last executing test programs: 45m56.445058663s ago: executing program 32 (id=843): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff}) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='ns\x00') openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x275a, 0x2) 45m22.282809682s ago: executing program 33 (id=913): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x1) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [{0x20, '#! '}]}, 0xf) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 44m23.696417906s ago: executing program 34 (id=1118): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0b0600200000000000003100000005003600000000000500350004000000050033000300000008000200", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e30"], 0x40}}, 0x0) 43m17.270872632s ago: executing program 35 (id=1338): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840) 39m35.624060014s ago: executing program 36 (id=1955): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x10b703, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0xffff1000, 0x8000}) 38m35.399250958s ago: executing program 37 (id=2096): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000340)={0x0, 0x9, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00'}) 34m36.615090357s ago: executing program 38 (id=2895): setresuid(0x0, 0xee01, 0xee00) r0 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) 32m38.759255205s ago: executing program 39 (id=3296): unshare(0x26020600) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r0, 0x0, 0x0) 26m21.568464488s ago: executing program 40 (id=4608): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x24) 26m10.454034942s ago: executing program 41 (id=4636): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1200000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 22m2.036174695s ago: executing program 42 (id=5331): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec00000001090212"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) ioctl(r0, 0x8b22, &(0x7f0000000040)) 21m58.601529311s ago: executing program 43 (id=5333): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000240)='./file1\x00', 0x2000084c, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYRES64, @ANYRES8, @ANYRES16, @ANYRES64, @ANYBLOB="2c6469736361726459ad809e1eb82c00fb278330ab3b4884d36adf6908d11f5783dc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14fc, &(0x7f0000002a80)="$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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000300)="d2ffdd934517f3e145f228e086dd", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 21m43.767517627s ago: executing program 44 (id=5355): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$getflags(r0, 0x401) 20m56.208842289s ago: executing program 45 (id=5462): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x40140, 0x0) 19m44.069465357s ago: executing program 46 (id=5757): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="7a0af8ff7525757cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c80000040000000000b1a297cfddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1ae9f2cfe401dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd853eb3f12225bfcca581f04f317c8301b43267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4800b3c26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc70bb30d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692f01ad194f302d7a658e90000000001000000b6b2f25ddb8c640ab321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb43a03409f8e6972f3f720d045923702cede0f7e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0aa390d0da6972ed719d7e0efb2bb713d1890e317c8de105c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b9c662003"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000033c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r0, 0x4) sendmsg$unix(r2, &(0x7f0000002f40)={0x0, 0x0, 0x0}, 0x0) 17m37.90335176s ago: executing program 47 (id=6315): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x10400, 0x0, 0xfb, 0x0, &(0x7f0000000000)) mount(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000040)='trans=rdma,\xfc\xb5%o\x85\x9b\xe1F\xe8*X\xe7\x84\xcc\xfd\xec\xcd\xbe\x9d3\x1a\x00\v_\xcf\xb7\xb5\xe1\xf9\x1eC') 17m22.384813245s ago: executing program 48 (id=6367): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$bt_hci(r0, 0x84, 0x2, 0x0, &(0x7f0000000000)) 16m36.514492255s ago: executing program 49 (id=6532): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 14m16.924616428s ago: executing program 50 (id=7165): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="050000000000000063112200000000008510000002000000850000000500000095000000000000009500a5050000000087a45f2f52cef602ee26b815b347e4ed1026ee3b8abcd838b31a"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 12m1.369264249s ago: executing program 51 (id=7792): r0 = syz_io_uring_setup(0x364, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_SYMLINKAT={0x26, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 6m13.139947499s ago: executing program 8 (id=9396): r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x48, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xe59}, @TCA_TBF_PARMS={0x28, 0x1, {{0xb2, 0x2, 0x83ba, 0x22dc, 0x6, 0x6}, {0x3, 0x2, 0x5, 0x1, 0x40, 0x2}, 0xff, 0xeb1, 0xa19}}, @TCA_TBF_PRATE64={0xffffffffffffffcf, 0x5, 0xc90d8b5559ec0195}, @TCA_TBF_BURST={0x8, 0x6, 0x6}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 6m12.296303155s ago: executing program 8 (id=9402): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d61637365630000140002800500080001000000060002404e20000008000500", @ANYRES32=r1], 0x4c}}, 0x0) 6m11.487377168s ago: executing program 8 (id=9405): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000880)={0x2020}, 0x2020) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000000), 0x44, 0x6ff, &(0x7f0000000500)="$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") ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000100)={0x0, 0xd, 0x4, 0xe000, 0x800, {}, {0x4, 0x0, 0x1, 0x62, 0x0, 0x64, "c2866192"}, 0x80000001, 0x4, {}, 0x40}) 6m10.418887441s ago: executing program 8 (id=9409): syz_mount_image$iso9660(&(0x7f0000000a80), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES32], 0xfe, 0x5b9, &(0x7f0000000340)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') mount$bind(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x2000, 0x0) 6m8.951822814s ago: executing program 8 (id=9417): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x25dfdbfd, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x1de, 0x9, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x4, {0x2, 0x1}}}}]}]}, 0x60}}, 0x0) 6m7.820374459s ago: executing program 8 (id=9422): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000001c40)={'IDLETIMER\x00'}, &(0x7f0000004580)=0x1e) 6m3.954551635s ago: executing program 52 (id=9422): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000001c40)={'IDLETIMER\x00'}, &(0x7f0000004580)=0x1e) 4m51.692217186s ago: executing program 4 (id=9745): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x90) 4m51.428229215s ago: executing program 5 (id=9746): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, r2, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3f, 0x23}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x38}}, 0x10) 4m51.095340453s ago: executing program 4 (id=9747): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r0, 0xc0189436, &(0x7f00000003c0)={'veth1_to_hsr\x00', @random="0300002000"}) 4m50.904669036s ago: executing program 5 (id=9750): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xd2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x7f) 4m50.448401979s ago: executing program 4 (id=9752): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001) 4m50.224361686s ago: executing program 5 (id=9753): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) 4m49.944383312s ago: executing program 4 (id=9755): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@quota}]}, 0x1, 0x629, &(0x7f0000001080)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) 4m49.491293018s ago: executing program 5 (id=9756): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./file1\x00', 0x2008000, &(0x7f00000002c0)=ANY=[@ANYBLOB="696f636861727365743d6370313235302c6e6f6164696e6963622c6e6f6164696e6963622c73686f727461642c7569643d666f726765742c6769643d666f726765742c6769643d69676e6f72652c6e6f6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c00508d5c6fd14a140518c2f8949ec502a29ec1c3795fd47c03a3a72c97984a3502b51d8bfa33ab6090f2e4dc00fe8ed0b41f905b98973a0ca9e4c5eea9e8f394f5f12b6f8f8f86dda2c5d5dd18d0075da59034af306372c1b6cf04e02375a1f7ce9a910a4fc47c7e3a34fd"], 0x2, 0xc40, &(0x7f0000002740)="$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") mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x1c0) getdents(r0, 0x0, 0x58) 4m49.013254802s ago: executing program 4 (id=9758): r0 = memfd_create(&(0x7f0000000080)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\x0f\xb4\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1rS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xaeR\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\x00\x00\x00\x00\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec4B%\x0e\xce\xcf', 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000180)=@ng={0x4, 0x7}, 0x2, 0x1) write$binfmt_script(r0, &(0x7f0000002040)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 4m48.326153587s ago: executing program 5 (id=9759): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) 4m47.535932508s ago: executing program 4 (id=9761): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000c000000080026000816"], 0x40}}, 0x0) 4m47.424374186s ago: executing program 5 (id=9762): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x1, 0x2, 0xb3ff, 0x0, 0x0, "71a4b85f10d0554b"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000480)=0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x8400, 0x1, 0x0, 0x10000, 0x1b, "4415264a88b82c521113fb235902af2556c6b6"}) 4m44.167870945s ago: executing program 53 (id=9761): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000c000000080026000816"], 0x40}}, 0x0) 4m44.086952581s ago: executing program 54 (id=9762): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x1, 0x2, 0xb3ff, 0x0, 0x0, "71a4b85f10d0554b"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000480)=0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x8400, 0x1, 0x0, 0x10000, 0x1b, "4415264a88b82c521113fb235902af2556c6b6"}) 3m15.942443952s ago: executing program 2 (id=10078): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0xc906, &(0x7f0000000080)={[{@i_version}, {@noblock_validity}, {@nomblk_io_submit}, {@noinit_itable}, {@errors_remount}, {@init_itable}, {@noauto_da_alloc}, {@quota}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1e, 0x4ea, &(0x7f0000003040)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000008000800040000001800018014000200776c616e31000000000000000000000008000700"], 0x3c}}, 0x0) 3m14.82728734s ago: executing program 2 (id=10084): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10030000020000800000a13bb10f000000000000000001296c849b57a3277c328d823a4f4634b23b93594baecdf67a7f7ab072a3", 0x34, 0x0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x8}, 0x14) 3m14.067358366s ago: executing program 2 (id=10087): close(0xffffffffffffffff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r0, 0x40047452, 0xf0ff1f00000000) 3m13.019091173s ago: executing program 2 (id=10092): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@quota}]}, 0x1, 0x629, &(0x7f0000001080)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) 3m11.542239638s ago: executing program 2 (id=10099): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)=0x3d) 3m10.428428707s ago: executing program 2 (id=10105): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) unshare(0x2a060400) execveat(r0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) 3m7.039197103s ago: executing program 55 (id=10105): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) unshare(0x2a060400) execveat(r0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) 44.519928836s ago: executing program 9 (id=10733): r0 = io_uring_setup(0x79bb, &(0x7f0000000400)={0x0, 0x89ea, 0x10000, 0xffffefff}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) read(r1, &(0x7f0000000040)=""/148, 0xffffff96) 43.548548603s ago: executing program 9 (id=10737): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000080)={0x3c, r1, 0xa72704fd2dfb5147, 0xf0bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0x3c}}, 0x0) 41.479386278s ago: executing program 9 (id=10743): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) close(r1) 40.73417675s ago: executing program 9 (id=10749): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x558, &(0x7f0000000c00)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.impure\x00', &(0x7f0000000140)='\x00', 0x1, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 39.818637726s ago: executing program 9 (id=10752): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000300)) 37.091172136s ago: executing program 9 (id=10765): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310d2dbd7000ffdbdf259667a19808000300", @ANYRES32=r2, @ANYBLOB="05000800000000000a00340001010101010100000800350000000000080026006c090000090007004121c2c5be0000000a000600"], 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) 34.286575684s ago: executing program 56 (id=10765): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310d2dbd7000ffdbdf259667a19808000300", @ANYRES32=r2, @ANYBLOB="05000800000000000a00340001010101010100000800350000000000080026006c090000090007004121c2c5be0000000a000600"], 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) 6.532644231s ago: executing program 6 (id=10884): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x1000840, &(0x7f0000000000)={[{@fat=@codepage={'codepage', 0x3d, '865'}}, {@shortname_mixed}, {@utf8}, {@shortname_win95}, {@shortname_mixed}, {@uni_xlateno}, {@utf8no}, {@utf8}, {@uni_xlate}, {@rodir}, {@fat=@tz_utc}, {@utf8no}]}, 0x3, 0x350, &(0x7f0000000c00)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) 6.140000801s ago: executing program 3 (id=10886): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000380)='ext4_mballoc_alloc\x00', r0, 0x0, 0xfff7fffffffffffe}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52d, &(0x7f0000000640)="$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") 4.99608739s ago: executing program 6 (id=10892): r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000)) sendmmsg(r0, &(0x7f000000dac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x400c080) 4.995719369s ago: executing program 3 (id=10893): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x210008, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0000005733010312bb6086da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x24402, 0x2a2) write$FUSE_DIRENTPLUS(r0, 0x0, 0x4000) truncate(&(0x7f0000000080)='./file1\x00', 0xc00) 4.863788367s ago: executing program 7 (id=10894): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x288, 0x288, 0xd0, 0x1b8, 0x358, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0xffffff00, 0xff, 0xff, 0x7fffffff], 'hsr0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x29, 0x7, 0x2, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 4.244371883s ago: executing program 0 (id=10896): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="400000001000210400"/20, @ANYRES32=r1, @ANYBLOB="00000000000001002000128008000100677265001400028006000f00aa00000006000e0007"], 0x40}}, 0x0) 3.875819857s ago: executing program 7 (id=10897): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', r2, 0x0, 0x0, 0x9, 0x0, 0x48, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2={0xff, 0x5}, 0x20, 0x0, 0x1}}) 3.520496923s ago: executing program 1 (id=10898): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030300000000000000000500000008000300", @ANYRES32=r1], 0x1c}}, 0x0) 3.184247023s ago: executing program 6 (id=10899): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) recvfrom(r0, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) 3.147064729s ago: executing program 0 (id=10900): unshare(0x2a020400) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0xffffffff80000000) 2.811940128s ago: executing program 1 (id=10901): r0 = io_uring_setup(0x6b3, &(0x7f0000000000)={0x0, 0xf324, 0x800, 0x2, 0xb9}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000300)={&(0x7f0000002000)={[{0x0, 0x0, 0x2}, {0x0}, {0x0, 0x0, 0x3}, {0x0}]}, 0x4, 0x1}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f00000075c0)={0x0}, 0x1) 2.64009757s ago: executing program 7 (id=10902): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 2.612290774s ago: executing program 3 (id=10903): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000640)="37fe01875ee9ad38d3000037234adcd7a271f2d87da03ea3c1b0eb949065c29156446f75a0f3128825ba4f61f4b702bf480dcf31d53eb65dccb39c21519ce00c182b88c24df8edd02e34505737aa6121dd0190d072dd8929dddebae0edee0000000000000000000000000000c1884887af3632629f33ff040db7344166bb151e39a8e60f68ad422ab2784089aa2eaefacdb5d76d04159ef11b74ff9292802dca5dbf1e34a8dcfddeee99d712acac87faffe0b3539b29af027141f573a908992b0bd716d3c70deb9e9529fc2c5f805e5685fb82ff089379827213bb80c3733a8c7aefa9a298bd27a2d6d88bf7484332a36ab1d7ff23b4ab5c448d3a054d23b20a887a4d33b6caf64ff6492cff424900ff254718dcded985e5e815382cf3dcb1913bbc67cb1eefdfc92ae737e774fd8bfc965c9a4ab1fad018d6abb2137041", 