config 0 has no interface number 0 [ 707.976995][ T42] usb 10-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 707.989865][ T42] usb 10-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 708.001432][ T42] usb 10-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 708.126953][T12666] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2581: bg 0: block 425: padding at end of block bitmap is not set [ 708.169370][T12666] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 708.180399][ T42] usb 10-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 708.190233][ T42] usb 10-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 708.199666][ T42] usb 10-1: Product: syz [ 708.204254][ T42] usb 10-1: Manufacturer: syz [ 708.226590][ T42] usb 10-1: config 0 descriptor?? [ 708.234630][T12664] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 708.348061][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.928793][ T42] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.21/input/input18 [ 709.188615][ C1] keyspan_remote 10-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 709.198644][ T42] usb 10-1: USB disconnect, device number 2 [ 710.019068][T12692] loop8: detected capacity change from 0 to 32768 [ 710.077610][T12692] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 710.112798][T12698] loop3: detected capacity change from 0 to 1024 [ 710.234242][T12233] ocfs2: Unmounting device (7,8) on (node local) [ 710.245651][T12698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 710.501374][T10302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.956000][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 711.428518][T12724] loop9: detected capacity change from 0 to 2048 [ 711.442804][T12724] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=3932051, location=3932051 [ 711.523645][T12724] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 711.925959][ T30] audit: type=1326 audit(711.878:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12734 comm="syz.7.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e72d8e929 code=0x7ffc0000 [ 711.988747][ T30] audit: type=1326 audit(711.938:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12734 comm="syz.7.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f7e72d8e929 code=0x7ffc0000 [ 712.015270][ T30] audit: type=1326 audit(711.938:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12734 comm="syz.7.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e72d8e929 code=0x7ffc0000 [ 712.039251][ T30] audit: type=1326 audit(711.938:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12734 comm="syz.7.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e72d8e929 code=0x7ffc0000 [ 712.923393][ T5809] Bluetooth: hci2: command 0x0406 tx timeout [ 713.294833][T12768] loop7: detected capacity change from 0 to 256 [ 714.526234][T12797] netdevsim netdevsim7: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 714.993920][ T42] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 715.164806][ T42] usb 9-1: Using ep0 maxpacket: 8 [ 715.246126][ T42] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 715.255706][ T42] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.264220][ T42] usb 9-1: Product: syz [ 715.268689][ T42] usb 9-1: Manufacturer: syz [ 715.273691][ T42] usb 9-1: SerialNumber: syz [ 715.311422][ T42] usb 9-1: config 0 descriptor?? [ 715.329551][ T42] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 715.933910][ T42] gspca_sonixj: reg_w1 err -71 [ 715.939152][ T42] sonixj 9-1:0.0: probe with driver sonixj failed with error -71 [ 715.986515][ T42] usb 9-1: USB disconnect, device number 2 [ 716.002976][T12819] input: syz1 as /devices/virtual/input/input19 [ 716.452071][T12823] loop9: detected capacity change from 0 to 1024 [ 716.870059][ T35] hfsplus: b-tree write err: -5, ino 3 [ 718.135296][T12859] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2666'. [ 718.520495][T12868] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2669'. [ 719.026148][ T42] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 719.085780][ T5803] Bluetooth: hci3: command 0x0405 tx timeout [ 719.090073][ T42] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 719.284024][ T24] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 719.463709][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 719.488108][ T24] usb 10-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 1024 [ 719.499757][ T24] usb 10-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 64 [ 719.510573][ T24] usb 10-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 719.524696][ T24] usb 10-1: config 1 interface 0 has no altsetting 0 [ 719.627532][ T24] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 719.638746][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 719.647920][ T24] usb 10-1: SerialNumber: syz [ 719.698307][T12877] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 719.707325][T12877] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 720.034399][ T24] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 720.079252][ T24] usb 10-1: USB disconnect, device number 3 [ 720.924895][T12913] program syz.3.2692 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 721.422773][T12922] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2696'. [ 721.504577][T12924] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2697'. [ 721.862159][T12930] binder: Binderfs stats mode cannot be changed during a remount [ 722.018088][T12933] loop0: detected capacity change from 0 to 1024 [ 722.270992][T12933] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 722.633800][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.659654][T12937] loop9: detected capacity change from 0 to 32768 [ 722.875392][T12937] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 722.890923][T12937] (syz.9.2701,12937,1):ocfs2_find_entry:1086 ERROR: status = -117 [ 722.908501][T12937] (syz.9.2701,12937,1):ocfs2_find_entry:1086 ERROR: status = -117 [ 722.916932][T12937] (syz.9.2701,12937,1):ocfs2_symlink:2077 ERROR: status = -117 [ 723.156269][T12297] (syz-executor,12297,0):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 76 [ 723.212795][T12297] ocfs2: Unmounting device (7,9) on (node local) [ 723.324362][T12955] loop7: detected capacity change from 0 to 256 [ 723.487597][T12955] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 724.079560][T12954] loop8: detected capacity change from 0 to 40427 [ 724.090453][T12954] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 724.101774][T12954] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 724.113720][T12954] F2FS-fs (loop8): invalid crc value [ 724.458929][T12954] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 724.466646][T12954] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 725.143793][T12970] loop0: detected capacity change from 0 to 2048 [ 725.211723][T12970] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 725.220207][T12970] UDF-fs: Scanning with blocksize 512 failed [ 725.373742][T12970] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 726.049208][T12987] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 726.056279][T12987] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 726.779068][T12998] loop9: detected capacity change from 0 to 64 [ 727.205157][T12995] loop0: detected capacity change from 0 to 32768 [ 728.404146][T13012] xt_CT: No such helper "snmp" [ 728.631735][T13026] loop7: detected capacity change from 0 to 256 [ 728.814958][T12305] hid-generic 0000:0004:0000.000F: unknown main item tag 0x0 [ 728.823360][T12305] hid-generic 0000:0004:0000.000F: unknown main item tag 0x0 [ 728.831105][T12305] hid-generic 0000:0004:0000.000F: unknown main item tag 0x0 [ 728.859165][T13026] FAT-fs (loop7): Directory bread(block 64) failed [ 728.866740][T13026] FAT-fs (loop7): Directory bread(block 65) failed [ 728.874071][T13026] FAT-fs (loop7): Directory bread(block 66) failed [ 728.879161][T12305] hid-generic 0000:0004:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 728.880818][T13026] FAT-fs (loop7): Directory bread(block 67) failed [ 728.881060][T13026] FAT-fs (loop7): Directory bread(block 68) failed [ 