0x13e, 0x4000, 0x0, 0x0) 2.455331047s ago: executing program 0 (id=10904): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x70, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045120062006400004d2f"], 0x0) 2.171997953s ago: executing program 1 (id=10905): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x14, r2, 0x325, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24044084}, 0x20000004) 2.060648944s ago: executing program 7 (id=10906): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x693, &(0x7f0000000f40)="$eJzs3c1vHGcdB/DvrNcvm0qO26ZpQJUwjVQQEYkdK4VwSUAIBalCVThwthqnseKkwXFR2gNxAYkrB/6AcggXOIEQEhJSpHKGW8XN4lQJiUtPaQ8MmtlZe+3u2ptXO/TziWaf55ln5pnf/OZlXyJrAnxuXTiR9t10cuHEa7eq9sadhZWNOwvXevUkk0laSbtbpLieFB8k59Od8oVqZjNcMWw7v14+e/HDjzc+6rba2RqveukMD7A9yl6sN1Nmk4w15UPYNt4bDzbe5Fa12MxMlbDjvcTBfhtPUm7z46NbPYOUY32Nodc78PQouu+bfbrX/0xyKMlU7w1tvdvZevIR7um+7kXrjy8OAAAAODAO37ud3Mr0fscBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT5Pm+f9FM7V69dkUvef/T/Q9Y39in8MdbvfIpnqVu60nEQwAAAAAAAAAPF5fupffXSzL6V67LOr/83+5bhypX5/J27mZpazmZG5lMWtZy2rmk8z0DTRxa3FtbXW+t+anZVkOWfP0wDVPjxhw51HsNQAAAAAAAAD83zjXlD/LhUzvcywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALBNkYx1i3o60qvPpNVOMpVkolpuPflHr/40u7vfAQAAAMATcPhe7uVWpnvtsqi/8x+tv/dP5e1cz1qWs5aVLOVS/VtA91t/a+POwsrGnYVr1fTZcb/9n636H6f3DKMeMd3fHgZv+Vi9RCeXs1zPOZk38lZWcimtes3KsV48g+N6r4qpONdVlqMl6FJTVnv+q6Y8GGbqjIxvZmSuia3KxrO7Z6L/6DzAlubT2vzl58h95Pzcrlsp/ts7Jod6c5Jnvr93zsfva2ceys5MnO47+47unonkK3/6/Y+urFy/eqVYP3FwTqP7MPmvratmZyYW+jLx4siZuHzz6czETq28sFm/kO/lhzmR2bye1SznJ1nMWpYym+/WtcXmfK5eZ3bP1Pltrdf3imKiOS5jO2L68uFuuVtML9frTmc5P8hbuZSlvFr/O535fCNnciZn+47wCyNc9a0BV/2fhwd//KtNpZPkl015MFR5fbYvr/333Jm6r39OK+Vkd73nHtm9cVP7i02lOhI/b8qDYTMTU9l8l+hF93wvA+MDM/Gb+rZyc+X61dUrizd2jFusD97eK9m++wfnRlKdL89VB6tubT87qr7nB/bN131HNvtaO/t+29ns2+tKnWg+w312pNN134sD+xbqvmN9fVuftz4ty7L7eQuAA+/Q1w5NdP7d+Xvn/c4vOlc6r019Z/Kbky9NZPxv499qz4290nqp+EPez0+z9zd0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgTzffeffq4srK0uqOSlmWt4d0PZZK2sm2OX/9S98ySeqHAY0+YLX0+VZSz2mnqdxfYLcfbHfee9Ak/LM5Jk8k4Y+kMjX0/NlZ+aQsy4MR8yiVsnFQ4tmPyr7eloAn4NTatRunbr7z7teXry2+ufTm0vWzZ86cnTt75tWFU5eXV5bmuq/7HSXwOPR9AgcAAAAAAAAAAACeEqP9cU7xcH/bAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAQLpxI+26KzM+dnKvaG3cWVqqpV99a8pMkrSTFbFJ8kJxPd8pM33DFsO2sJxc//Hjjo26r3Uz18q3d1hvNejNlNslYUw4wNWhmeXvYeEU9zo3h442o2NzDKmHHe4mD/fa/AAAA///tbhq7") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) 1.834924783s ago: executing program 6 (id=10907): r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x6b4d, 0x0, 0x0, 0x0, 0x0) 1.724546154s ago: executing program 3 (id=10908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000000001}) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000240)={r0, r0, r0}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={'xxhash64\x00'}}) 1.724118919s ago: executing program 0 (id=10909): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x2c, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xe}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20028040}, 0x800) 1.607538126s ago: executing program 1 (id=10910): r0 = msgget$private(0x0, 0x20) msgsnd(r0, &(0x7f0000000080)={0x2, "a4049bafb588c550bb44639865"}, 0x11, 0x0) msgsnd(r0, &(0x7f0000000300)={0x1, "8056641943598edcaaed79e79a0a8bb9"}, 0x14, 0x0) msgctl$IPC_RMID(0x0, 0x0) 1.117978074s ago: executing program 6 (id=10911): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x10000016, r2}) 1.032112023s ago: executing program 0 (id=10912): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='-'], 0x27) 1.031749448s ago: executing program 1 (id=10913): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4080) 1.031528793s ago: executing program 3 (id=10914): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 945.721073ms ago: executing program 7 (id=10915): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r1, r0, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r1, r0, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) 551.000417ms ago: executing program 6 (id=10916): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000900)={0x1d, r1, 0x1}, 0x18) sendmmsg$unix(r0, &(0x7f0000004a80)=[{{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000440)="bd8373d6f57ffd5c", 0x8}], 0x1, 0x0, 0x0, 0x40000}}, {{&(0x7f0000000940)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x533509e98f3a73c}}], 0x2, 0x1d3) 298.137708ms ago: executing program 0 (id=10917): sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') pwritev(r0, &(0x7f0000000980)=[{&(0x7f0000000300)="a1", 0x1}, {0x0}], 0x2, 0x2, 0x0) 215.463685ms ago: executing program 7 (id=10918): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) 335.115µs ago: executing program 1 (id=10919): ioprio_set$pid(0x1, 0x0, 0x4007) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 0s ago: executing program 3 (id=10920): openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) kernel console output (not intermixed with test programs): 23" exe="/root/syz-executor" sig=0 arch=40000003 syscall=313 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 2974.462992][ T30] audit: type=1326 audit(2000000132.940:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32276 comm="syz.7.9823" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 2975.095572][T32286] loop3: detected capacity change from 0 to 512 [ 2975.120327][T32286] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2975.217657][T32286] EXT4-fs error (device loop3): __ext4_iget:5379: inode #11: block 1: comm syz.3.9827: invalid block [ 2975.325805][T32286] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.9827: couldn't read orphan inode 11 (err -117) [ 2975.341423][T32286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2975.389395][T32286] EXT4-fs (loop3): shut down requested (1) [ 2975.650658][T32079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2976.497798][T32306] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 2977.143326][T32312] loop3: detected capacity change from 0 to 1024 [ 2977.538936][ T4290] hfsplus: b-tree write err: -5, ino 4 [ 2978.899166][T32333] loop3: detected capacity change from 0 to 1024 [ 2978.981655][T32337] loop0: detected capacity change from 0 to 16 [ 2979.031804][T32337] erofs (device loop0): mounted with root inode @ nid 36. [ 2979.153434][T32337] bio_check_eod: 6 callbacks suppressed [ 2979.153524][T32337] syz.0.9848: attempt to access beyond end of device [ 2979.153524][T32337] loop0: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 2979.180764][T32337] erofs (device loop0): read error -5 @ 43 of nid 36 [ 2980.418107][T32342] loop7: detected capacity change from 0 to 32768 [ 2980.439000][T32342] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.9850 (32342) [ 2980.464207][T32342] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2980.481081][T32342] BTRFS info (device loop7): using crc32c (crc32c-x86_64) checksum algorithm [ 2980.490529][T32342] BTRFS info (device loop7): using free-space-tree [ 2980.741180][T32337] syz.0.9848 (32337): drop_caches: 2 [ 2980.869479][T31267] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2981.415130][T32364] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2981.454158][T32363] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2981.812007][T32368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9856'. [ 2981.921476][T21282] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2981.931560][T21282] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2981.944346][T21282] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2981.952801][T21282] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2981.960408][T21282] rtc rtc0: __rtc_set_alarm: err=-22 [ 2982.131875][T32370] loop2: detected capacity change from 0 to 512 [ 2982.158698][T32370] EXT4-fs: Ignoring removed mblk_io_submit option [ 2982.196315][T32370] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2982.263422][T32370] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 2982.375538][T32370] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2982.465466][T32370] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.9857: Invalid block bitmap block 0 in block_group 0 [ 2982.521189][T32370] EXT4-fs (loop2): Remounting filesystem read-only [ 2982.564367][T32370] Quota error (device loop2): write_blk: dquota write failed [ 2982.632485][T32370] Quota error (device loop2): write_blk: dquota write failed [ 2982.640616][T32370] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 2982.662547][T32370] EXT4-fs (loop2): 1 orphan inode deleted [ 2982.742886][T32370] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2983.226544][T32081] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2983.277944][T32381] vivid-001: disconnect [ 2983.286175][T32380] vivid-001: reconnect [ 2983.945392][T32389] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9865'. [ 2984.609477][T32394] mkiss: ax0: crc mode is auto. [ 2984.791439][T32403] loop0: detected capacity change from 0 to 256 [ 2984.800449][T32401] mkiss: ax0: crc mode is auto. [ 2985.536932][T32407] netlink: 'syz.2.9873': attribute type 4 has an invalid length. [ 2986.588787][T32427] sctp: [Deprecated]: syz.2.9878 (pid 32427) Use of int in maxseg socket option. [ 2986.588787][T32427] Use struct sctp_assoc_value instead [ 2987.283586][T32433] loop7: detected capacity change from 0 to 256 [ 2987.326979][T32433] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2987.344782][T32433] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 2987.544938][T32433] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xdf21e5da, utbl_chksum : 0xe619d30d) [ 2988.787702][T32445] wlan1 speed is unknown, defaulting to 1000 [ 2989.951519][T32452] bridge0: port 1(bridge_slave_0) entered disabled state [ 2990.244947][T32461] loop3: detected capacity change from 0 to 64 [ 2991.214675][T32471] mkiss: ax0: crc mode is auto. [ 2991.400370][T32471] mkiss: ax0: crc mode is auto. [ 2991.605941][T32469] loop2: detected capacity change from 0 to 4096 [ 2991.679756][T32469] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 2991.998245][T32469] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 2992.154015][T32478] loop7: detected capacity change from 0 to 4096 [ 2992.227308][T32478] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512). [ 2994.384072][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 2994.390813][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 2994.491814][T32507] geneve2: entered promiscuous mode [ 2994.501781][T32507] geneve2: entered allmulticast mode [ 2995.331805][T32514] loop3: detected capacity change from 0 to 64 [ 2995.518744][T32514] Trying to free block not in datazone [ 2995.527971][T32514] Trying to free block not in datazone [ 2995.544872][T32514] Trying to free block not in datazone [ 2996.188784][T32521] loop3: detected capacity change from 0 to 64 [ 2996.202914][T32518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9922'. [ 2996.307365][T32521] hfs: bad catalog entry type 0 [ 2996.441983][T32525] loop7: detected capacity change from 0 to 512 [ 2996.538426][T32525] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 2996.688071][ T30] audit: type=1800 audit(2000000155.240:359): pid=32525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.9925" name="file1" dev="loop7" ino=26 res=0 errno=0 [ 2997.754078][T32538] loop6: detected capacity change from 0 to 764 [ 2997.815569][T32538] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 2998.742532][ T30] audit: type=1326 audit(2000000157.290:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32547 comm="syz.7.9936" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 2998.781743][ T30] audit: type=1326 audit(2000000157.330:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32547 comm="syz.7.9936" exe="/root/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 2998.807936][ T30] audit: type=1326 audit(2000000157.330:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32547 comm="syz.7.9936" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 2998.831508][ T30] audit: type=1326 audit(2000000157.330:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32547 comm="syz.7.9936" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 3000.827626][T32572] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.9947'. [ 3001.642840][T32584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9951'. [ 3002.029383][T32588] loop7: detected capacity change from 0 to 1024 [ 3002.071122][T32588] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 3002.155890][T32588] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3002.480962][T31267] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3003.654603][T32607] pimreg: entered allmulticast mode [ 3003.777105][T32607] pimreg: left allmulticast mode [ 3003.977971][T32614] loop3: detected capacity change from 0 to 256 [ 3004.060622][T32614] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 3004.229672][T32614] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010364, chksum : 0x43f9f21b, utbl_chksum : 0xe619d30d) [ 3004.775243][T32622] loop7: detected capacity change from 0 to 1024 [ 3004.984497][T32622] hfsplus: can't free extent [ 3005.043552][ T30] audit: type=1804 audit(2000000163.590:364): pid=32622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.9968" name="/newroot/94/file2/file1" dev="loop7" ino=20 res=1 errno=0 [ 3005.306379][T32628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9971'. [ 3006.068230][T32638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3006.079675][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3006.568199][T32645] loop0: detected capacity change from 0 to 64 [ 3006.681019][T32646] loop7: detected capacity change from 0 to 128 [ 3006.790558][T32646] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 3008.529916][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803cabde00: rx timeout, send abort [ 3008.686251][T32673] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9991'. [ 3008.814153][T32675] batadv0: entered promiscuous mode [ 3008.874193][T32675] batadv0: left promiscuous mode [ 3009.042510][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803cabde00: abort rx timeout. Force session deactivation [ 3009.926193][T32683] loop7: detected capacity change from 0 to 2048 [ 3009.984474][T32686] loop0: detected capacity change from 0 to 1024 [ 3010.052998][T15229] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 3010.070337][T32683] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3010.083554][T32686] hfsplus: xattr searching failed [ 3010.110045][ T30] audit: type=1800 audit(2000000168.640:365): pid=32686 uid=0 auid=0 ses=1 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9998" name="memory.events" dev="loop0" ino=2 res=0 errno=0 [ 3010.210073][T32683] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 3010.226608][T32683] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 11 with max blocks 1 with error 28 [ 3010.242682][T32683] EXT4-fs (loop7): This should not happen!! Data will be lost [ 3010.242682][T32683] [ 3010.252988][T32683] EXT4-fs (loop7): Total free blocks count 0 [ 3010.259339][T32683] EXT4-fs (loop7): Free/Dirty block details [ 3010.265809][T32683] EXT4-fs (loop7): free_blocks=2415919104 [ 3010.274971][T32683] EXT4-fs (loop7): dirty_blocks=16 [ 3010.285185][T32683] EXT4-fs (loop7): Block reservation details [ 3010.291447][T32683] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 3010.312868][T15229] usb 4-1: Using ep0 maxpacket: 16 [ 3010.405112][T15229] usb 4-1: config 0 interface 0 altsetting 48 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3010.418651][T15229] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3010.426010][T15229] usb 4-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 3010.435598][T15229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3010.448169][T32694] loop2: detected capacity change from 0 to 1024 [ 3010.597797][T15229] usb 4-1: config 0 descriptor?? [ 3010.620332][T32694] hfsplus: small dir entry [ 3010.785486][ T12] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 3011.128037][T32697] loop6: detected capacity change from 0 to 1764 [ 3011.135332][T15229] logitech 0003:046D:C219.0058: unknown main item tag 0x2 [ 3011.174792][T15229] logitech 0003:046D:C219.0058: hidraw0: USB HID v0.01 Device [HID 046d:c219] on usb-dummy_hcd.3-1/input0 [ 3011.186752][T15229] logitech 0003:046D:C219.0058: no inputs found [ 3011.374025][T15229] usb 4-1: USB disconnect, device number 22 [ 3012.603120][ T30] audit: type=1326 audit(2000000171.140:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32719 comm="syz.0.10010" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 3012.634331][ T30] audit: type=1326 audit(2000000171.140:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32719 comm="syz.0.10010" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 3012.662675][ T30] audit: type=1326 audit(2000000171.160:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32719 comm="syz.0.10010" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 3012.689318][ T30] audit: type=1326 audit(2000000171.160:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32719 comm="syz.0.10010" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 3012.709914][T32720] loop0: detected capacity change from 0 to 1024 [ 3012.712256][ T30] audit: type=1326 audit(2000000171.170:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32719 comm="syz.0.10010" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 3012.745816][ T30] audit: type=1326 audit(2000000171.240:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32719 comm="syz.0.10010" exe="/root/syz-executor" sig=0 arch=40000003 syscall=91 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 3012.775822][ T30] audit: type=1326 audit(2000000171.260:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32719 comm="syz.0.10010" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 3012.799030][ T30] audit: type=1326 audit(2000000171.260:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32719 comm="syz.0.10010" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 3012.826014][ T30] audit: type=1326 audit(2000000171.290:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32719 comm="syz.0.10010" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 3012.953224][T32720] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 3013.021435][T32720] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 3013.139200][T32720] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 3013.268154][T32720] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.10010: lblock 2 mapped to illegal pblock 2 (length 1) [ 3013.325913][T32720] EXT4-fs (loop0): Remounting filesystem read-only [ 3013.333525][T32720] EXT4-fs (loop0): 1 orphan inode deleted [ 3013.345245][T32720] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3013.513347][T32729] loop7: detected capacity change from 0 to 2048 [ 3013.740777][T32729] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3013.800623][T27477] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3014.145854][T31267] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3014.255521][T32740] loop0: detected capacity change from 0 to 512 [ 3014.303703][T32738] loop3: detected capacity change from 0 to 1024 [ 3014.369829][T32738] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.10017: bad orphan inode 196608 [ 3014.417192][T32740] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.10016: bg 0: block 288: padding at end of block bitmap is not set [ 3014.436940][T32740] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 3014.445866][T32738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3014.478608][T32740] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.10016: attempt to clear invalid blocks 1024 len 1 [ 3014.545830][T32740] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.10016: invalid indirect mapped block 1819239214 (level 0) [ 3014.628940][T32740] EXT4-fs (loop0): 1 truncate cleaned up [ 3014.639524][T32740] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3015.045082][T27477] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3015.125698][T32079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3016.484008][T32764] wlan1 speed is unknown, defaulting to 1000 [ 3016.668928][T32767] loop0: detected capacity change from 0 to 64 [ 3016.867890][T32765] loop6: detected capacity change from 0 to 1024 [ 3017.036499][T32765] __quota_error: 17 callbacks suppressed [ 3017.036585][T32765] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5 [ 3017.057951][T32765] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 3017.070039][T32765] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.10026: Failed to acquire dquot type 0 [ 3017.174639][T32765] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 3017.190159][T32765] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #13: comm syz.6.10026: corrupted inode contents [ 3017.313055][T32765] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #13: comm syz.6.10026: mark_inode_dirty error [ 3017.363973][T32765] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #13: comm syz.6.10026: corrupted inode contents [ 3017.440336][T32765] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.10026: mark_inode_dirty error [ 3017.530190][T32765] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #13: comm syz.6.10026: corrupted inode contents [ 3017.613282][T32765] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 3017.650832][T32765] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #13: comm syz.6.10026: corrupted inode contents [ 3017.731988][T32765] EXT4-fs error (device loop6): ext4_truncate:4597: inode #13: comm syz.6.10026: mark_inode_dirty error [ 3017.789037][T32765] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 3017.863752][T32765] EXT4-fs (loop6): 1 truncate cleaned up [ 3017.877552][T32765] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3018.022687][ T313] loop2: detected capacity change from 0 to 2048 [ 3018.723331][T19046] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3019.477181][ T324] loop2: detected capacity change from 0 to 736 [ 3019.946840][ T324] Symlink component flag not implemented [ 3019.955479][ T324] Symlink component flag not implemented (122) [ 3021.412007][ T30] audit: type=1326 audit(2000000179.960:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=340 comm="syz.6.10043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 3021.514045][ T30] audit: type=1326 audit(2000000179.990:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=340 comm="syz.6.10043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 3021.539272][ T30] audit: type=1326 audit(2000000180.060:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=340 comm="syz.6.10043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 3021.741749][ T346] loop3: detected capacity change from 0 to 256 [ 3021.758334][ T30] audit: type=1326 audit(2000000180.150:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=340 comm="syz.6.10043" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x0 [ 3022.594715][ T351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10047'. [ 3022.935246][ T355] loop3: detected capacity change from 0 to 1024 [ 3023.139300][ T355] hfsplus: request for non-existent node 211 in B*Tree [ 3023.146631][ T355] hfsplus: request for non-existent node 211 in B*Tree [ 3024.862923][ T383] loop0: detected capacity change from 0 to 512 [ 3024.955776][ T383] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 3025.096875][ T383] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.10061: iget: bad i_size value: 360287970189639690 [ 3025.166039][ T391] pim6reg: tun_chr_ioctl cmd 1074812118 [ 3025.210216][ T383] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.10061: couldn't read orphan inode 15 (err -117) [ 3025.268349][ T383] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3025.372018][ T383] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 3025.386042][ T383] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 3025.400818][ T383] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.10061: Failed to acquire dquot type 0 [ 3025.734491][ T397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3025.743945][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3026.006347][T27477] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3026.835896][ T407] netlink: 'syz.0.10070': attribute type 1 has an invalid length. [ 3027.306770][ T414] loop2: detected capacity change from 0 to 2048 [ 3027.407184][ T414] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 3027.464573][ T414] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3027.526108][ T418] loop0: detected capacity change from 0 to 256 [ 3027.680687][ T418] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 3028.398716][ T424] loop7: detected capacity change from 0 to 512 [ 3028.451256][ T426] loop0: detected capacity change from 0 to 256 [ 3028.452926][ T424] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 3028.499504][ T426] MINIX-fs: mounting file system with errors, running fsck is recommended [ 3028.551327][ T428] loop2: detected capacity change from 0 to 512 [ 3028.586511][ T428] EXT4-fs: Ignoring removed i_version option [ 3028.593394][ T428] EXT4-fs: Ignoring removed nomblk_io_submit option [ 3028.593762][ T426] Trying to free block not in datazone [ 3028.642801][ T428] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 3028.648744][ T424] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.10080: iget: bad i_size value: 360287970189639690 [ 3028.652322][ T428] EXT4-fs (loop2): blocks per group (256) and clusters per group (32768) inconsistent [ 3028.753904][ T424] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.10080: couldn't read orphan inode 15 (err -117) [ 3028.795936][ T424] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3028.936460][ T424] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 3028.951479][ T424] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 3028.961458][ T424] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.10080: Failed to acquire dquot type 0 [ 3029.181277][T31267] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3029.456977][ T433] loop3: detected capacity change from 0 to 4096 [ 3029.496836][ T433] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 3031.174724][ T451] loop0: detected capacity change from 0 to 2048 [ 3031.248088][ T451] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 3031.290461][ T455] loop3: detected capacity change from 0 to 256 [ 3031.341426][ T451] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3031.361421][ T454] loop2: detected capacity change from 0 to 1024 [ 3031.437450][ T454] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 3031.448447][ T454] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 3031.458744][ T454] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 3031.473649][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3031.519505][ T455] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 3031.562571][ T454] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: inode #5: comm syz.2.10092: unexpected bad inode w/o EXT4_IGET_BAD [ 3031.653080][ T454] EXT4-fs (loop2): no journal found [ 3031.658634][ T454] EXT4-fs (loop2): can't get journal size [ 3031.786493][ T454] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 3032.198127][ T462] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 3032.280990][T32081] EXT4-fs error (device loop2): __ext4_iget:5379: inode #15: block 1803188595: comm syz-executor: invalid block [ 3032.367310][T32081] EXT4-fs error (device loop2): __ext4_iget:5379: inode #15: block 1803188595: comm syz-executor: invalid block [ 3032.824052][T32334] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3033.363971][ T4290] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3033.624632][ T4290] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3033.799152][ T4290] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3033.862036][ T473] loop7: detected capacity change from 0 to 4096 [ 3033.905476][ T473] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512). [ 3034.018938][ T4290] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3034.452950][ T4290] bridge_slave_1: left allmulticast mode [ 3034.465930][ T4290] bridge_slave_1: left promiscuous mode [ 3034.473306][ T4290] bridge0: port 2(bridge_slave_1) entered disabled state [ 3034.570396][ T4290] bridge_slave_0: left allmulticast mode [ 3034.576603][ T4290] bridge_slave_0: left promiscuous mode [ 3034.583634][ T4290] bridge0: port 1(bridge_slave_0) entered disabled state [ 3035.335551][ T4290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3035.386122][ T4290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3035.429756][ T4290] bond0 (unregistering): Released all slaves [ 3036.030724][ T4290] hsr_slave_0: left promiscuous mode [ 3036.053071][ T4290] hsr_slave_1: left promiscuous mode [ 3036.061761][ T4290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3036.069921][ T4290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3036.123753][ T4290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3036.131666][ T4290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3036.251820][ T4290] veth1_macvtap: left promiscuous mode [ 3036.257993][ T4290] veth0_macvtap: left promiscuous mode [ 3036.264319][ T4290] veth1_vlan: left promiscuous mode [ 3036.269970][ T4290] veth0_vlan: left promiscuous mode [ 3037.515589][ T4290] team0 (unregistering): Port device team_slave_1 removed [ 3037.632748][ T4290] team0 (unregistering): Port device team_slave_0 removed [ 3038.023077][ T488] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 3038.493072][T28760] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3038.508636][T28760] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3038.522434][T28760] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3038.577550][T28760] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3038.589479][T28760] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3038.795525][ T498] wlan1 speed is unknown, defaulting to 1000 [ 3039.052010][ T504] netlink: 79 bytes leftover after parsing attributes in process `syz.0.10116'. [ 3039.695056][ T498] chnl_net:caif_netlink_parms(): no params data found [ 3040.050660][ T514] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 3040.693250][T25997] Bluetooth: hci3: command tx timeout [ 3040.836710][ T517] loop6: detected capacity change from 0 to 4096 [ 3041.329576][ T517] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 3041.340249][ T498] bridge0: port 1(bridge_slave_0) entered blocking state [ 3041.348477][ T498] bridge0: port 1(bridge_slave_0) entered disabled state [ 3041.356880][ T498] bridge_slave_0: entered allmulticast mode [ 3041.366978][ T498] bridge_slave_0: entered promiscuous mode [ 3041.467470][ T498] bridge0: port 2(bridge_slave_1) entered blocking state [ 3041.475525][ T498] bridge0: port 2(bridge_slave_1) entered disabled state [ 3041.483626][ T498] bridge_slave_1: entered allmulticast mode [ 3041.494124][ T498] bridge_slave_1: entered promiscuous mode [ 3041.921593][ T498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3042.007189][ T533] loop0: detected capacity change from 0 to 512 [ 3042.028870][ T498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3042.081961][T19046] ntfs3(loop6): ino=9, ntfs_sync_fs failed, -22. [ 3042.351366][ T533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3042.366186][ T533] ext4 filesystem being mounted at /459/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3042.509731][ T498] team0: Port device team_slave_0 added [ 3042.585956][ T498] team0: Port device team_slave_1 added [ 3042.753073][T25997] Bluetooth: hci3: command tx timeout [ 3042.899635][ T498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3042.910303][ T498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3042.949761][ T498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3043.012789][T27477] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3043.104673][ T498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3043.111927][ T498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3043.145178][ T498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3043.625724][ T545] loop0: detected capacity change from 0 to 256 [ 3043.737951][ T498] hsr_slave_0: entered promiscuous mode [ 3043.749121][ T498] hsr_slave_1: entered promiscuous mode [ 3043.763394][ T498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3043.771326][ T498] Cannot create hsr debugfs directory [ 3044.140518][ T550] loop7: detected capacity change from 0 to 256 [ 3044.156026][ T548] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 3044.310452][ T550] FAT-fs (loop7): error, invalid FAT chain (i_pos 196, last_block 1032) [ 3044.319590][ T550] FAT-fs (loop7): Filesystem has been set read-only [ 3044.409483][ T551] FAT-fs (loop7): error, invalid FAT chain (i_pos 196, last_block 1032) [ 3044.664799][ T553] ÿÿÿÿ: renamed from bridge_slave_0 (while UP) [ 3044.833763][T25997] Bluetooth: hci3: command tx timeout [ 3044.989530][ T556] loop0: detected capacity change from 0 to 2048 [ 3045.070773][ T556] EXT4-fs: inline encryption not supported [ 3045.244923][ T556] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3045.423090][ T556] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 3045.436962][ T30] audit: type=1800 audit(2000000203.950:394): pid=556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10135" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 3045.461602][ T556] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 3045.478855][ T556] EXT4-fs (loop0): This should not happen!! Data will be lost [ 3045.478855][ T556] [ 3045.489333][ T556] EXT4-fs (loop0): Total free blocks count 0 [ 3045.498624][ T556] EXT4-fs (loop0): Free/Dirty block details [ 3045.505881][ T556] EXT4-fs (loop0): free_blocks=66060288 [ 3045.514885][ T556] EXT4-fs (loop0): dirty_blocks=16 [ 3045.521501][ T556] EXT4-fs (loop0): Block reservation details [ 3045.529280][ T556] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 3046.086820][ T568] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10140'. [ 3046.096994][ T568] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10140'. [ 3046.124667][T27477] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3046.158776][ T498] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 3046.275912][ T498] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 3046.375332][ T498] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 3046.493956][ T498] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 3046.913390][T25997] Bluetooth: hci3: command tx timeout [ 3047.579649][ T583] loop6: detected capacity change from 0 to 1024 [ 3047.688869][ T583] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3047.701756][ T583] ext4 filesystem being mounted at /1115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3047.810407][ T588] ÿÿÿÿ: renamed from bridge_slave_0 [ 3047.922508][ T498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3047.964449][ T30] audit: type=1800 audit(2000000206.510:395): pid=583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.10148" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 3048.128349][ T498] 8021q: adding VLAN 0 to HW filter on device team0 [ 3048.208375][T24608] bridge0: port 1(bridge_slave_0) entered blocking state [ 3048.216097][T24608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3048.334902][T24608] bridge0: port 2(bridge_slave_1) entered blocking state [ 3048.342683][T24608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3048.460695][T19046] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3048.497746][ T592] loop3: detected capacity change from 0 to 2048 [ 3048.547888][ T592] EXT4-fs: inline encryption not supported [ 3048.638727][ T592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3048.946469][ T30] audit: type=1800 audit(2000000207.480:396): pid=592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10150" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 3048.989747][ T592] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 3049.037665][ T592] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 3049.054379][ T592] EXT4-fs (loop3): This should not happen!! Data will be lost [ 3049.054379][ T592] [ 3049.064578][ T592] EXT4-fs (loop3): Total free blocks count 0 [ 3049.070946][ T592] EXT4-fs (loop3): Free/Dirty block details [ 3049.080246][ T592] EXT4-fs (loop3): free_blocks=66060288 [ 3049.090190][ T592] EXT4-fs (loop3): dirty_blocks=16 [ 3049.095762][ T592] EXT4-fs (loop3): Block reservation details [ 3049.103626][ T592] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 3049.625857][T32079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3050.250447][ T611] netlink: 172 bytes leftover after parsing attributes in process `syz.3.10156'. [ 3050.890683][ T498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3052.054428][ T629] netlink: 64 bytes leftover after parsing attributes in process `syz.6.10160'. [ 3052.840152][ T640] ÿÿÿÿ: renamed from bridge_slave_0 (while UP) [ 3053.533189][ T498] veth0_vlan: entered promiscuous mode [ 3053.633253][ T498] veth1_vlan: entered promiscuous mode [ 3054.090427][ T498] veth0_macvtap: entered promiscuous mode [ 3054.180772][ T498] veth1_macvtap: entered promiscuous mode [ 3054.442696][ T498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3054.545628][ T498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3054.570117][ T651] loop7: detected capacity change from 0 to 1024 [ 3054.620759][ T498] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3054.633571][ T498] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3054.645581][ T498] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3054.655466][ T498] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3055.818574][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 3055.825674][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 3057.585277][ T688] loop3: detected capacity change from 0 to 128 [ 3057.673417][ T688] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 3057.696566][ T688] ext4 filesystem being mounted at /76/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 3057.729116][ C0] vkms_vblank_simulate: vblank timer overrun [ 3057.973883][ T694] loop6: detected capacity change from 0 to 1024 [ 3058.071138][T32079] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 3059.119173][ T709] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 3059.224725][ T713] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 3060.186281][ T713] loop6: detected capacity change from 0 to 32768 [ 3060.228197][ T713] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.10193 (713) [ 3060.261428][ T713] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 3060.276685][ T713] BTRFS info (device loop6): using crc32c (crc32c-x86_64) checksum algorithm [ 3060.290544][ T713] BTRFS info (device loop6): using free-space-tree [ 3060.608157][T19046] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 3061.245819][ T3652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3061.254122][ T3652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3061.389257][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3061.400220][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3062.394531][ T749] netlink: 'syz.0.10201': attribute type 4 has an invalid length. [ 3062.946370][ T754] loop3: detected capacity change from 0 to 64 [ 3062.998317][T32070] Bluetooth: hci4: command 0x0406 tx timeout [ 3063.102876][ T30] audit: type=1800 audit(2000000221.650:397): pid=754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10202" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 3063.300989][ T758] loop0: detected capacity change from 0 to 1764 [ 3063.816461][ T766] netlink: 332 bytes leftover after parsing attributes in process `syz.9.10206'. [ 3064.211039][ T770] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10210'. [ 3064.350852][ T772] loop6: detected capacity change from 0 to 256 [ 3064.715808][T21282] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 3064.919813][T21282] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3064.934033][T21282] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3064.943602][T21282] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3064.957394][T21282] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3065.104698][T21282] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3065.117644][T21282] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3065.128987][T21282] usb 10-1: SerialNumber: syz [ 3065.424113][T21282] usb 10-1: 0:2 : does not exist [ 3065.429616][T21282] usb 10-1: unit 5 not found! [ 3065.549435][T21282] usb 10-1: USB disconnect, device number 23 [ 3065.790899][ T790] loop3: detected capacity change from 0 to 1024 [ 3066.318816][ T793] loop6: detected capacity change from 0 to 64 [ 3066.450566][ T30] audit: type=1800 audit(2000000225.000:398): pid=793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.10218" name="file1" dev="loop6" ino=18 res=0 errno=0 [ 3066.724432][ T797] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 3066.759803][ T799] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 3067.325036][ T795] loop3: detected capacity change from 0 to 4096 [ 3067.465977][ T807] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3067.932702][ T812] loop7: detected capacity change from 0 to 16 [ 3068.029685][ T812] erofs (device loop7): mounted with root inode @ nid 36. [ 3068.115664][T32070] Bluetooth: hci1: command 0x0406 tx timeout [ 3068.161283][ T812] syz.7.10228: attempt to access beyond end of device [ 3068.161283][ T812] loop7: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 3068.179512][ T812] erofs (device loop7): read error -5 @ 43 of nid 36 [ 3068.676716][ T815] syz.7.10228 (815): drop_caches: 2 [ 3069.410925][T25515] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 3069.639226][T25515] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3069.649987][T25515] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3069.662321][T25515] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3069.674529][T25515] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3069.805650][T25515] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3069.815262][T25515] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3069.823817][T25515] usb 4-1: SerialNumber: syz [ 3070.149581][T25515] usb 4-1: 0:2 : does not exist [ 3070.155054][T25515] usb 4-1: unit 5 not found! [ 3070.312710][T25515] usb 4-1: USB disconnect, device number 23 [ 3071.585939][ T850] loop9: detected capacity change from 0 to 16 [ 3071.668958][ T850] erofs (device loop9): mounted with root inode @ nid 36. [ 3071.775788][ T850] syz.9.10245: attempt to access beyond end of device [ 3071.775788][ T850] loop9: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 3071.792004][ T850] erofs (device loop9): read error -5 @ 43 of nid 36 [ 3072.019636][ T850] syz.9.10245 (850): drop_caches: 2 [ 3072.469349][ T857] loop9: detected capacity change from 0 to 256 [ 3072.483026][ T857] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 3072.494414][ T857] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 3072.569365][ T857] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xdf21e5da, utbl_chksum : 0xe619d30d) [ 3072.846925][ T860] program syz.0.10250 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3072.986366][ T857] exFAT-fs (loop9): error, invalid access to FAT (entry 0xffffffff) [ 3072.995177][ T857] exFAT-fs (loop9): Filesystem has been set read-only [ 3073.046940][ T857] exFAT-fs (loop9): error, invalid access to FAT (entry 0xffffffff) [ 3073.103679][ T857] exFAT-fs (loop9): error, invalid access to FAT (entry 0xffffffff) [ 3073.161628][ T862] loop3: detected capacity change from 0 to 512 [ 3073.224582][ T862] EXT4-fs: Ignoring removed mblk_io_submit option [ 3073.261135][ T862] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 3073.326373][ T862] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 3073.353032][ T862] EXT4-fs (loop3): orphan cleanup on readonly fs [ 3073.438445][ T862] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.10251: Invalid block bitmap block 0 in block_group 0 [ 3073.541148][ T862] EXT4-fs (loop3): Remounting filesystem read-only [ 3073.583271][ T862] Quota error (device loop3): write_blk: dquota write failed [ 3073.591786][ T862] Quota error (device loop3): write_blk: dquota write failed [ 3073.600264][ T862] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 3073.611180][ T862] EXT4-fs (loop3): 1 orphan inode deleted [ 3073.661342][ T862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 3074.219389][T32079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3075.159746][ T885] loop6: detected capacity change from 0 to 16 [ 3075.185360][ T885] erofs (device loop6): mounted with root inode @ nid 36. [ 3075.245714][ T885] syz.6.10260: attempt to access beyond end of device [ 3075.245714][ T885] loop6: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 3075.260737][ T885] erofs (device loop6): read error -5 @ 43 of nid 36 [ 3075.474436][ T885] syz.6.10260 (885): drop_caches: 2 [ 3075.954845][ T892] loop3: detected capacity change from 0 to 256 [ 3076.042819][ T892] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 3076.054491][ T892] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 3076.200582][ T892] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xdf21e5da, utbl_chksum : 0xe619d30d) [ 3076.684591][ T899] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.10268'. [ 3077.490348][ T912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10274'. [ 3079.381014][ T944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3079.996903][ T953] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10288'. [ 3081.160587][ T956] loop9: detected capacity change from 0 to 32768 [ 3081.174068][ T956] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.10289 (956) [ 3081.205430][ T956] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 3081.216203][ T956] BTRFS info (device loop9): using crc32c (crc32c-x86_64) checksum algorithm [ 3081.225808][ T956] BTRFS info (device loop9): using free-space-tree [ 3081.446529][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3081.613222][ T498] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 3083.926017][ T1008] loop3: detected capacity change from 0 to 1024 [ 3084.031194][ T1008] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 3084.318905][ T1008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3084.378366][ T1018] program syz.7.10307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3085.069420][ T1014] loop0: detected capacity change from 0 to 32768 [ 3085.115341][ T1014] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.10306 (1014) [ 3085.199144][ T1014] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 3085.210313][ T1014] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm [ 3085.223041][ T1014] BTRFS info (device loop0): using free-space-tree [ 3085.325849][T32079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3085.600919][T27477] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 3086.048898][ T1052] loop3: detected capacity change from 0 to 1024 [ 3086.308724][ T1052] hfsplus: xattr searching failed [ 3086.321841][ T30] audit: type=1800 audit(2000000244.870:399): pid=1052 uid=0 auid=0 ses=2 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10312" name="memory.events" dev="loop3" ino=2 res=0 errno=0 [ 3087.588605][ T1070] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10319'. [ 3087.894231][ T1076] loop9: detected capacity change from 0 to 128 [ 3088.692789][ T30] audit: type=1326 audit(2000000247.230:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1084 comm="syz.6.10327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 3088.718687][ T30] audit: type=1326 audit(2000000247.250:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1084 comm="syz.6.10327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 3088.889935][ T30] audit: type=1326 audit(2000000247.320:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1084 comm="syz.6.10327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 3088.903356][ T1085] loop6: detected capacity change from 0 to 1024 [ 3088.915285][ T30] audit: type=1326 audit(2000000247.320:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1084 comm="syz.6.10327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 3088.915557][ T30] audit: type=1326 audit(2000000247.360:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1084 comm="syz.6.10327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 3088.915812][ T30] audit: type=1326 audit(2000000247.440:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1084 comm="syz.6.10327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=91 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 3088.916061][ T30] audit: type=1326 audit(2000000247.440:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1084 comm="syz.6.10327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 3088.916310][ T30] audit: type=1326 audit(2000000247.440:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1084 comm="syz.6.10327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 3089.158594][ T30] audit: type=1326 audit(2000000247.690:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1084 comm="syz.6.10327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 3089.203009][ T1085] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 3089.282853][ T1085] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 3089.363542][ T1085] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 3089.585474][ T1085] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 2: comm syz.6.10327: lblock 2 mapped to illegal pblock 2 (length 1) [ 3089.635202][ T1085] EXT4-fs (loop6): Remounting filesystem read-only [ 3089.642811][ T1085] EXT4-fs (loop6): 1 orphan inode deleted [ 3089.651702][ T1085] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3090.187290][ T1104] loop0: detected capacity change from 0 to 512 [ 3090.219189][T19046] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3090.348020][ T1104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3090.365512][ T1104] ext4 filesystem being mounted at /510/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3090.536784][T21282] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 3090.704785][T27477] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3090.739449][T21282] usb 4-1: config 0 interface 0 altsetting 225 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3090.751280][T21282] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3090.761225][T21282] usb 4-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 3090.771645][T21282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3090.890219][T21282] usb 4-1: config 0 descriptor?? [ 3091.195810][T21282] usbhid 4-1:0.0: can't add hid device: -71 [ 3091.202794][T21282] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 3091.235321][ T1117] loop9: detected capacity change from 0 to 1024 [ 3091.286640][T21282] usb 4-1: USB