728.904886][T13026] FAT-fs (loop7): Directory bread(block 69) failed [ 728.913642][T13026] FAT-fs (loop7): Directory bread(block 70) failed [ 728.920429][T13026] FAT-fs (loop7): Directory bread(block 71) failed [ 728.928551][T13026] FAT-fs (loop7): Directory bread(block 72) failed [ 728.935490][T13026] FAT-fs (loop7): Directory bread(block 73) failed [ 729.384902][T13035] loop8: detected capacity change from 0 to 2048 [ 729.425735][T13035] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 729.503624][T13042] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 730.639343][T13066] loop7: detected capacity change from 0 to 1024 [ 730.766546][T13066] hfsplus: bad catalog entry type [ 730.971332][ T3577] hfsplus: b-tree write err: -5, ino 4 [ 731.303575][T13079] loop3: detected capacity change from 0 to 256 [ 731.379205][T13079] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 731.550561][T13073] loop9: detected capacity change from 0 to 8192 [ 731.646653][T13073] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 731.656079][T13085] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2765'. [ 731.703806][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 731.759074][T13087] loop8: detected capacity change from 0 to 164 [ 731.909069][ T24] usb 4-1: config index 0 descriptor too short (expected 32820, got 52) [ 731.919159][ T24] usb 4-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 731.930649][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 731.942130][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 731.954440][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 61, changing to 9 [ 731.966356][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 25458, setting to 1024 [ 731.978018][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 732.072669][ T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0035, bcdDevice= a.97 [ 732.084738][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.094619][ T24] usb 4-1: Product: syz [ 732.099295][ T24] usb 4-1: Manufacturer: syz [ 732.105067][ T24] usb 4-1: SerialNumber: syz [ 732.155610][ T24] usb 4-1: config 0 descriptor?? [ 732.175212][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 732.365477][ T5809] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 732.374533][ T5809] Bluetooth: hci0: Injecting HCI hardware error event [ 732.376220][ T24] usb 4-1: USB disconnect, device number 11 [ 732.382008][ T5809] Bluetooth: hci0: hardware error 0x00 [ 733.035305][T13101] netlink: 'syz.0.2772': attribute type 1 has an invalid length. [ 733.043458][T13101] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2772'. [ 733.090682][T13103] loop9: detected capacity change from 0 to 512 [ 733.202882][T13103] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042c11c, mo2=0002] [ 733.299998][T13103] System zones: 0-2, 18-18, 34-34 [ 733.373609][T13103] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2773: bg 0: block 248: padding at end of block bitmap is not set [ 733.433015][T13103] Quota error (device loop9): write_blk: dquota write failed [ 733.441635][T13103] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 733.452454][T13103] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.2773: Failed to acquire dquot type 1 [ 733.470336][T13114] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2776'. [ 733.488174][T13120] loop0: detected capacity change from 0 to 64 [ 733.494912][T13103] EXT4-fs (loop9): 1 truncate cleaned up [ 733.502934][T13103] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 733.556637][T13120] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 733.634297][T13117] loop7: detected capacity change from 0 to 2048 [ 733.673729][T13103] EXT4-fs error (device loop9): ext4_readdir:264: inode #2: block 3: comm syz.9.2773: path /47/file0: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=2164260880, rec_len=231, size=4096 fake=0 [ 733.907158][T12297] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.974128][T13112] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2778'. [ 734.446243][ T5809] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 734.524423][T12305] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 734.676897][T13140] loop9: detected capacity change from 0 to 256 [ 734.702513][T12305] usb 4-1: Using ep0 maxpacket: 16 [ 734.731135][T13140] MINIX-fs: mounting file system with errors, running fsck is recommended [ 734.747735][T12305] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 734.756413][T12305] usb 4-1: config 0 has no interface number 0 [ 734.809209][T12305] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 734.819201][T12305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.823424][T13140] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 734.827651][T12305] usb 4-1: Product: syz [ 734.840768][T12305] usb 4-1: Manufacturer: syz [ 734.845747][T12305] usb 4-1: SerialNumber: syz [ 734.918807][T13144] loop0: detected capacity change from 0 to 512 [ 734.945446][T12305] usb 4-1: config 0 descriptor?? [ 734.989409][T12305] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 735.029906][T13144] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.2789: bad orphan inode 11862016 [ 735.086740][T13144] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 735.250125][T13144] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000d40000 ro. [ 735.318845][T13151] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 735.402006][T13151] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000d40000 r/w. [ 735.658478][T13158] loop9: detected capacity change from 0 to 512 [ 735.727613][T13158] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 735.766912][T13158] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2794: bg 0: block 384: padding at end of block bitmap is not set [ 735.791223][T12305] gspca_spca1528: reg_w err -71 [ 735.800039][T13158] EXT4-fs (loop9): Remounting filesystem read-only [ 735.813565][T12305] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 735.826350][T12305] usb 4-1: USB disconnect, device number 12 [ 735.839867][T13158] EXT4-fs (loop9): 1 truncate cleaned up [ 735.865093][T13158] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 735.892866][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 735.941561][T13158] EXT4-fs (loop9): shut down requested (2) [ 736.192554][T12297] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.496108][T13185] loop9: detected capacity change from 0 to 1024 [ 737.682023][T13185] hfsplus: xattr searching failed [ 737.912224][T13196] loop8: detected capacity change from 0 to 512 [ 737.955449][T13196] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 737.966141][T13196] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 738.009248][ T48] hfsplus: bad catalog file entry [ 738.025513][ T48] hfsplus: b-tree write err: -5, ino 3 [ 738.033489][T13196] EXT4-fs (loop8): warning: maximal mount count reached, running e2fsck is recommended [ 738.050731][T13200] loop0: detected capacity change from 0 to 512 [ 738.084134][T13200] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 738.134314][T13196] EXT4-fs error (device loop8): ext4_orphan_get:1393: comm syz.8.2811: inode #15: comm syz.8.2811: iget: illegal inode # [ 738.236222][T13196] EXT4-fs (loop8): Remounting filesystem read-only [ 738.246551][T13196] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 738.280482][T13200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 738.399041][T13196] EXT4-fs (loop8): shut down requested (1) [ 738.591557][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.655759][T12233] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.824338][T13215] loop9: detected capacity change from 0 to 256 [ 739.253297][T13219] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2820'. [ 739.315084][T13222] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2822'. [ 739.380406][T13223] loop9: detected capacity change from 0 to 256 [ 739.517554][T13225] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2823'. [ 740.456612][T12305] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 740.602993][T13251] loop3: detected capacity change from 0 to 256 [ 