disconnect, device number 24 [ 3091.290068][ T1119] loop0: detected capacity change from 0 to 128 [ 3091.303156][ T1117] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 3091.363350][ T1117] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 3091.477922][ T1117] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 3091.593722][ T1117] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 2: comm syz.9.10349: lblock 2 mapped to illegal pblock 2 (length 1) [ 3091.700244][ T1117] EXT4-fs (loop9): Remounting filesystem read-only [ 3091.717677][ T1117] __quota_error: 27 callbacks suppressed [ 3091.717774][ T1117] Quota error (device loop9): qtree_write_dquot: dquota write failed [ 3091.737479][ T1117] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 3091.747040][ T1117] EXT4-fs (loop9): 1 orphan inode deleted [ 3091.755349][ T1117] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3091.957496][ T30] audit: type=1326 audit(2000000250.510:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1115 comm="syz.9.10349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 3091.983608][ T30] audit: type=1326 audit(2000000250.510:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1115 comm="syz.9.10349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=12 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 3092.009035][ T30] audit: type=1326 audit(2000000250.510:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1115 comm="syz.9.10349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 3092.037965][ T30] audit: type=1326 audit(2000000250.510:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1115 comm="syz.9.10349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 3092.255292][ T30] audit: type=1326 audit(2000000250.660:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1115 comm="syz.9.10349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=400 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 3092.280302][ T30] audit: type=1326 audit(2000000250.660:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1115 comm="syz.9.10349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 3092.311153][ T30] audit: type=1326 audit(2000000250.660:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1115 comm="syz.9.10349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 3092.341033][ T30] audit: type=1326 audit(2000000250.670:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1115 comm="syz.9.10349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=402 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 3092.532374][ T498] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3093.631966][ T1143] loop7: detected capacity change from 0 to 512 [ 3093.738141][ T1143] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3093.756829][ T1143] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3093.796837][T32069] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 3094.023015][T32069] usb 10-1: Using ep0 maxpacket: 8 [ 3094.098422][T32069] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 3094.111418][T32069] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3094.120143][T32069] usb 10-1: Product: syz [ 3094.124827][T32069] usb 10-1: Manufacturer: syz [ 3094.129844][T32069] usb 10-1: SerialNumber: syz [ 3094.171384][T31267] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3094.184497][T32069] usb 10-1: config 0 descriptor?? [ 3094.275749][T32069] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 3094.284485][T32069] usb 10-1: setting power ON [ 3094.289358][T32069] dvb-usb: bulk message failed: -22 (2/0) [ 3094.411420][T32069] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3094.425292][ T1141] dvb-usb: bulk message failed: -22 (3/0) [ 3094.431328][ T1141] dvb-usb: bulk message failed: -22 (4/0) [ 3094.500465][T32069] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 3094.503177][ T1141] dvb-usb: bulk message failed: -22 (5/0) [ 3094.509476][T32069] usb 10-1: media controller created [ 3094.653353][T32069] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3094.957485][T32069] usb 10-1: selecting invalid altsetting 6 [ 3094.966619][T32069] usb 10-1: digital interface selection failed (-22) [ 3094.973790][T32069] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 3095.059485][T32069] usb 10-1: setting power OFF [ 3095.064690][T32069] dvb-usb: bulk message failed: -22 (2/0) [ 3095.070669][T32069] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 3095.082987][T32069] (NULL device *): no alternate interface [ 3095.304065][ T1161] tipc: Cannot configure node identity twice [ 3095.744197][T32069] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 3095.801728][T32069] usb 10-1: USB disconnect, device number 24 [ 3096.610849][ T1178] loop3: detected capacity change from 0 to 1024 [ 3097.134905][ T1185] netlink: 'syz.0.10367': attribute type 1 has an invalid length. [ 3097.534237][ T1178] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 3097.680215][ T1190] loop6: detected capacity change from 0 to 64 [ 3097.932902][ T1196] wlan1 speed is unknown, defaulting to 1000 [ 3098.403862][ T1199] loop9: detected capacity change from 0 to 1024 [ 3098.491808][ T1199] __quota_error: 1 callbacks suppressed [ 3098.491902][ T1199] Quota error (device loop9): do_check_range: Getting block 64 out of range 1-5 [ 3098.510723][ T1199] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 3098.521828][ T1199] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.10369: Failed to acquire dquot type 0 [ 3098.593577][ T1199] EXT4-fs error (device loop9): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 3098.612710][ T1199] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.10369: corrupted inode contents [ 3098.683031][ T1199] EXT4-fs error (device loop9): ext4_dirty_inode:6459: inode #13: comm syz.9.10369: mark_inode_dirty error [ 3098.763239][ T1199] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.10369: corrupted inode contents [ 3098.810983][ T1199] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #13: comm syz.9.10369: mark_inode_dirty error [ 3098.862218][ T1199] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.10369: corrupted inode contents [ 3098.911985][ T1199] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 3098.961552][ T1199] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.10369: corrupted inode contents [ 3099.013061][ T1199] EXT4-fs error (device loop9): ext4_truncate:4597: inode #13: comm syz.9.10369: mark_inode_dirty error [ 3099.028556][ T1199] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 3099.068842][ T1199] EXT4-fs (loop9): 1 truncate cleaned up [ 3099.084945][ T1199] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3099.325505][ T1211] program syz.6.10378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3099.907615][ T498] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3103.389240][ T1257] wlan1 speed is unknown, defaulting to 1000 [ 3103.740835][ T1258] loop7: detected capacity change from 0 to 1024 [ 3103.919758][ T1258] Quota error (device loop7): do_check_range: Getting block 64 out of range 1-5 [ 3103.929518][ T1258] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 3103.939437][ T1258] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.10397: Failed to acquire dquot type 0 [ 3104.029728][ T1258] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 3104.047953][ T1258] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #13: comm syz.7.10397: corrupted inode contents [ 3104.114911][ T1258] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #13: comm syz.7.10397: mark_inode_dirty error [ 3104.212514][ T1258] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #13: comm syz.7.10397: corrupted inode contents [ 3104.292625][ T1258] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #13: comm syz.7.10397: mark_inode_dirty error [ 3104.372644][ T1258] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #13: comm syz.7.10397: corrupted inode contents [ 3104.433572][ T1258] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 3104.482910][ T1258] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #13: comm syz.7.10397: corrupted inode contents [ 3104.558931][ T1258] EXT4-fs error (device loop7): ext4_truncate:4597: inode #13: comm syz.7.10397: mark_inode_dirty error [ 3104.612842][ T1258] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 3104.674914][ T1258] EXT4-fs (loop7): 1 truncate cleaned up [ 3104.686944][ T1258] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3105.075075][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3105.084529][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3105.093814][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3105.449803][T31267] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3105.708630][ T1283] program syz.3.10404 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3106.979248][ T1299] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10411'. [ 3106.993688][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3107.282851][ T1296] loop6: detected capacity change from 0 to 4096 [ 3107.307172][ T1296] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 3108.209939][ T1307] wlan1 speed is unknown, defaulting to 1000 [ 3108.630173][ T1310] loop3: detected capacity change from 0 to 1024 [ 3108.810492][ T1310] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 3108.820408][ T1310] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 3108.830537][ T1310] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.10417: Failed to acquire dquot type 0 [ 3108.917329][ T1310] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 3108.938704][ T1310] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.10417: corrupted inode contents [ 3109.003693][ T1310] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #13: comm syz.3.10417: mark_inode_dirty error [ 3109.021843][ T1310] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.10417: corrupted inode contents [ 3109.038764][ T1310] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.10417: mark_inode_dirty error [ 3109.058068][ T1310] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.10417: corrupted inode contents [ 3109.152408][ T1310] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 3109.195973][ T1310] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.10417: corrupted inode contents [ 3109.224189][ T1310] EXT4-fs error (device loop3): ext4_truncate:4597: inode #13: comm syz.3.10417: mark_inode_dirty error [ 3109.268585][ T1310] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 3109.336356][ T1310] EXT4-fs (loop3): 1 truncate cleaned up [ 3109.344919][ T1310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3110.054127][T32079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3110.987186][ T1343] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10430'. [ 3111.493350][ T1348] loop6: detected capacity change from 0 to 512 [ 3111.574095][ T1348] EXT4-fs (loop6): orphan cleanup on readonly fs [ 3111.589677][ T1348] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.10432: bg 0: block 122: padding at end of block bitmap is not set [ 3111.618294][ T1348] Quota error (device loop6): write_blk: dquota write failed [ 3111.626982][ T1348] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 3111.637680][ T1348] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.10432: Failed to acquire dquot type 1 [ 3111.728836][ T1351] loop7: detected capacity change from 0 to 4096 [ 3111.800059][ T1348] EXT4-fs (loop6): 1 truncate cleaned up [ 3111.847366][ T1348] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 3111.867759][ T1355] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3112.039651][ T1348] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 3112.164554][ T1348] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 3112.177854][ T1357] Quota error (device loop6): do_check_range: Getting block 1536 out of range 0-5 [ 3112.487397][ T1362] loop0: detected capacity change from 0 to 1024 [ 3112.615854][T19046] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3112.640825][ T1366] netlink: zone id is out of range [ 3112.659304][ T1366] netlink: zone id is out of range [ 3112.666037][ T1366] netlink: zone id is out of range [ 3112.675760][ T1366] netlink: zone id is out of range [ 3112.681366][ T1366] netlink: zone id is out of range [ 3112.689322][ T1366] netlink: zone id is out of range [ 3112.700505][ T1366] netlink: zone id is out of range [ 3112.708844][ T1366] netlink: zone id is out of range [ 3112.717713][ T1366] netlink: zone id is out of range [ 3112.724857][ T1366] netlink: zone id is out of range [ 3112.775800][T21905] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 3113.046113][T21905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3113.057700][T21905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3113.068009][T21905] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 3113.083743][T21905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3113.137163][T21905] usb 4-1: config 0 descriptor?? [ 3113.787235][T21905] hid-led 0003:27B8:01ED.0059: probe with driver hid-led failed with error -71 [ 3113.877152][T21905] usb 4-1: USB disconnect, device number 25 [ 3114.256478][ T1377] sctp: [Deprecated]: syz.7.10443 (pid 1377) Use of int in maxseg socket option. [ 3114.256478][ T1377] Use struct sctp_assoc_value instead [ 3115.504594][ T1391] loop0: detected capacity change from 0 to 4096 [ 3115.600189][ T1396] loop3: detected capacity change from 0 to 1024 [ 3115.694507][ T1397] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3116.646264][ T1402] loop3: detected capacity change from 0 to 1024 [ 3116.750030][ T1402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3116.777115][ T1405] loop7: detected capacity change from 0 to 256 [ 3117.043255][ T1402] EXT4-fs error (device loop3): ext4_get_first_dir_block:3547: inode #11: comm syz.3.10454: directory missing '..' [ 3117.257071][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 3117.264064][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 3117.421766][T32079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3117.820105][T25515] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 3117.949160][ T1423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10461'. [ 3117.986318][ T1423] hsr0: entered promiscuous mode [ 3117.996736][ T1423] macvtap1: entered promiscuous mode [ 3118.003949][ T1423] macvtap1: entered allmulticast mode [ 3118.009599][ T1423] hsr0: entered allmulticast mode [ 3118.015069][ T1423] hsr_slave_0: entered allmulticast mode [ 3118.029630][ T1423] hsr_slave_1: entered allmulticast mode [ 3118.086810][ T1423] hsr0: left allmulticast mode [ 3118.091929][ T1423] hsr_slave_0: left allmulticast mode [ 3118.103130][ T1423] hsr_slave_1: left allmulticast mode [ 3118.103384][T25515] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3118.124486][T25515] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3118.136993][T25515] usb 10-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 3118.146921][T25515] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3118.254444][T25515] usb 10-1: config 0 descriptor?? [ 3118.276161][ T1425] netlink: 'syz.0.10463': attribute type 2 has an invalid length. [ 3118.953403][T25515] hid-led 0003:27B8:01ED.005A: probe with driver hid-led failed with error -71 [ 3119.023184][T25515] usb 10-1: USB disconnect, device number 25 [ 3119.683186][ T1434] loop3: detected capacity change from 0 to 4096 [ 3119.786393][ T1442] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3120.827602][ T1454] loop9: detected capacity change from 0 to 256 [ 3120.846817][ T1448] loop6: detected capacity change from 0 to 4096 [ 3121.040364][ T1448] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 3121.235226][ T1448] ntfs3(loop6): Failed to load $Extend (-22). [ 3121.241834][ T1448] ntfs3(loop6): Failed to initialize $Extend. [ 3121.530140][ T1456] loop0: detected capacity change from 0 to 2048 [ 3121.554889][ T1456] EXT4-fs: Ignoring removed i_version option [ 3121.741861][ T1456] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3121.759546][ T1456] ext4 filesystem being mounted at /538/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3121.947061][ T1456] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.10477: bg 0: block 345: padding at end of block bitmap is not set [ 3122.003643][ T1456] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 3122.023045][ T1456] EXT4-fs (loop0): This should not happen!! Data will be lost [ 3122.023045][ T1456] [ 3122.471484][T27477] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3122.918990][ T1471] loop3: detected capacity change from 0 to 1024 [ 3122.972477][ T1471] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 3123.077446][ T1471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3123.280374][ T1471] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.10483: missing EA_INODE flag [ 3123.304236][ T1471] EXT4-fs (loop3): Remounting filesystem read-only [ 3123.639566][T32079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3124.043095][ T1488] net_ratelimit: 2 callbacks suppressed [ 3124.043203][ T1488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3124.061107][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3125.112360][T25515] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 3125.280167][T25515] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3125.295924][T25515] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 3125.308999][T25515] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3125.319827][T25515] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 3125.436792][T25515] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3125.446631][T25515] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3125.455168][T25515] usb 4-1: Manufacturer: syz [ 3125.532376][T25515] usb 4-1: config 0 descriptor?? [ 3125.649143][ T1500] netlink: 'syz.0.10494': attribute type 14 has an invalid length. [ 3126.092778][T25515] rc_core: IR keymap rc-hauppauge not found [ 3126.098985][T25515] Registered IR keymap rc-empty [ 3126.104794][T25515] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3126.176262][ T1493] loop3: detected capacity change from 0 to 1024 [ 3126.203455][T25515] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3126.258577][T25515] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 3126.273600][T25515] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input56 [ 3126.295410][ T1493] EXT4-fs: Ignoring removed i_version option [ 3126.444665][ T1493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3126.526671][T25515] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3126.675157][T25515] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3126.704509][T25515] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3126.754300][T25515] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3126.803362][T25515] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3126.832595][T25515] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3126.863472][T25515] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3126.894416][T25515] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3126.944710][T25515] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3126.973245][T25515] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 3127.004979][T25515] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 3127.018478][T25515] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3127.145332][T25515] usb 4-1: USB disconnect, device number 26 acpid: input device has been disconnected, fd 3 [ 3127.400524][ T1518] loop0: detected capacity change from 0 to 64 [ 3127.493873][ T1520] loop6: detected capacity change from 0 to 256 [ 3127.637667][ T1518] hfs: bad catalog entry type 0 [ 3127.856900][T32079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3128.356159][ T1527] loop3: detected capacity change from 0 to 256 [ 3128.405629][ T1527] exfat: Deprecated parameter 'namecase' [ 3128.444160][ T1526] loop9: detected capacity change from 0 to 512 [ 3128.478299][ T1526] EXT4-fs: Ignoring removed orlov option [ 3128.528033][ T1527] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 3128.656297][ T1526] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3128.676578][ T1526] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3129.056031][ T1526] EXT4-fs error (device loop9): ext4_empty_dir:3078: inode #12: comm syz.9.10503: Directory hole found for htree leaf block 0 [ 3129.485265][ T498] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3130.526338][T21905] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 3130.560718][ T1551] input: syz0 as /devices/virtual/input/input57 [ 3130.753237][T21905] usb 4-1: Using ep0 maxpacket: 8 [ 3130.774700][T21905] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 3130.784524][T21905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3130.890240][T21905] pvrusb2: Hardware description: Terratec Grabster AV400 [ 3130.902450][T21905] pvrusb2: ********** [ 3130.906658][T21905] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 3130.921550][T21905] pvrusb2: Important functionality might not be entirely working. [ 3130.933793][T21905] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 3130.950947][T21905] pvrusb2: ********** [ 3131.181259][ T2332] pvrusb2: Invalid write control endpoint [ 3131.346068][ T1558] loop6: detected capacity change from 0 to 256 [ 3131.393312][ T1549] pvrusb2: Killing an I2C write to 0 that is too large (desired=63 limit=61) [ 3131.486928][T21905] usb 4-1: USB disconnect, device number 27 [ 3131.556281][ T1560] loop7: detected capacity change from 0 to 512 [ 3131.596118][ T1560] EXT4-fs: Ignoring removed mblk_io_submit option [ 3131.604091][ T1560] EXT4-fs: Ignoring removed mblk_io_submit option [ 3131.653193][ T1560] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 3131.664521][ T2332] pvrusb2: Invalid write control endpoint [ 3131.670528][ T2332] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 3131.683344][ T2332] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 3131.691175][ T2332] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 3131.701719][ T2332] pvrusb2: Device being rendered inoperable [ 3131.708084][ T2332] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 3131.721416][ T2332] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 3131.731822][ T2332] pvrusb2: Attached sub-driver cx25840 [ 3131.737725][ T2332] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 3131.754478][ T2332] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 3131.856132][ T1560] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c11c, mo2=0002] [ 3131.903592][ T1560] System zones: 1-12 [ 3131.969757][ T1560] EXT4-fs error (device loop7): ext4_iget_extra_inode:5035: inode #15: comm syz.7.10521: corrupted in-inode xattr: e_value size too large [ 3132.035102][ T1560] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.10521: couldn't read orphan inode 15 (err -117) [ 3132.104866][ T1560] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3132.602741][T31267] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3133.849924][ T1585] loop7: detected capacity change from 0 to 1024 [ 3133.878728][ T1585] EXT4-fs: Ignoring removed orlov option [ 3134.013400][ T1585] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3134.439697][T31267] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3137.080118][ T30] audit: type=1326 audit(2000000295.620:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1623 comm="syz.7.10548" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 3137.212374][ T30] audit: type=1326 audit(2000000295.660:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1623 comm="syz.7.10548" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 3137.239219][ T30] audit: type=1326 audit(2000000295.660:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1623 comm="syz.7.10548" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 3137.262809][ T30] audit: type=1326 audit(2000000295.670:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1623 comm="syz.7.10548" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 3137.294803][ T30] audit: type=1326 audit(2000000295.680:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1623 comm="syz.7.10548" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 3137.322558][ T30] audit: type=1326 audit(2000000295.690:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1623 comm="syz.7.10548" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 3137.348356][ T30] audit: type=1326 audit(2000000295.700:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1623 comm="syz.7.10548" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 3137.373516][ T30] audit: type=1326 audit(2000000295.700:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1623 comm="syz.7.10548" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f93567 code=0x7ffc0000 [ 3137.403257][ T30] audit: type=1326 audit(2000000295.700:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1623 comm="syz.7.10548" exe="/root/syz-executor" sig=0 arch=40000003 syscall=139 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 3137.429923][ T30] audit: type=1326 audit(2000000295.700:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1623 comm="syz.7.10548" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 3138.246131][ T1641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10554'. [ 3138.255820][ T1641] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10554'. [ 3139.162690][ T1646] netlink: 64 bytes leftover after parsing attributes in process `syz.7.10556'. [ 3139.385308][ T1650] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10558'. [ 3139.795475][ T1653] loop3: detected capacity change from 0 to 1024 [ 3139.811416][ T1651] loop9: detected capacity change from 0 to 2048 [ 3140.003778][ T1653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3140.094749][ T1651] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3140.452931][ T1662] loop0: detected capacity change from 0 to 1024 [ 3140.544924][ T1662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3140.659536][T32079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3140.715041][ T1662] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 3141.043314][ T498] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3141.150740][T27477] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3141.947588][ T1679] loop0: detected capacity change from 0 to 512 [ 3142.047862][ T1679] EXT4-fs (loop0): orphan cleanup on readonly fs [ 3142.132824][ T1679] __quota_error: 2 callbacks suppressed [ 3142.132917][ T1679] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 3142.150349][ T1679] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 3142.163992][ T1679] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.10567: Failed to acquire dquot type 1 [ 3142.283331][ T1679] EXT4-fs (loop0): 1 truncate cleaned up [ 3142.325303][ T1679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 3142.479797][ T1685] wlan1 speed is unknown, defaulting to 1000 [ 3142.952397][ T1686] loop9: detected capacity change from 0 to 1024 [ 3142.955930][T27477] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3143.319313][ T1686] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3143.332753][ T1686] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3143.570743][ T1692] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 3144.325458][ T498] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3144.548566][ T1702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10577'. [ 3144.680582][ T1704] loop3: detected capacity change from 0 to 64 [ 3144.832873][ T30] audit: type=1800 audit(2000000303.380:455): pid=1704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10579" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 3146.224276][ T1709] IPVS: persistence engine module ip_vs_pe_@ not found [ 3146.347746][ T1720] mmap: syz.3.10584 (1720): VmData 37376000 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 3146.817488][ T1725] loop0: detected capacity change from 0 to 64 [ 3147.801035][ T1735] loop3: detected capacity change from 0 to 16 [ 3148.890526][ T1745] loop7: detected capacity change from 0 to 512 [ 3149.078329][ T1745] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3149.092798][ T1745] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3149.290985][ T1753] loop6: detected capacity change from 0 to 128 [ 3149.308310][ T1753] EXT4-fs: Ignoring removed nobh option [ 3149.409571][ T1753] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 3149.453083][ T1753] ext4 filesystem being mounted at /1214/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 3149.629588][ T1753] fscrypt (loop6, inode 12): Mutually exclusive encryption flags (0x16) [ 3149.718269][T31267] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3150.142499][T19046] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 3150.885607][ T1768] loop7: detected capacity change from 0 to 164 [ 3151.047925][ T1769] loop3: detected capacity change from 0 to 2048 [ 3151.138270][ T1769] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3151.766070][ T30] audit: type=1400 audit(2000000310.300:456): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=1774 comm="syz.7.10608" [ 3151.924088][ T1777] netlink: 300 bytes leftover after parsing attributes in process `syz.6.10609'. [ 3152.530799][ T1783] loop0: detected capacity change from 0 to 256 [ 3152.618251][ T1787] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10613'. [ 3152.628114][ T1787] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10613'. [ 3152.704713][ T1783] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 3152.770096][ T1788] loop9: detected capacity change from 0 to 512 [ 3152.884440][ T1794] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 3153.015011][ T1788] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3153.031495][ T1788] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3153.439876][ T1796] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10617'. [ 3153.884306][ T498] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3154.626835][ T1808] loop0: detected capacity change from 0 to 256 [ 3154.934943][ T1808] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 3155.454537][ T1816] loop3: detected capacity change from 0 to 1024 [ 3155.525150][ T1816] hfsplus: invalid btree flag [ 3155.530817][ T1816] hfsplus: failed to load catalog file [ 3155.699209][ T1816] loop3: detected capacity change from 0 to 128 [ 3155.859418][ T1816] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 3157.515089][ T1839] Mount JFS Failure: -22 [ 3157.523059][ T1839] jfs_mount failed w/return code = -22 [ 3157.699482][ T1842] random: crng reseeded on system resumption [ 3158.002691][ T1842] Restarting kernel threads ... [ 3158.153269][ T1842] Done restarting kernel threads. [ 3160.408194][ T1860] loop6: detected capacity change from 0 to 2048 [ 3160.526158][ T1860] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 3160.606638][ T1867] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3161.515579][ T1877] loop3: detected capacity change from 0 to 1024 [ 3161.772528][ T1881] wlan1 speed is unknown, defaulting to 1000 [ 3162.680722][ T12] hfsplus: b-tree write err: -5, ino 4 [ 3162.937582][ T1889] loop7: detected capacity change from 0 to 4096 [ 3163.036521][ T1889] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512). [ 3163.509698][ T1889] ntfs3(loop7): Failed to load $Extend (-22). [ 3163.516460][ T1889] ntfs3(loop7): Failed to initialize $Extend. [ 3165.249116][ T1917] loop3: detected capacity change from 0 to 16 [ 3165.360595][ T1920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10672'. [ 3165.391965][ T1920] veth0_macvtap: left promiscuous mode [ 3165.414080][T32070] Bluetooth: hci3: command 0x0406 tx timeout [ 3165.422239][ T1917] erofs (device loop3): mounted with root inode @ nid 36. [ 3166.136824][ T1926] netlink: 'syz.3.10674': attribute type 1 has an invalid length. [ 3166.151034][ T1926] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 3166.986255][T25515] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 3167.212733][T25515] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 3167.221306][T25515] usb 4-1: config 0 has no interface number 0 [ 3167.284865][T25515] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 3167.294716][T25515] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3167.303335][T25515] usb 4-1: Product: syz [ 3167.307833][T25515] usb 4-1: Manufacturer: syz [ 3167.313047][T25515] usb 4-1: SerialNumber: syz [ 3167.353934][ T1937] loop7: detected capacity change from 0 to 512 [ 3167.395149][T25515] usb 4-1: config 0 descriptor?? [ 3167.475382][ T1937] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.10680: casefold flag without casefold feature [ 3167.524991][ T1937] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.10680: couldn't read orphan inode 15 (err -117) [ 3167.610506][ T1937] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3167.654105][T25515] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 3167.674784][T25515] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 3167.695068][T25515] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 3167.705548][T25515] usb 4-1: media controller created [ 3167.778942][T25515] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3167.846370][ T1937] EXT4-fs error (device loop7): ext4_add_entry:2417: inode #2: comm syz.7.10680: Directory hole found for htree leaf block 0 [ 3168.473980][T31267] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3168.944182][T25515] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 3169.367126][ T1951] loop6: detected capacity change from 0 to 512 [ 3169.647712][ T1951] EXT4-fs (loop6): 1 orphan inode deleted [ 3169.656309][ T1951] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3169.670860][ T3652] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 3169.681484][ T3652] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:15: Failed to release dquot type 1 [ 3169.739290][ T1951] ext4 filesystem being mounted at /1231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3169.744932][T25515] usb 4-1: USB disconnect, device number 28 [ 3170.209982][ T1951] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3170.442990][T21905] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 