740.639091][T12305] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.650961][T12305] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.661384][T12305] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 740.670919][T12305] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.755580][T12305] usb 9-1: config 0 descriptor?? [ 740.982969][T13255] loop0: detected capacity change from 0 to 128 [ 741.060991][T13255] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 741.185963][T12305] lenovo 0003:17EF:6047.0010: unknown main item tag 0x0 [ 741.193725][T12305] lenovo 0003:17EF:6047.0010: unknown main item tag 0x0 [ 741.207647][T12305] lenovo 0003:17EF:6047.0010: unknown main item tag 0x0 [ 741.215184][T12305] lenovo 0003:17EF:6047.0010: unknown main item tag 0x0 [ 741.223380][T12305] lenovo 0003:17EF:6047.0010: unknown main item tag 0x0 [ 741.270436][T13258] loop9: detected capacity change from 0 to 1024 [ 741.281821][T13258] EXT4-fs: Ignoring removed oldalloc option [ 741.288445][T13258] EXT4-fs: Ignoring removed bh option [ 741.338107][T12305] lenovo 0003:17EF:6047.0010: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.8-1/input0 [ 741.398492][T13258] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 741.447881][ T5794] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 741.531458][ T30] audit: type=1800 audit(741.488:170): pid=13258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2838" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 741.588238][T12305] lenovo 0003:17EF:6047.0010: Failed to switch middle button: -71 [ 741.594956][T13265] tap0: tun_chr_ioctl cmd 1074025677 [ 741.602070][T13265] tap0: linktype set to 804 [ 741.623903][T12305] lenovo 0003:17EF:6047.0010: Fn-lock setting failed: -71 [ 741.643864][T12305] lenovo 0003:17EF:6047.0010: Sensitivity setting failed: -71 [ 741.680366][T12305] usb 9-1: USB disconnect, device number 3 [ 741.722436][T13267] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2842'. [ 741.734670][T13267] netem: change failed [ 741.866742][T12297] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.427234][ T30] audit: type=1326 audit(742.388:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13278 comm="syz.3.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f718e929 code=0x7ffc0000 [ 742.449957][ T30] audit: type=1326 audit(742.388:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13278 comm="syz.3.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f718e929 code=0x7ffc0000 [ 742.501814][ T30] audit: type=1326 audit(742.468:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13278 comm="syz.3.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f28f718e929 code=0x7ffc0000 [ 742.524884][ T30] audit: type=1326 audit(742.468:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13278 comm="syz.3.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f718e929 code=0x7ffc0000 [ 742.546972][ C0] vkms_vblank_simulate: vblank timer overrun [ 742.557694][ T30] audit: type=1326 audit(742.468:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13278 comm="syz.3.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f718e929 code=0x7ffc0000 [ 742.579710][ C0] vkms_vblank_simulate: vblank timer overrun [ 742.586920][ T30] audit: type=1326 audit(742.468:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13278 comm="syz.3.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f28f718e929 code=0x7ffc0000 [ 742.609590][ T30] audit: type=1326 audit(742.468:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13278 comm="syz.3.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f718e929 code=0x7ffc0000 [ 742.635615][ T30] audit: type=1326 audit(742.468:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13278 comm="syz.3.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f28f718e929 code=0x7ffc0000 [ 742.659278][ T30] audit: type=1326 audit(742.468:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13278 comm="syz.3.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f718e929 code=0x7ffc0000 [ 742.681632][ C0] vkms_vblank_simulate: vblank timer overrun [ 742.706484][T13285] netlink: 'syz.0.2850': attribute type 3 has an invalid length. [ 742.714989][T13285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2850'. [ 743.150267][T13293] blkio.reset_stats is deprecated [ 743.474961][T13301] loop0: detected capacity change from 0 to 256 [ 744.146603][T13306] loop8: detected capacity change from 0 to 2048 [ 744.175042][ T3577] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.376529][ T3577] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.491662][ T3577] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.607835][ T3577] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.794806][ T3577] bridge_slave_1: left allmulticast mode [ 744.800749][ T3577] bridge_slave_1: left promiscuous mode [ 744.807511][ T3577] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.821627][ T3577] bridge_slave_0: left allmulticast mode [ 744.827900][ T3577] bridge_slave_0: left promiscuous mode [ 744.834694][ T3577] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.244805][ T3577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 745.282145][ T3577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 745.305395][ T3577] bond0 (unregistering): Released all slaves [ 745.862889][ T3577] hsr_slave_0: left promiscuous mode [ 745.908800][ T3577] hsr_slave_1: left promiscuous mode [ 745.916648][ T3577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 745.924649][ T3577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 745.968739][ T3577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 745.976627][ T3577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.105629][ T3577] veth1_macvtap: left promiscuous mode [ 746.112514][ T3577] veth0_macvtap: left promiscuous mode [ 746.119396][ T3577] veth1_vlan: left promiscuous mode [ 746.125160][ T3577] veth0_vlan: left promiscuous mode [ 746.629340][ T5803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 746.645191][ T5803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 746.665951][ T5803] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 746.817831][ T5803] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 746.832536][ T5803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 746.949806][ T3577] team0 (unregistering): Port device team_slave_1 removed [ 747.036991][ T3577] team0 (unregistering): Port device team_slave_0 removed [ 747.739008][ T3577] IPVS: stop unused estimator thread 0... [ 747.832730][T13331] chnl_net:caif_netlink_parms(): no params data found [ 748.924715][ T5803] Bluetooth: hci4: command tx timeout [ 748.955266][T13354] loop0: detected capacity change from 0 to 32768 [ 748.966078][T13354] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2879 (13354) [ 749.000223][T13354] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 749.011088][T13354] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 749.020848][T13354] BTRFS info (device loop0): using free-space-tree [ 749.175901][T13331] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.184842][T13331] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.192575][T13331] bridge_slave_0: entered allmulticast mode [ 749.202213][T13331] bridge_slave_0: entered promiscuous mode [ 749.219393][T13354] BTRFS info (device loop0): rebuilding free space tree [ 749.299904][T13331] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.307835][T13331] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.316106][T13331] bridge_slave_1: entered allmulticast mode [ 749.327543][T13331] bridge_slave_1: entered promiscuous mode [ 749.337966][T13354] BTRFS info (device loop0): balance: start -f -sprofiles=data|system|metadata|raid0|raid10|raid5|raid6|0x3800,limit=10376293541461622786 [ 749.353708][T13354] BTRFS info (device loop0): balance: ended with status: 0 [ 749.469374][T13331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.549077][T13331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.584506][ T5794] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 749.664967][T13377] loop7: detected capacity change from 0 to 4096 [ 749.685450][T13331] team0: Port device team_slave_0 added [ 749.706028][T13331] team0: Port device team_slave_1 added [ 749.737147][T13377] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 749.745591][T13377] UDF-fs: Scanning with blocksize 512 failed [ 749.863997][T13377] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 749.881812][T13331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.889847][T13331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 749.919312][T13331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 750.042161][T13331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 750.049622][T13331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 750.076498][T13331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 750.511552][T13331] hsr_slave_0: entered promiscuous mode [ 750.525669][T13331] hsr_slave_1: entered promiscuous mode [ 750.534403][T13331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 750.543940][T13331] Cannot create hsr debugfs directory [ 751.004901][ T5803] Bluetooth: hci4: command tx timeout [ 751.193630][T12305] kernel read not supported for file /dsp (pid: 12305 comm: kworker/0:6) [ 751.423683][ T24] kernel read not supported for file /dsp1 (pid: 24 comm: kworker/1:0) [ 751.732190][T12305] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 751.764478][T13399] loop9: detected capacity change from 0 to 4096 [ 751.775834][T13399] ntfs3(loop9): Different NTFS sector size (2048) and media sector size (512). [ 751.796592][T13331] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 751.820854][T13331] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 751.932471][T12305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 751.935901][T13331] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 751.944855][T12305] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 751.966776][T12305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 752.032871][T12305] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 752.042704][T12305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.053813][T12305] usb 1-1: Product: syz [ 752.058319][T12305] usb 1-1: Manufacturer: syz [ 752.064439][T12305] usb 1-1: SerialNumber: syz [ 752.073017][T13331] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 752.093613][T12305] usb 1-1: config 0 descriptor?? [ 752.101125][T13401] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 752.136308][T13401] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 752.166890][T12305] usb 1-1: ucan: probing device on interface #0 [ 752.862574][T12305] ucan 1-1:0.0 can0: registered device [ 752.940759][T13331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.065380][T12305] ucan 1-1:0.0 can0: firmware string: unknown [ 753.083449][ T5803] Bluetooth: hci4: command tx timeout [ 753.118586][T13331] 8021q: adding VLAN 0 to HW filter on device team0 [ 753.156976][T12305] usb 1-1: USB disconnect, device number 12 [ 753.226873][ T3681] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.234660][ T3681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.249802][ T3681] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.257457][ T3681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.634791][T13331] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 753.645709][T13331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 753.933658][T13417] loop7: detected capacity change from 0 to 32768 [ 754.125790][T13417] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 754.264560][T13426] loop0: detected capacity change from 0 to 256 [ 754.273605][T13426] exfat: Deprecated parameter 'utf8' [ 754.361078][T10359] ocfs2: Unmounting device (7,7) on (node local) [ 754.423767][T13426] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 755.167737][ T5803] Bluetooth: hci4: command tx timeout [ 755.258404][T13331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 755.370827][T13441] pim6reg: entered allmulticast mode [ 755.475927][T13441] pim6reg: left allmulticast mode [ 755.716981][T13331] veth0_vlan: entered promiscuous mode [ 755.791013][T13331] veth1_vlan: entered promiscuous mode [ 756.057939][T13331] veth0_macvtap: entered promiscuous mode [ 756.113213][T13331] veth1_macvtap: entered promiscuous mode [ 756.259755][T13331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 756.320128][T13331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 756.375288][T13331] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.384697][T13331] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.393987][T13331] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.403000][T13331] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.686884][T13450] loop9: detected capacity change from 0 to 4096 [ 756.711431][T13450] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 756.827833][T13450] ntfs3(loop9): Failed to initialize $Extend/$Reparse. [ 760.763603][T13542] netlink: 'syz.0.2948': attribute type 58 has an invalid length. [ 760.771769][T13542] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2948'. [ 760.898090][T13534] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.044750][ T3681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.052779][ T3681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.421195][ T1853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.429956][ T1853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.759522][T13545] loop8: detected capacity change from 0 to 32768 [ 761.776459][T13545] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2949 (13545) [ 761.799255][T13545] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 761.812722][T13545] BTRFS info (device loop8): using crc32c (crc32c-x86_64) checksum algorithm [ 761.822479][T13545] BTRFS info (device loop8): using free-space-tree [ 762.139842][T12233] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 762.390017][T13573] loop0: detected capacity change from 0 to 128 [ 762.971261][T13579] loop3: detected capacity change from 0 to 2048 [ 763.067544][T13579] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 763.862329][T13595] loop3: detected capacity change from 0 to 1024 [ 763.895220][T13595] hfsplus: invalid btree extent records (0 size) [ 763.901967][T13595] hfsplus: failed to load extents file [ 763.964300][T13599] sp0: Synchronizing with TNC [ 764.763845][T13609] loop9: detected capacity change from 0 to 4096 [ 765.196336][T13622] 9pnet_fd: Insufficient options for proto=fd [ 766.273490][T13631] loop8: detected capacity change from 0 to 512 [ 766.373431][T13631] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 766.401767][T13638] loop0: detected capacity change from 0 to 2048 [ 766.424670][T13631] EXT4-fs (loop8): invalid journal inode [ 766.430783][T13631] EXT4-fs (loop8): can't get journal size [ 766.461422][T13631] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 766.474519][T13631] System zones: 1-12, 13-13 [ 766.494296][T13638] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 766.536815][T13631] EXT4-fs (loop8): 1 truncate cleaned up [ 766.545250][T13631] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 766.684358][ T30] audit: type=1800 audit(766.618:180): pid=13638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2983" name="file1" dev="loop0" ino=1367 res=0 errno=0 [ 767.133005][T12233] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.913612][T13663] loop8: detected capacity change from 0 to 512 [ 767.935665][T13663] EXT4-fs: Ignoring removed nomblk_io_submit option [ 767.948925][T13663] EXT4-fs: Mount option(s) incompatible with ext2 [ 768.009728][T13665] loop3: detected capacity change from 0 to 256 [ 768.118621][T13665] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 768.623443][T13673] loop7: detected capacity change from 0 to 256 [ 768.649914][T13673] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 768.665110][T13673] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 768.731165][T13673] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xddfd5d26, utbl_chksum : 0xe619d30d) [ 768.903816][T13681] loop0: detected capacity change from 0 to 128 [ 768.970296][T13680] loop8: detected capacity change from 0 to 1024 [ 768.983663][T13681] EXT4-fs: Ignoring removed nobh option [ 769.065261][T13681] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 769.236587][ T5794] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 769.328332][ T1853] hfsplus: b-tree write err: -5, ino 4 [ 769.519446][T13693] netlink: 'syz.0.3006': attribute type 2 has an invalid length. [ 770.920066][T13726] loop9: detected capacity change from 0 to 256 [ 770.964308][T13726] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 770.975526][T13726] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 771.029498][T13726] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 771.291308][T13732] loop3: detected capacity change from 0 to 1024 [ 772.392899][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 772.997468][T13760] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3037'. [ 773.698080][T13775] loop7: detected capacity change from 0 to 1024 [ 773.919242][T13778] loop9: detected capacity change from 0 to 2048 [ 774.041762][T13778] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 774.120294][ T3681] hfsplus: bad catalog file entry [ 774.228943][T13778] fs-verity: sha512 using implementation "sha512-generic" [ 774.340311][T13778] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3046: bg 0: block 345: padding at end of block bitmap is not set [ 774.385587][T13779] loop8: detected capacity change from 0 to 32768 [ 774.429150][T13778] fs-verity (loop9, inode 13): Error -117 writing Merkle tree block 0 [ 774.438122][T13778] fs-verity (loop9, inode 13): Error -117 building Merkle tree [ 774.559928][T13779] ocfs2: Mounting device (7,8) on (node local, slot 0) with writeback data mode. [ 774.602382][ T30] audit: type=1800 audit(774.568:181): pid=13779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3045" name="file1" dev="loop8" ino=9553 res=0 errno=0 [ 774.687065][T12297] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.704973][T12233] ocfs2: Unmounting device (7,8) on (node local) [ 775.636007][T13797] loop9: detected capacity change from 0 to 128 [ 775.696645][T13797] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 775.876538][T13795] loop3: detected capacity change from 0 to 32768 [ 775.898695][T13795] [ 775.898695][T13795] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 775.898695][T13795] [ 775.924851][T13795] find_entry called with index = 0 [ 775.930740][T13795] read_mapping_page failed! [ 775.935539][T13795] ERROR: (device loop3): txAbort: [ 775.935539][T13795] [ 775.939603][T13797] UDF-fs: error (device loop9): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 775.956055][T13795] ERROR: (device loop3): remounting filesystem as read-only [ 776.786301][T13812] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3059'. [ 777.197677][T13816] loop0: detected capacity change from 0 to 1024 [ 777.467566][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3055'. [ 777.591068][ T3625] hfsplus: b-tree write err: -5, ino 4 [ 778.013536][T13837] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3069'. [ 778.038075][T13837] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.047280][T13837] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.056437][T13837] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.068410][T13837] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.094353][T12305] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 778.103999][T13837] vxlan0: entered promiscuous mode [ 778.109451][T13837] vxlan0: entered allmulticast mode [ 778.282651][T12305] usb 4-1: Using ep0 maxpacket: 32 [ 778.315149][T12305] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 778.323911][T12305] usb 4-1: config 0 has no interface number 0 [ 778.330236][T12305] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 778.341736][T12305] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 778.464903][T12305] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 778.476997][T12305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.486190][T12305] usb 4-1: Product: syz [ 778.490802][T12305] usb 4-1: Manufacturer: syz [ 778.496225][T12305] usb 4-1: SerialNumber: syz [ 778.547397][T12305] usb 4-1: config 0 descriptor?? [ 778.798444][T12305] radio-si470x 4-1:0.35: this is not a si470x device. [ 778.852305][T12305] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 779.067330][T12305] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 779.138220][T13856] loop8: detected capacity change from 0 to 512 [ 779.197404][T13858] loop9: detected capacity change from 0 to 2048 [ 779.219667][T13858] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 779.275738][ T24] usb 4-1: USB disconnect, device number 13 [ 779.283831][ T24] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 779.318461][T13863] loop0: detected capacity change from 0 to 512 [ 779.331628][T13863] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 779.332470][T13856] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 779.352916][T13863] EXT4-fs (loop0): 1 truncate cleaned up [ 779.362963][T13863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 779.537194][T12297] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.562807][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.878985][T12233] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 780.195286][T13878] loop0: detected capacity change from 0 to 512 [ 780.225159][T13878] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 780.258201][T13878] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3087: bg 0: block 104: invalid block bitmap [ 780.282000][T13878] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 780.322089][T13878] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3087: invalid indirect mapped block 1 (level 1) [ 780.391068][T13878] EXT4-fs (loop0): 1 truncate cleaned up [ 780.399366][T13878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 780.433025][T13884] macvlan0: entered promiscuous mode [ 780.450025][T13884] netlink: 'syz.3.3090': attribute type 1 has an invalid length. [ 780.458792][T13884] netlink: 'syz.3.3090': attribute type 2 has an invalid length. [ 780.481197][T13878] EXT4-fs (loop0): shut down requested (1) [ 780.553393][T12305] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 780.666852][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.717497][T12305] usb 10-1: Using ep0 maxpacket: 16 [ 780.748693][T12305] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 780.759568][T12305] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.771223][T12305] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 780.803816][T12305] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 780.813644][T12305] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 780.822082][T12305] usb 10-1: SerialNumber: syz [ 780.859990][T12305] hub 10-1:1.0: bad descriptor, ignoring hub [ 780.866519][T12305] hub 10-1:1.0: probe with driver hub failed with error -5 [ 780.875984][T12305] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 780.967727][ T30] audit: type=1326 audit(780.938:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13889 comm="syz.0.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3acf8e929 code=0x7ffc0000 [ 780.990257][ T30] audit: type=1326 audit(780.938:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13889 comm="syz.0.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3acf8e929 code=0x7ffc0000 [ 781.012246][ C0] vkms_vblank_simulate: vblank timer overrun [ 781.051459][ T30] audit: type=1326 audit(780.988:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13889 comm="syz.0.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3acf8e929 code=0x7ffc0000 [ 781.074542][ T30] audit: type=1326 audit(780.998:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13889 comm="syz.0.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3acf8e929 code=0x7ffc0000 [ 781.097108][ T30] audit: type=1326 audit(780.998:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13889 comm="syz.0.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3acf8e929 code=0x7ffc0000 [ 781.119498][ T30] audit: type=1326 audit(781.018:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13889 comm="syz.0.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3acf8e929 code=0x7ffc0000 [ 781.143950][ T30] audit: type=1326 audit(781.018:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13889 comm="syz.0.