3170.661929][T21905] usb 4-1: config 0 has no interfaces? [ 3170.667890][T21905] usb 4-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 3170.680517][T21905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3170.699575][ T1969] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10692'. [ 3170.765839][T21905] usb 4-1: config 0 descriptor?? [ 3171.096296][ T1963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3171.106886][ T1963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3171.142632][T21905] usb 4-1: USB disconnect, device number 29 [ 3171.261952][ T1971] loop0: detected capacity change from 0 to 1024 [ 3171.300775][ T1971] EXT4-fs: Ignoring removed nobh option [ 3171.310690][ T1971] EXT4-fs: Ignoring removed bh option [ 3171.505012][ T1971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3171.620241][ T1979] loop7: detected capacity change from 0 to 512 [ 3171.653923][T25515] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 3171.695296][ T1979] EXT4-fs: Ignoring removed orlov option [ 3171.729219][ T1979] EXT4-fs error (device loop7): ext4_iget_extra_inode:5035: inode #15: comm syz.7.10695: corrupted in-inode xattr: invalid ea_ino [ 3171.765316][ T1979] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.10695: couldn't read orphan inode 15 (err -117) [ 3171.795054][ T1979] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3171.865457][ T1979] EXT4-fs (loop7): shut down requested (1) [ 3171.867717][T25515] usb 4-1: Using ep0 maxpacket: 8 [ 3171.909199][T25515] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 3171.917779][T25515] usb 4-1: config 0 has no interface number 0 [ 3171.924926][T25515] usb 4-1: config 0 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3171.932652][ T1971] EXT4-fs (loop0): changing journal_checksum during remount not supported; ignoring [ 3171.935028][T25515] usb 4-1: config 0 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 3171.954870][T25515] usb 4-1: config 0 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3171.967701][T25515] usb 4-1: config 0 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3171.978774][T25515] usb 4-1: config 0 interface 1 has no altsetting 0 [ 3171.990923][T25515] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 3172.001821][T25515] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3172.043120][ T1971] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 3172.237046][T25515] usb 4-1: config 0 descriptor?? [ 3172.278479][T31267] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3172.582707][T21905] usb 4-1: USB disconnect, device number 30 [ 3172.679888][T27477] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3172.867704][ T1988] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10698'. [ 3173.393456][ T1993] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10701'. [ 3174.185311][ T2004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10707'. [ 3175.074592][ T2013] loop7: detected capacity change from 0 to 256 [ 3175.118739][ T2013] MINIX-fs: mounting file system with errors, running fsck is recommended [ 3175.403909][ T2019] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10713'. [ 3175.413562][ T2019] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10713'. [ 3175.445551][ T2019] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3175.454935][ T2019] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3175.469695][ T2019] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3175.481719][ T2019] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3176.139513][ T2028] loop7: detected capacity change from 0 to 256 [ 3176.192678][ T2028] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 3176.204034][ T2028] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 3176.428452][ T2028] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 3176.847652][ T2027] loop9: detected capacity change from 0 to 4096 [ 3178.697659][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 3178.704642][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 3180.875402][ T2074] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3181.119575][ T2074] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3181.298558][ T2074] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3181.445286][ T2074] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3181.835766][ T2074] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3181.863318][ T2074] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3181.894823][ T2074] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3181.928099][ T2074] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 crond[5526]: time disparity of 69 minutes detected [ 3183.616039][ T2103] loop9: detected capacity change from 0 to 1024 [ 3183.773791][ T2103] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3183.804146][ T2107] misc userio: Begin command sent, but we're already running [ 3184.129249][ T498] EXT4-fs error (device loop9): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size [ 3184.159429][ T498] EXT4-fs error (device loop9): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size [ 3184.231779][ T498] EXT4-fs error (device loop9): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size [ 3184.254886][ T498] EXT4-fs error (device loop9): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size [ 3184.269516][ T498] EXT4-fs error (device loop9): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size [ 3184.298774][ T2113] loop0: detected capacity change from 0 to 512 [ 3184.324773][ T2112] wlan1 speed is unknown, defaulting to 1000 [ 3184.344522][ T498] EXT4-fs error (device loop9): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size [ 3184.400857][ T498] EXT4-fs error (device loop9): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size [ 3184.493383][ T498] EXT4-fs error (device loop9): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size [ 3184.530733][ T498] EXT4-fs error (device loop9): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size [ 3184.582222][ T498] EXT4-fs error (device loop9): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size [ 3184.592943][ T2113] EXT4-fs (loop0): 1 orphan inode deleted [ 3184.595580][ T2113] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3184.812866][ T2113] EXT4-fs error (device loop0): ext4_add_entry:2417: inode #2: comm syz.0.10754: Directory hole found for htree leaf block 0 [ 3184.850479][ T2113] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.10754: Directory hole found for htree leaf block 0 [ 3184.869132][ T2119] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 3184.876642][ T2119] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 3185.363564][T27477] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3186.404949][ T2132] loop3: detected capacity change from 0 to 64 [ 3186.490269][ T498] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3186.533666][T11226] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3186.668485][T11226] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3186.741483][ T2134] loop7: detected capacity change from 0 to 64 [ 3186.814021][T11226] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3186.911224][ T2134] hfs: request for non-existent node 131072 in B*Tree [ 3186.919001][ T2134] hfs: request for non-existent node 131072 in B*Tree [ 3186.957883][T11226] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3187.403078][T11226] bridge_slave_1: left allmulticast mode [ 3187.409192][T11226] bridge_slave_1: left promiscuous mode [ 3187.416493][T11226] bridge0: port 2(bridge_slave_1) entered disabled state [ 3187.466541][T11226] bridge_slave_0: left allmulticast mode [ 3187.473882][T11226] bridge_slave_0: left promiscuous mode [ 3187.480652][T11226] bridge0: port 1(bridge_slave_0) entered disabled state [ 3187.606924][ T2139] input: syz0 as /devices/virtual/input/input59 [ 3188.268217][T11226] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3188.338466][T11226] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3188.375662][T11226] bond0 (unregistering): Released all slaves [ 3188.945848][T11226] hsr_slave_0: left promiscuous mode [ 3188.972962][T11226] hsr_slave_1: left promiscuous mode [ 3188.986880][T11226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3188.997310][T11226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3189.014940][T11226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3189.022977][T11226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3189.081838][T11226] veth1_macvtap: left promiscuous mode [ 3189.093179][T11226] veth0_macvtap: left promiscuous mode [ 3189.099183][T11226] veth1_vlan: left promiscuous mode [ 3189.105117][T11226] veth0_vlan: left promiscuous mode [ 3190.026834][T11226] team0 (unregistering): Port device team_slave_1 removed [ 3190.150856][T11226] team0 (unregistering): Port device team_slave_0 removed [ 3191.186592][T32070] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3191.243645][T32070] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3191.265451][T32070] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3191.292809][T32070] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3191.310045][T32070] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3191.325555][ T2157] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10773'. [ 3191.630889][ T2154] wlan1 speed is unknown, defaulting to 1000 [ 3192.171539][ T2160] loop0: detected capacity change from 0 to 4096 [ 3192.242886][ T2160] NILFS (loop0): invalid segment: Checksum error in segment payload [ 3192.251251][ T2160] NILFS (loop0): trying rollback from an earlier position [ 3192.306903][ T2169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3192.349423][ T2160] NILFS (loop0): recovery complete [ 3192.366745][ T2171] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3192.754447][ T2176] bridge0: port 2(bridge_slave_1) entered disabled state [ 3192.764901][ T2176] bridge0: port 1(ÿÿÿÿ) entered disabled state [ 3192.923084][ T2154] chnl_net:caif_netlink_parms(): no params data found [ 3193.562475][T32070] Bluetooth: hci3: command tx timeout [ 3194.309852][ T2154] bridge0: port 1(bridge_slave_0) entered blocking state [ 3194.317866][ T2154] bridge0: port 1(bridge_slave_0) entered disabled state [ 3194.326091][ T2154] bridge_slave_0: entered allmulticast mode [ 3194.336387][ T2154] bridge_slave_0: entered promiscuous mode [ 3194.417294][ T2154] bridge0: port 2(bridge_slave_1) entered blocking state [ 3194.425434][ T2154] bridge0: port 2(bridge_slave_1) entered disabled state [ 3194.435961][ T2154] bridge_slave_1: entered allmulticast mode [ 3194.445993][ T2154] bridge_slave_1: entered promiscuous mode [ 3194.839319][ T2154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3194.941335][ T2154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3195.088847][ T2154] team0: Port device team_slave_0 added [ 3195.134396][T25515] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 3195.169497][ T2154] team0: Port device team_slave_1 added [ 3195.333138][T25515] usb 4-1: Using ep0 maxpacket: 32 [ 3195.359067][T25515] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 3195.385277][T25515] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 3195.395232][T25515] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 3195.404043][T25515] usb 4-1: Product: syz [ 3195.411565][T25515] usb 4-1: Manufacturer: syz [ 3195.417495][T25515] usb 4-1: SerialNumber: syz [ 3195.447126][ T2154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3195.454830][ T2154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3195.481565][ T2154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3195.567719][T25515] usb 4-1: config 0 descriptor?? [ 3195.596290][ T2199] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 3195.633045][T32070] Bluetooth: hci3: command tx timeout [ 3195.693721][T25515] hub 4-1:0.0: bad descriptor, ignoring hub [ 3195.700121][T25515] hub 4-1:0.0: probe with driver hub failed with error -5 [ 3195.703422][ T2154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3195.721037][ T2154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3195.753984][ T2154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3195.985574][ T2205] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10791'. [ 3196.054834][ T2154] hsr_slave_0: entered promiscuous mode [ 3196.065985][ T2154] hsr_slave_1: entered promiscuous mode [ 3196.078096][ T2154] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3196.086761][ T2154] Cannot create hsr debugfs directory [ 3196.095127][T21905] usb 4-1: USB disconnect, device number 31 [ 3196.461082][T25515] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 3196.676012][ T2211] loop6: detected capacity change from 0 to 256 [ 3196.693335][T25515] usb 4-1: Using ep0 maxpacket: 32 [ 3196.723274][T25515] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 3196.801052][T25515] usb 4-1: string descriptor 0 read error: -22 [ 3196.808396][T25515] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 3196.818253][T25515] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 3196.954909][T25515] usb 4-1: config 0 descriptor?? [ 3196.967435][ T2199] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3197.006268][T25515] hub 4-1:0.0: bad descriptor, ignoring hub [ 3197.013167][T25515] hub 4-1:0.0: probe with driver hub failed with error -5 [ 3197.333104][T21905] usb 4-1: USB disconnect, device number 32 [ 3197.712671][T32070] Bluetooth: hci3: command tx timeout [ 3197.863556][ T2221] loop0: detected capacity change from 0 to 2048 [ 3197.887565][ T2154] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3197.974205][ T2154] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3197.974921][ T2221] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 3198.065725][ T2154] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3198.103193][ T2221] syz.0.10799: attempt to access beyond end of device [ 3198.103193][ T2221] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 3198.126338][ T2222] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3198.179530][ T2154] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3198.284541][ T2225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3198.293970][ T2225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3198.351676][ T2225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3198.363053][ T2225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3198.373542][ T2225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3198.495209][ T2225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3198.506543][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3198.554073][ T2230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3198.595091][ T2223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3199.111342][ T2234] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10804'. [ 3199.521891][ T2154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3199.795342][ T2154] 8021q: adding VLAN 0 to HW filter on device team0 [ 3199.824925][T32070] Bluetooth: hci3: command tx timeout [ 3199.865934][T11227] bridge0: port 1(bridge_slave_0) entered blocking state [ 3199.873653][T11227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3199.960728][T11227] bridge0: port 2(bridge_slave_1) entered blocking state [ 3199.968507][T11227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3200.276945][ T2242] loop7: detected capacity change from 0 to 128 [ 3200.415291][ T2242] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 3200.511633][ T2242] ext4 filesystem being mounted at /266/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 3200.966437][T31267] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 3201.549200][ T2260] loop6: detected capacity change from 0 to 64 [ 3202.255053][ T2265] loop7: detected capacity change from 0 to 256 [ 3202.338230][ T2154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3202.466120][ T2267] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10816'. [ 3202.668420][ T2265] FAT-fs (loop7): Directory bread(block 64) failed [ 3202.675925][ T2265] FAT-fs (loop7): Directory bread(block 65) failed [ 3202.686657][ T2265] FAT-fs (loop7): Directory bread(block 66) failed [ 3202.694747][ T2265] FAT-fs (loop7): Directory bread(block 67) failed [ 3202.699107][ T2270] loop6: detected capacity change from 0 to 128 [ 3202.701648][ T2265] FAT-fs (loop7): Directory bread(block 68) failed [ 3202.719213][ T2265] FAT-fs (loop7): Directory bread(block 69) failed [ 3202.726873][ T2265] FAT-fs (loop7): Directory bread(block 70) failed [ 3202.733936][ T2265] FAT-fs (loop7): Directory bread(block 71) failed [ 3202.740931][ T2265] FAT-fs (loop7): Directory bread(block 72) failed [ 3202.748000][ T2265] FAT-fs (loop7): Directory bread(block 73) failed [ 3202.930006][ T30] audit: type=1800 audit(2000004456.485:457): pid=2270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.10817" name="bus" dev="loop6" ino=1049326 res=0 errno=0 [ 3203.066130][ T2154] veth0_vlan: entered promiscuous mode [ 3203.205310][ T2154] veth1_vlan: entered promiscuous mode [ 3203.628347][ T2154] veth0_macvtap: entered promiscuous mode [ 3203.721399][ T2154] veth1_macvtap: entered promiscuous mode [ 3203.960199][ T2154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3204.087092][ T2154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3204.183841][ T2154] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3204.193389][ T2154] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3204.202635][ T2154] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3204.211686][ T2154] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3206.541667][ T2310] loop3: detected capacity change from 0 to 256 [ 3206.613920][ T2310] exfat: Bad value for 'uid' [ 3206.618833][ T2310] exfat: Bad value for 'uid' [ 3207.741178][ T2327] loop0: detected capacity change from 0 to 128 [ 3210.024837][ T2353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10848'. [ 3210.967700][ T2364] loop6: detected capacity change from 0 to 8 [ 3211.092989][ T2364] squashfs image failed sanity check [ 3211.205214][ T30] audit: type=1804 audit(2000004464.665:458): pid=2367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.10853" name="/newroot/617/cgroup.controllers" dev="tmpfs" ino=3214 res=1 errno=0 [ 3211.228621][ T30] audit: type=1800 audit(2000004464.665:459): pid=2367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10853" name="cgroup.controllers" dev="tmpfs" ino=3214 res=0 errno=0 [ 3211.251891][ T30] audit: type=1800 audit(2000004464.745:460): pid=2367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10853" name="cgroup.controllers" dev="tmpfs" ino=3214 res=0 errno=0 [ 3211.639814][ T8477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3211.651187][ T8477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3211.904656][ T2369] netlink: 'syz.7.10854': attribute type 2 has an invalid length. [ 3211.970922][T11226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3211.979222][T11226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3212.143034][ T2375] loop6: detected capacity change from 0 to 164 [ 3212.768128][ T2380] netlink: 32 bytes leftover after parsing attributes in process `syz.7.10858'. [ 3212.799348][ T2381] loop3: detected capacity change from 0 to 512 [ 3212.858497][ T2381] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 3213.017701][ T2381] EXT4-fs (loop3): 1 truncate cleaned up [ 3213.036374][ T2381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3213.626076][T32079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3214.309330][ T2408] loop7: detected capacity change from 0 to 256 [ 3214.404439][ T2405] loop1: detected capacity change from 0 to 2048 [ 3214.435292][ T2405] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 3214.628579][ T2410] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3214.914807][ T2413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10870'. [ 3215.756863][ T2420] loop6: detected capacity change from 0 to 2048 [ 3215.806828][ T2424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10875'. [ 3215.954873][ T2420] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3216.326772][ T2427] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10876'. [ 3217.383516][ T2445] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10882'. [ 3217.659653][ T2453] loop6: detected capacity change from 0 to 256 [ 3217.783114][ T30] audit: type=1326 audit(2000004471.315:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2452 comm="syz.7.10885" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 3217.806506][ T30] audit: type=1326 audit(2000004471.315:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2452 comm="syz.7.10885" exe="/root/syz-executor" sig=0 arch=40000003 syscall=52 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 3217.829792][ T30] audit: type=1326 audit(2000004471.325:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2452 comm="syz.7.10885" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 3217.979148][ T2453] FAT-fs (loop6): Directory bread(block 64) failed [ 3217.989196][ T2453] FAT-fs (loop6): Directory bread(block 65) failed [ 3217.996420][ T2453] FAT-fs (loop6): Directory bread(block 66) failed [ 3218.003493][ T2453] FAT-fs (loop6): Directory bread(block 67) failed [ 3218.010498][ T2453] FAT-fs (loop6): Directory bread(block 68) failed [ 3218.020372][ T2453] FAT-fs (loop6): Directory bread(block 69) failed [ 3218.027544][ T2453] FAT-fs (loop6): Directory bread(block 70) failed [ 3218.035450][ T2453] FAT-fs (loop6): Directory bread(block 71) failed [ 3218.049225][ T2453] FAT-fs (loop6): Directory bread(block 72) failed [ 3218.057332][ T2453] FAT-fs (loop6): Directory bread(block 73) failed [ 3218.272999][ T2456] loop3: detected capacity change from 0 to 512 [ 3218.422931][ T2456] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.10886: bg 0: block 248: padding at end of block bitmap is not set [ 3218.459760][ T2456] Quota error (device loop3): write_blk: dquota write failed [ 3218.468084][ T2456] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 3218.482446][ T2456] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.10886: Failed to acquire dquot type 1 [ 3218.508725][ T2456] EXT4-fs (loop3): 1 truncate cleaned up [ 3218.517168][ T2456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3218.530830][ T2456] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3218.880831][T32079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3219.824152][ T2478] loop3: detected capacity change from 0 to 2048 [ 3219.938631][ T2478] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3220.059471][ T30] audit: type=1800 audit(2000004473.615:464): pid=2478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10893" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 3220.095474][ T2478] ------------[ cut here ]------------ [ 3220.101383][ T2478] WARNING: CPU: 1 PID: 2478 at fs/udf/inode.c:677 udf_setsize+0xf1f/0x18f0 [ 3220.115562][ T2478] Modules linked in: [ 3220.119901][ T2478] CPU: 1 UID: 0 PID: 2478 Comm: syz.3.10893 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(undef) [ 3220.133835][ T2478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3220.147889][ T2478] RIP: 0010:udf_setsize+0xf1f/0x18f0 [ 3220.153744][ T2478] Code: 8b 6d a0 4c 8b 65 b8 e9 82 00 00 00 45 85 e4 8b 7d b0 0f 44 7d 98 e8 c0 a9 63 fe 4d 39 f7 0f 8d 6e f9 ff ff e8 d2 c7 c0 fd 90 <0f> 0b 90 e9 25 fc ff ff 8b 7d 94 e8 a1 a9 63 fe 45 85 f6 0f 84 0b [ 3220.176739][ T2478] RSP: 0018:ffff888071193a58 EFLAGS: 00010287 [ 3220.183338][ T2478] RAX: ffffffff8433c79e RBX: 0000000000000000 RCX: 0000000000080000 [ 3220.195336][ T2478] RDX: ffffc9000dc10000 RSI: 0000000000000455 RDI: 0000000000000456 [ 3220.208669][ T2478] RBP: ffff888071193b60 R08: ffffea000000000f R09: 0000000000000000 [ 3220.219699][ T2478] R10: ffff888237b87028 R11: 0000000000000002 R12: 0000000000000000 [ 3220.228841][ T2478] R13: ffff88811a832c18 R14: 0000000000001000 R15: 0000000000000e00 [ 3220.240031][ T2478] FS: 0000000000000000(0000) GS:ffff8881aa984000(0063) knlGS:00000000f510eb40 [ 3220.249442][ T2478] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 3220.256503][ T2478] CR2: 0000000000000000 CR3: 0000000037766000 CR4: 00000000003526f0 [ 3220.268440][ T2478] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3220.276997][ T2478] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3220.285473][ T2478] Call Trace: [ 3220.288982][ T2478] [ 3220.298861][ T2478] ? kmsan_get_metadata+0xfb/0x160 [ 3220.305677][ T2478] udf_setattr+0x5ca/0x880 [ 3220.314471][ T2478] ? __pfx_udf_setattr+0x10/0x10 [ 3220.322651][ T2478] notify_change+0x1993/0x1aa0 [ 3220.327826][ T2478] do_truncate+0x28f/0x310 [ 3220.336056][ T2478] vfs_truncate+0x921/0x9d0 [ 3220.340973][ T2478] do_sys_truncate+0x103/0x240 [ 3220.346362][ T2478] __ia32_compat_sys_truncate+0x77/0xc0 [ 3220.352670][ T2478] ia32_sys_call+0xa11/0x42c0 [ 3220.357667][ T2478] __do_fast_syscall_32+0xb0/0x150 [ 3220.365976][ T2478] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 3220.372337][ T2478] do_fast_syscall_32+0x38/0x80 [ 3220.377518][ T2478] do_SYSENTER_32+0x1f/0x30 [ 3220.382592][ T2478] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3220.389321][ T2478] RIP: 0023:0xf711e539 [ 3220.401211][ T2478] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 3220.422417][ T2478] RSP: 002b:00000000f510e55c EFLAGS: 00000206 ORIG_RAX: 000000000000005c [ 3220.431231][ T2478] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 0000000000000c00 [ 3220.445255][ T2478] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3220.454606][ T2478] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3220.463004][ T2478] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3220.471278][ T2478] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3220.482817][ T2478] [ 3220.486087][ T2478] ---[ end trace 0000000000000000 ]--- [ 3220.797890][ T2477] UDF-fs: warning (device loop3): udf_truncate_tail_extent: Too long extent after EOF in inode 1346: i_size: 3072 lbcount: 4096 extent 6+4096 [ 3222.371279][ T2514] loop7: detected capacity change from 0 to 1024 [ 3223.325993][ T30] audit: type=1326 audit(2000004476.875:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2530 comm="syz.3.10914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 3223.348872][ T30] audit: type=1326 audit(2000004476.885:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2530 comm="syz.3.10914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 3223.374226][ T30] audit: type=1326 audit(2000004476.885:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2530 comm="syz.3.10914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 3223.632856][T11227] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3223.703192][ T30] audit: type=1326 audit(2000004476.965:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2530 comm="syz.3.10914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 3223.728847][ T30] audit: type=1326 audit(2000004476.975:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2530 comm="syz.3.10914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf711e567 code=0x7ffc0000 [ 3223.751654][ T30] audit: type=1326 audit(2000004476.975:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2530 comm="syz.3.10914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 3223.780026][ T30] audit: type=1326 audit(2000004476.985:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2530 comm="syz.3.10914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 3223.808272][ T30] audit: type=1326 audit(2000004476.995:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2530 comm="syz.3.10914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf711e567 code=0x7ffc0000 [ 3223.833172][ T30] audit: type=1326 audit(2000004477.005:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2530 comm="syz.3.10914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 3223.960253][T11227] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3224.172252][T11227] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3224.426759][ T3652] ===================================================== [ 3224.438094][ T3652] BUG: KMSAN: uninit-value in n_tty_receive_buf_standard+0xafd/0x98a0 [ 3224.446860][ T3652] n_tty_receive_buf_standard+0xafd/0x98a0 [ 3224.453060][ T3652] n_tty_receive_buf_common+0x1a68/0x2540 [ 3224.459020][ T3652] n_tty_receive_buf2+0x4c/0x60 [ 3224.467628][ T3652] tty_ldisc_receive_buf+0xc3/0x2c0 [ 3224.473270][ T3652] tty_port_default_receive_buf+0xd7/0x1a0 [ 3224.480065][ T3652] flush_to_ldisc+0x4a0/0xf00 [ 3224.485182][ T3652] process_scheduled_works+0xb8e/0x1d80 [ 3224.494677][ T3652] worker_thread+0xedf/0x1590 [ 3224.499658][ T3652] kthread+0xd5c/0xf00 [ 3224.508174][ T3652] ret_from_fork+0x1e3/0x310 [ 3224.513217][ T3652] ret_from_fork_asm+0x1a/0x30 [ 3224.518258][ T3652] [ 3224.522999][ T3652] Uninit was stored to memory at: [ 3224.528401][ T3652] n_tty_receive_buf_standard+0xaf6/0x98a0 [ 3224.538788][ T3652] n_tty_receive_buf_common+0x1a68/0x2540 [ 3224.545055][ T3652] n_tty_receive_buf2+0x4c/0x60 [ 3224.550164][ T3652] tty_ldisc_receive_buf+0xc3/0x2c0 [ 3224.555835][ T3652] tty_port_default_receive_buf+0xd7/0x1a0 [ 3224.561963][ T3652] flush_to_ldisc+0x4a0/0xf00 [ 3224.570430][ T3652] process_scheduled_works+0xb8e/0x1d80 [ 3224.576481][ T3652] worker_thread+0xedf/0x1590 [ 3224.581456][ T3652] kthread+0xd5c/0xf00 [ 3224.585953][ T3652] ret_from_fork+0x1e3/0x310 [ 3224.593914][ T3652] ret_from_fork_asm+0x1a/0x30 [ 3224.598937][ T3652] [ 3224.601398][ T3652] Uninit was created at: [ 3224.610915][ T3652] __kmalloc_noprof+0x95f/0x1310 [ 3224.617247][ T3652] __tty_buffer_request_room+0x3d4/0x7a0 [ 3224.625350][ T3652] __tty_insert_flip_string_flags+0x157/0x6f0 [ 3224.631725][ T3652] uart_insert_char+0x368/0x930 [ 3224.640390][ T3652] serial8250_read_char+0x1ba/0x670 [ 3224.646032][ T3652] serial8250_handle_irq+0x930/0x1110 [ 3224.651692][ T3652] serial8250_default_handle_irq+0x116/0x2b0 [ 3224.658278][ T3652] serial8250_interrupt+0xcb/0x400 [ 3224.666722][ T3652] __handle_irq_event_percpu+0x11c/0xbf0 [ 3224.672791][ T3652] handle_irq_event+0xe0/0x2a0 [ 3224.677804][ T3652] handle_edge_irq+0x31c/0xc80 [ 3224.683209][ T3652] __common_interrupt+0x9f/0x220 [ 3224.688457][ T3652] common_interrupt+0x4c/0xb0 [ 3224.699757][ T3652] asm_common_interrupt+0x2b/0x40 [ 3224.705924][ T3652] [ 3224.708438][ T3652] CPU: 1 UID: 0 PID: 3652 Comm: kworker/u8:15 Tainted: G W 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(undef) [ 3224.727721][ T3652] Tainted: [W]=WARN [ 3224.731687][ T3652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3224.742768][ T3652] Workqueue: events_unbound flush_to_ldisc [ 3224.748884][ T3652] ===================================================== [ 3224.759964][ T3652] Disabling lock debugging due to kernel taint [ 3224.766666][ T3652] Kernel panic - not syncing: kmsan.panic set ... [ 3224.773262][ T3652] CPU: 1 UID: 0 PID: 3652 Comm: kworker/u8:15 Tainted: G B W 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(undef) [ 3224.787433][ T3652] Tainted: [B]=BAD_PAGE, [W]=WARN [ 3224.792602][ T3652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3224.802851][ T3652] Workqueue: events_unbound flush_to_ldisc [ 3224.808948][ T3652] Call Trace: [ 3224.812361][ T3652] [ 3224.815432][ T3652] __dump_stack+0x26/0x30 [ 3224.820039][ T3652] dump_stack_lvl+0x53/0x270 [ 3224.824885][ T3652] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 3224.830975][ T3652] dump_stack+0x1e/0x25 [ 3224.835385][ T3652] panic+0x4bd/0xd50 [ 3224.839648][ T3652] kmsan_report+0x31c/0x320 [ 3224.844430][ T3652] ? kmsan_get_metadata+0xfb/0x160 [ 3224.849800][ T3652] ? __msan_warning+0x1b/0x30 [ 3224.854733][ T3652] ? n_tty_receive_buf_standard+0xafd/0x98a0 [ 3224.860960][ T3652] ? n_tty_receive_buf_common+0x1a68/0x2540 [ 3224.867117][ T3652] ? n_tty_receive_buf2+0x4c/0x60 [ 3224.872379][ T3652] ? tty_ldisc_receive_buf+0xc3/0x2c0 [ 3224.878062][ T3652] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 3224.884371][ T3652] ? flush_to_ldisc+0x4a0/0xf00 [ 3224.889509][ T3652] ? process_scheduled_works+0xb8e/0x1d80 [ 3224.895537][ T3652] ? worker_thread+0xedf/0x1590 [ 3224.900709][ T3652] ? kthread+0xd5c/0xf00 [ 3224.905187][ T3652] ? ret_from_fork+0x1e3/0x310 [ 3224.910196][ T3652] ? ret_from_fork_asm+0x1a/0x30 [ 3224.915472][ T3652] ? ret_from_fork_asm+0x1a/0x30 [ 3224.920717][ T3652] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 3224.926845][ T3652] ? kmsan_get_metadata+0xfb/0x160 [ 3224.932248][ T3652] ? kmsan_get_metadata+0xfb/0x160 [ 3224.937655][ T3652] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 3224.944291][ T3652] ? kmsan_get_metadata+0x150/0x160 [ 3224.949802][ T3652] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 3224.956047][ T3652] ? n_tty_receive_char+0xfae/0x1440 [ 3224.961632][ T3652] ? __update_load_avg_cfs_rq+0xe9/0x1010 [ 3224.967680][ T3652] ? kmsan_get_metadata+0xfb/0x160 [ 3224.973102][ T3652] __msan_warning+0x1b/0x30 [ 3224.977901][ T3652] n_tty_receive_buf_standard+0xafd/0x98a0 [ 3224.984044][ T3652] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 3224.990696][ T3652] ? do_arch_prctl_64+0x900/0x900 [ 3224.996034][ T3652] ? filter_irq_stacks+0x49/0x190 [ 3225.001298][ T3652] ? kmsan_internal_set_shadow_origin+0x40/0x110 [ 3225.007953][ T3652] n_tty_receive_buf_common+0x1a68/0x2540 [ 3225.014039][ T3652] n_tty_receive_buf2+0x4c/0x60 [ 3225.019142][ T3652] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 3225.024955][ T3652] tty_ldisc_receive_buf+0xc3/0x2c0 [ 3225.030496][ T3652] tty_port_default_receive_buf+0xd7/0x1a0 [ 3225.036658][ T3652] flush_to_ldisc+0x4a0/0xf00 [ 3225.041638][ T3652] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 3225.048422][ T3652] ? __pfx_flush_to_ldisc+0x10/0x10 [ 3225.053953][ T3652] process_scheduled_works+0xb8e/0x1d80 [ 3225.059905][ T3652] worker_thread+0xedf/0x1590 [ 3225.064944][ T3652] kthread+0xd5c/0xf00 [ 3225.069239][ T3652] ? __pfx_worker_thread+0x10/0x10 [ 3225.074668][ T3652] ? __pfx_kthread+0x10/0x10 [ 3225.079551][ T3652] ret_from_fork+0x1e3/0x310 [ 3225.084396][ T3652] ? __pfx_kthread+0x10/0x10 [ 3225.089234][ T3652] ret_from_fork_asm+0x1a/0x30 [ 3225.094306][ T3652] [ 3225.097860][ T3652] Kernel Offset: disabled [ 3225.102292][ T3652] Rebooting in 86400 seconds..