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3acf8e929 code=0x7ffc0000 [ 781.167317][ T30] audit: type=1326 audit(781.018:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13889 comm="syz.0.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc3acf858e7 code=0x7ffc0000 [ 781.184722][T10366] usb 10-1: USB disconnect, device number 4 [ 781.190117][ T30] audit: type=1326 audit(781.018:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13889 comm="syz.0.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc3acf2ab19 code=0x7ffc0000 [ 781.218558][ T30] audit: type=1326 audit(781.018:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13889 comm="syz.0.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc3acf858e7 code=0x7ffc0000 [ 781.902676][T13907] loop9: detected capacity change from 0 to 64 [ 783.018061][T13926] tap0: tun_chr_ioctl cmd 2147767521 [ 783.767819][T13947] netlink: 3 bytes leftover after parsing attributes in process `syz.8.3118'. [ 784.229144][T13957] loop8: detected capacity change from 0 to 512 [ 784.276093][T13957] EXT4-fs: Ignoring removed mblk_io_submit option [ 784.370001][T13957] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 784.727327][T12233] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.746586][T13969] loop3: detected capacity change from 0 to 2048 [ 784.777971][T13963] loop0: detected capacity change from 0 to 4096 [ 784.801304][T13969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 784.832286][T13963] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 785.027089][ T24] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 785.074812][T13331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 785.104038][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.218580][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 785.265466][ T24] usb 10-1: config index 0 descriptor too short (expected 164, got 36) [ 785.274764][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.286252][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.296642][ T24] usb 10-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 785.306227][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.385828][ T24] usb 10-1: config 0 descriptor?? [ 785.462609][T13982] loop0: detected capacity change from 0 to 256 [ 785.505841][T13982] exfat: Deprecated parameter 'namecase' [ 785.531927][T13984] loop8: detected capacity change from 0 to 512 [ 785.568858][T13984] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 785.588721][T13982] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 785.644284][T13984] EXT4-fs (loop8): 1 truncate cleaned up [ 785.652129][T13984] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 785.828890][ T24] logitech 0003:046D:C29C.0011: reserved main item tag 0xe [ 785.899985][ T24] logitech 0003:046D:C29C.0011: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.9-1/input0 [ 786.037839][ T24] logitech 0003:046D:C29C.0011: no inputs found [ 786.080597][ T24] usb 10-1: USB disconnect, device number 5 [ 786.137331][T12233] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.242662][T13994] loop3: detected capacity change from 0 to 128 [ 786.332205][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 786.332360][ T30] audit: type=1800 audit(786.298:200): pid=13994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3137" name="file1" dev="loop3" ino=1048817 res=0 errno=0 [ 786.770303][T14005] --map-set only usable from mangle table [ 786.951810][T14003] loop7: detected capacity change from 0 to 2048 [ 787.061655][T14003] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 787.143980][T14011] loop3: detected capacity change from 0 to 64 [ 787.272824][T14013] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3147'. [ 787.288020][T14013] veth0_vlan: left promiscuous mode [ 788.247144][T14032] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 789.054670][T14051] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 789.515987][T14060] loop3: detected capacity change from 0 to 512 [ 789.568893][T14060] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 789.576922][T14060] UDF-fs: Scanning with blocksize 512 failed [ 789.619988][T14060] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 789.627887][T14060] UDF-fs: Scanning with blocksize 1024 failed [ 789.692153][T14060] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 789.700390][T14060] UDF-fs: Scanning with blocksize 2048 failed [ 789.746332][T14060] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 789.819289][T14060] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 789.962408][T14067] loop0: detected capacity change from 0 to 256 [ 789.988581][T14067] exfat: Deprecated parameter 'utf8' [ 789.995084][T14067] exfat: Deprecated parameter 'namecase' [ 790.166923][T14067] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 790.280055][T14070] loop9: detected capacity change from 0 to 1024 [ 790.531472][T14074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3176'. [ 790.541033][T14074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3176'. [ 791.021549][T14082] loop3: detected capacity change from 0 to 8 [ 791.261652][ T1853] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.399847][ T1853] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.540714][ T1853] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.671913][ T1853] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.857840][ T1853] bridge_slave_1: left allmulticast mode [ 791.864225][ T1853] bridge_slave_1: left promiscuous mode [ 791.870755][ T1853] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.898931][ T1853] bridge_slave_0: left allmulticast mode [ 791.905177][ T1853] bridge_slave_0: left promiscuous mode [ 791.911686][ T1853] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.335946][ T1853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 792.371566][ T1853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 792.424421][ T1853] bond0 (unregistering): Released all slaves [ 792.639079][T14092] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3186'. [ 792.734535][T14096] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3187'. [ 793.194617][ T1853] hsr_slave_0: left promiscuous mode [ 793.237181][ T1853] hsr_slave_1: left promiscuous mode [ 793.245345][ T1853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 793.253639][ T1853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 793.322960][ T1853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 793.331113][ T1853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 793.409460][ T1853] veth1_macvtap: left promiscuous mode [ 793.416910][ T1853] veth0_macvtap: left promiscuous mode [ 793.424789][ T1853] veth1_vlan: left promiscuous mode [ 793.430457][ T1853] veth0_vlan: left promiscuous mode [ 793.490413][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 793.684828][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 793.694945][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 793.708074][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 793.719236][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 793.758444][T14108] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 794.171002][ T1853] team0 (unregistering): Port device team_slave_1 removed [ 794.209957][ T1853] team0 (unregistering): Port device team_slave_0 removed [ 795.246648][T14104] chnl_net:caif_netlink_parms(): no params data found [ 795.291572][T14125] loop0: detected capacity change from 0 to 1024 [ 795.730611][ T48] hfsplus: b-tree write err: -5, ino 4 [ 795.784962][T14130] loop7: detected capacity change from 0 to 1024 [ 795.812845][T14130] EXT4-fs: Ignoring removed oldalloc option [ 795.819690][T14130] EXT4-fs: Ignoring removed oldalloc option [ 795.826580][T14130] EXT4-fs: Ignoring removed oldalloc option [ 795.873664][T14130] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 795.883412][ T5809] Bluetooth: hci3: command tx timeout [ 796.744352][T14130] loop7: detected capacity change from 0 to 40427 [ 796.765672][T14130] F2FS-fs (loop7): Unrecognized mount option "max_dir_size_kb=0x00000000000007b1" or missing value [ 797.227827][T14104] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.235516][T14104] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.243643][T14104] bridge_slave_0: entered allmulticast mode [ 797.254037][T14104] bridge_slave_0: entered promiscuous mode [ 797.268986][T14104] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.276785][T14104] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.285014][T14104] bridge_slave_1: entered allmulticast mode [ 797.294507][T14104] bridge_slave_1: entered promiscuous mode [ 797.623738][T14149] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.3208'. [ 797.647666][T14104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.694838][T14104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.724875][T14152] loop8: detected capacity change from 0 to 256 [ 797.939980][T14152] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 797.985097][ T5809] Bluetooth: hci3: command tx timeout [ 798.055415][T14104] team0: Port device team_slave_0 added [ 798.211099][T14104] team0: Port device team_slave_1 added [ 798.344365][T14150] loop0: detected capacity change from 0 to 32768 [ 798.364063][T14150] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3209 (14150) [ 798.385286][T14150] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 798.396063][T14150] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm [ 798.405384][T14150] BTRFS info (device loop0): using free-space-tree [ 798.559500][T14150] BTRFS info (device loop0 state M): max_inline set to 4096 [ 798.569656][T14104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 798.576920][T14104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 798.603522][T14104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.623458][T14104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.630884][T14104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 798.659629][T14104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 798.674264][ T5794] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 798.841585][T14172] loop3: detected capacity change from 0 to 512 [ 798.860343][T14172] EXT4-fs: Ignoring removed nomblk_io_submit option [ 798.926570][T14172] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 798.935857][T14172] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 799.099092][T14104] hsr_slave_0: entered promiscuous mode [ 799.109633][T14104] hsr_slave_1: entered promiscuous mode [ 799.118118][T14104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 799.126538][T14104] Cannot create hsr debugfs directory [ 799.381319][T14180] netlink: 71 bytes leftover after parsing attributes in process `syz.3.3218'. [ 799.736016][T14184] loop3: detected capacity change from 0 to 512 [ 799.795224][T14184] EXT4-fs (loop3): Test dummy encryption mode enabled [ 799.878152][T14184] EXT4-fs error (device loop3): __ext4_iget:5379: inode #11: block 1: comm syz.3.3220: invalid block [ 799.920209][T14184] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3220: couldn't read orphan inode 11 (err -117) [ 799.986609][T14188] loop0: detected capacity change from 0 to 64 [ 799.995570][T14184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 800.046490][ T5809] Bluetooth: hci3: command tx timeout [ 800.072278][T14184] EXT4-fs error (device loop3): ext4_add_entry:2417: inode #2: comm syz.3.3220: Directory hole found for htree leaf block 0 [ 800.268884][T13331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 800.602657][T14193] loop8: detected capacity change from 0 to 4096 [ 800.641073][T14193] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 800.651330][T14193] NILFS (loop8): mounting unchecked fs [ 800.711679][T14193] NILFS (loop8): recovery complete [ 800.828753][T14199] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 800.871631][T14104] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 800.925436][T14104] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 800.976155][T14104] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 801.022450][T14104] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 801.364990][T14206] block nbd3: NBD_DISCONNECT [ 801.370251][T14206] block nbd3: Send disconnect failed -107 [ 801.409923][T14205] block nbd3: Disconnected due to user request. [ 801.416828][T14205] block nbd3: shutting down sockets [ 801.678784][T14104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.788659][T14104] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.851125][ T3681] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.858859][ T3681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.897229][T14210] loop8: detected capacity change from 0 to 4096 [ 801.948337][ T3681] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.955921][ T3681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.167752][ T5809] Bluetooth: hci3: command tx timeout [ 802.600486][T14214] loop0: detected capacity change from 0 to 32768 [ 802.687106][T14214] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 802.687246][T14214] allowing incompatible features above 0.0: (unknown version) [ 802.687325][T14214] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 802.711405][ C0] vkms_vblank_simulate: vblank timer overrun [ 802.743345][T14214] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 802.752045][T14214] bcachefs (loop0): initializing new filesystem [ 802.769731][T14214] bcachefs (loop0): going read-write [ 802.828600][T14218] loop3: detected capacity change from 0 to 512 [ 802.866609][T14214] bcachefs (loop0): marking superblocks [ 802.911540][T14214] bcachefs (loop0): initializing freespace [ 802.937245][T14214] bcachefs (loop0): done initializing freespace [ 802.958392][T14214] bcachefs (loop0): reading snapshots table [ 802.965025][T14214] bcachefs (loop0): reading snapshots done [ 803.076226][T14218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 803.263427][T14214] bcachefs (loop0): done starting filesystem [ 803.481677][ T5794] bcachefs (loop0): shutting down [ 803.487620][ T5794] bcachefs (loop0): going read-only [ 803.494108][ T5794] bcachefs (loop0): finished waiting for writes to stop [ 803.561435][ T5794] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 803.784467][T13331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 803.860832][ T5794] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 18 [ 803.918483][ T5794] bcachefs (loop0): clean shutdown complete, journal seq 19 [ 803.946553][ T5794] bcachefs (loop0): marking filesystem clean [ 804.040013][T14104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.057460][ T5794] bcachefs (loop0): shutdown complete [ 804.408928][T14104] veth0_vlan: entered promiscuous mode [ 804.517253][T14104] veth1_vlan: entered promiscuous mode [ 804.649315][T14104] veth0_macvtap: entered promiscuous mode [ 804.697224][ T24] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 804.717400][T14104] veth1_macvtap: entered promiscuous mode [ 804.832077][T14104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.873968][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 804.881298][T14104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 804.897233][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.908502][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.918798][ T24] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 804.928539][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.945608][T14104] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.949639][ T24] usb 9-1: config 0 descriptor?? [ 804.955284][T14104] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.955457][T14104] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.978833][T14104] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.986662][ T24] hub 9-1:0.0: USB hub found [ 805.051056][T14253] loop3: detected capacity change from 0 to 512 [ 805.086348][T14253] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.3244: casefold flag without casefold feature [ 805.103711][T14253] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3244: couldn't read orphan inode 15 (err -117) [ 805.120856][T14253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 805.189163][ T24] hub 9-1:0.0: 1 port detected [ 805.370450][T13331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.398647][ T24] hub 9-1:0.0: hub_hub_status failed (err = -71) [ 805.409436][ T24] hub 9-1:0.0: config failed, can't get hub status (err -71) [ 805.451520][ T24] usbhid 9-1:0.0: can't add hid device: -71 [ 805.459040][ T24] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 805.495451][ T24] usb 9-1: USB disconnect, device number 4 [ 806.383992][T14270] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3248'. [ 806.921302][T14277] loop8: detected capacity change from 0 to 1024 [ 807.527991][T14288] io-wq is not configured for unbound workers [ 807.668376][T14291] loop3: detected capacity change from 0 to 2048 [ 807.775417][T14294] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 807.968918][T14296] macsec1: entered allmulticast mode [ 807.974993][T14296] macvlan0: entered allmulticast mode [ 807.980767][T14296] veth1_vlan: entered allmulticast mode [ 808.201407][T14294] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 808.220393][T14294] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 808.260506][T14294] Remounting filesystem read-only [ 808.291251][T13331] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 808.782369][T14314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 808.802803][T14314] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 809.259576][ T3577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.267788][ T3577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.422378][ T1853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.434414][ T1853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.355672][T14347] Bluetooth: MGMT ver 1.23 [ 810.596467][T14350] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 812.146683][T14370] loop7: detected capacity change from 0 to 1024 [ 812.192159][T14373] loop1: detected capacity change from 0 to 128 [ 812.240281][T14375] loop8: detected capacity change from 0 to 64 [ 812.249700][T14373] EXT4-fs: Ignoring removed nobh option [ 812.288317][T14373] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 812.339447][ T3577] hfsplus: b-tree write err: -5, ino 4 [ 812.422139][T14373] fscrypt (loop1, inode 12): Unsupported encryption flags (0xb0) [ 812.649769][T14104] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 812.926024][ T3577] ===================================================== [ 812.933534][ T3577] BUG: KMSAN: uninit-value in n_tty_receive_buf_closing+0xfe/0x9a0 [ 812.941754][ T3577] n_tty_receive_buf_closing+0xfe/0x9a0 [ 812.947692][ T3577] n_tty_receive_buf_common+0x19d5/0x2540 [ 812.953814][ T3577] n_tty_receive_buf2+0x4c/0x60 [ 812.958873][ T3577] tty_ldisc_receive_buf+0xc6/0x2c0 [ 812.964366][ T3577] tty_port_default_receive_buf+0xd7/0x1a0 [ 812.970373][ T3577] flush_to_ldisc+0x49d/0xf00 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 812.975784][ T3577] process_scheduled_works+0xb91/0x1d80 [ 812.984415][ T3577] worker_thread+0xedf/0x1590 [ 812.989372][ T3577] kthread+0xd5c/0xf00 [ 812.994681][ T3577] ret_from_fork+0x1e3/0x310 [ 812.999475][ T3577] ret_from_fork_asm+0x1a/0x30 [ 813.005549][ T3577] [ 813.007973][ T3577] Uninit was stored to memory at: [ 813.013405][ T3577] n_tty_receive_buf_closing+0xf7/0x9a0 [ 813.019407][ T3577] n_tty_receive_buf_common+0x19d5/0x2540 [ 813.025484][ T3577] n_tty_receive_buf2+0x4c/0x60 [ 813.031354][ T3577] tty_ldisc_receive_buf+0xc6/0x2c0 [ 813.037122][ T3577] tty_port_default_receive_buf+0xd7/0x1a0 [ 813.043214][ T3577] flush_to_ldisc+0x49d/0xf00 [ 813.048063][ T3577] process_scheduled_works+0xb91/0x1d80 [ 813.053907][ T3577] worker_thread+0xedf/0x1590 [ 813.058797][ T3577] kthread+0xd5c/0xf00 [ 813.063025][ T3577] ret_from_fork+0x1e3/0x310 [ 813.068469][ T3577] ret_from_fork_asm+0x1a/0x30 [ 813.073543][ T3577] [ 813.075969][ T3577] Uninit was created at: [ 813.083629][ T3577] __kmalloc_noprof+0x95f/0x1310 [ 813.088741][ T3577] __tty_buffer_request_room+0x3d4/0x7a0 [ 813.096032][ T3577] __tty_insert_flip_string_flags+0x157/0x6f0 [ 813.102292][ T3577] uart_insert_char+0x368/0x930 [ 813.107426][ T3577] serial8250_read_char+0x1ba/0x670 [ 813.112825][ T3577] serial8250_handle_irq+0x930/0x1110 [ 813.118495][ T3577] serial8250_default_handle_irq+0x116/0x2b0 [ 813.124770][ T3577] serial8250_interrupt+0xc8/0x400 [ 813.130073][ T3577] __handle_irq_event_percpu+0x11c/0xbf0 [ 813.136027][ T3577] handle_irq_event+0xe0/0x2a0 [ 813.140983][ T3577] handle_edge_irq+0x31c/0xc80 [ 813.146010][ T3577] __common_interrupt+0xa2/0x220 [ 813.151167][ T3577] common_interrupt+0x94/0xb0 [ 813.156505][ T3577] asm_common_interrupt+0x2b/0x40 [ 813.161952][ T3577] [ 813.164498][ T3577] CPU: 1 UID: 0 PID: 3577 Comm: kworker/u8:11 Tainted: G W 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(undef) [ 813.178865][ T3577] Tainted: [W]=WARN [ 813.185556][ T3577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 813.196864][ T3577] Workqueue: events_unbound flush_to_ldisc [ 813.202879][ T3577] ===================================================== [ 813.210034][ T3577] Disabling lock debugging due to kernel taint [ 813.216393][ T3577] Kernel panic - not syncing: kmsan.panic set ... [ 813.222963][ T3577] CPU: 1 UID: 0 PID: 3577 Comm: kworker/u8:11 Tainted: G B W 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(undef) [ 813.237197][ T3577] Tainted: [B]=BAD_PAGE, [W]=WARN [ 813.242371][ T3577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 813.252607][ T3577] Workqueue: events_unbound flush_to_ldisc [ 813.258622][ T3577] Call Trace: [ 813.262011][ T3577] [ 813.265232][ T3577] __dump_stack+0x26/0x30 [ 813.269759][ T3577] dump_stack_lvl+0x53/0x270 [ 813.274554][ T3577] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 813.280614][ T3577] dump_stack+0x1e/0x25 [ 813.284977][ T3577] panic+0x4bd/0xd50 [ 813.289126][ T3577] kmsan_report+0x31c/0x320 [ 813.293867][ T3577] ? __msan_warning+0x1b/0x30 [ 813.298747][ T3577] ? n_tty_receive_buf_closing+0xfe/0x9a0 [ 813.304671][ T3577] ? n_tty_receive_buf_common+0x19d5/0x2540 [ 813.310800][ T3577] ? n_tty_receive_buf2+0x4c/0x60 [ 813.316295][ T3577] ? tty_ldisc_receive_buf+0xc6/0x2c0 [ 813.321863][ T3577] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 813.328055][ T3577] ? flush_to_ldisc+0x49d/0xf00 [ 813.333149][ T3577] ? process_scheduled_works+0xb91/0x1d80 [ 813.339130][ T3577] ? worker_thread+0xedf/0x1590 [ 813.344208][ T3577] ? kthread+0xd5c/0xf00 [ 813.348664][ T3577] ? ret_from_fork+0x1e3/0x310 [ 813.353777][ T3577] ? ret_from_fork_asm+0x1a/0x30 [ 813.358913][ T3577] ? ret_from_fork_asm+0x1a/0x30 [ 813.364139][ T3577] ? kmsan_get_metadata+0xfb/0x160 [ 813.369448][ T3577] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 813.375457][ T3577] ? kmsan_get_metadata+0xfb/0x160 [ 813.380752][ T3577] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 813.386765][ T3577] ? update_misfit_status+0x32/0xaa0 [ 813.392326][ T3577] ? kmsan_get_metadata+0xfb/0x160 [ 813.397634][ T3577] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 813.403736][ T3577] ? kmsan_get_metadata+0xfb/0x160 [ 813.409051][ T3577] __msan_warning+0x1b/0x30 [ 813.413813][ T3577] n_tty_receive_buf_closing+0xfe/0x9a0 [ 813.419733][ T3577] n_tty_receive_buf_common+0x19d5/0x2540 [ 813.425739][ T3577] n_tty_receive_buf2+0x4c/0x60 [ 813.430768][ T3577] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 813.436486][ T3577] tty_ldisc_receive_buf+0xc6/0x2c0 [ 813.441853][ T3577] tty_port_default_receive_buf+0xd7/0x1a0 [ 813.447843][ T3577] flush_to_ldisc+0x49d/0xf00 [ 813.452684][ T3577] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 813.459294][ T3577] ? __pfx_flush_to_ldisc+0x10/0x10 [ 813.464642][ T3577] process_scheduled_works+0xb91/0x1d80 [ 813.470431][ T3577] worker_thread+0xedf/0x1590 [ 813.475360][ T3577] kthread+0xd5c/0xf00 [ 813.479664][ T3577] ? __pfx_worker_thread+0x10/0x10 [ 813.485212][ T3577] ? __pfx_kthread+0x10/0x10 [ 813.489997][ T3577] ret_from_fork+0x1e3/0x310 [ 813.494756][ T3577] ? __pfx_kthread+0x10/0x10 [ 813.499612][ T3577] ret_from_fork_asm+0x1a/0x30 [ 813.504617][ T3577] [ 813.508101][ T3577] Kernel Offset: disabled [ 813.512491][ T3577] Rebooting in 86400 seconds..