last executing test programs: 20.539421139s ago: executing program 1 (id=225): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="5aee41dea43e63", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='+cpu '], 0xb) 20.295840297s ago: executing program 1 (id=227): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 19.398291375s ago: executing program 1 (id=234): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) 19.227671131s ago: executing program 1 (id=236): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000200)={[{@barrier}, {@barrier_val}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@noauto_da_alloc}, {@quota}, {@quota}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 18.737370276s ago: executing program 1 (id=242): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000812}, 0x4000010) recvmmsg(r1, &(0x7f0000004000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/202, 0xca}, 0x9}], 0x1, 0x22, 0x0) 18.276268481s ago: executing program 1 (id=247): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$eJzs3c9LFG0AB/DHVfHFF8XTy1uXHurUZVDPHZRQkBaKcoMKghHHWnbalZ097EoHO3cJOvYfRMduQfQP+F90k0A8ecqw8dcKXdI08PO5zJf5zjM8zww8c5zNW29eNFaKZCXthMrMQKjMhFDZGQgToRIOrIebb1+9e/3g0eM7s9Xq3P0Y52cXp6ZjjOPXPj95+eH6l86/Dz+OfxoJGxNPN7emv278t3Fl8/vi83oR60VstjoxjUutViddyrO4XC8aSYz38iwtslhvFlm7r1/JW6urvZg2l8dGV9tZUcS02YuNrBc7rdhp92L6LK03Y5IkcWw0cBq19zu7u2Frt3TRs+H8ef+X27FN/Z8Qtte7tW6tPJb9/EJ1bjL+NHw0arvbrQ0e9lNlH/v74TC630+f7A8+LTfKfq+7fbd6YvxIWP7DawcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODySuKhiaOz291ubbDsk1/1ZZpfqM5N7l/Q3w+Fq0PntgwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOJWit9ZI8zxrC78f9h7kXzANQTi7cNE7EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJy//p/YAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFkVvbVGmudZ+6zCt//LGx+rLnqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBaPwIAAP//P3honA==") syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x180c8, &(0x7f0000000580)=ANY=[], 0x1, 0x261, &(0x7f0000000380)="$eJzs3TFrE2EYB/CnadKGLnYWhwMXp6BOrkEqiAEhcoNOBqpLK8J1iU75GH4GP5CDH6NTtxNzMamxKqRN3mvu94NwD/x5yfMmcJfA+969vffh5Pjj2fvy+5fodrNoR0zKMuIwWrEblZ3ZsTWt9+KySQAAt81wOOqn7oH1Kor+qBMR+38k+dckDQEAAAAAAAAAAHBtV63/jwvr/wFgm1n/v/2Koj86mP1++531/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA6F2V5p/zHK3V/AMDNW/X6v7PZNgGAG+T/PwA0j+s/ADTPq9dvXvQHg6NhlnUjzifjfJxXxyp/9nxw9DCbOlyMOh+P8915/qjKs3nciYi8Ewez/PFyPh2/Fw/uV/nP7OnLwVK+H8cbmD8AAAAAAAAAAAAAAAAAAADUQS+bu3J/f6/3t7yqLt0fYGn/fjvutjc2DQAAAAAAAAAAAAAAAAAAALjVzj59Phmdnr4ral58i7W9xa/7Gqw4vFW7zzCe1KKNTRcrf4PNLFr/OQMkPCkBAAAAAAAAAAAAAAAAAEBDLTb9pu4EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANJZPP9/fUVETMpK6ukCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAW+xHAAAA//8EXJFR") write$binfmt_register(0xffffffffffffffff, &(0x7f0000000140)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x62, 0x3a, 'L\xa7\x02\x00\x00\x00]P\x16\x81\x1c?\xa6\xc5\r\x01\x82u4\xe7\xe0?,', 0x3a, '-r):', 0x3a, './file0/file0'}, 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 18.026753899s ago: executing program 32 (id=247): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x180c8, &(0x7f0000000580)=ANY=[], 0x1, 0x261, &(0x7f0000000380)="$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") write$binfmt_register(0xffffffffffffffff, &(0x7f0000000140)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x62, 0x3a, 'L\xa7\x02\x00\x00\x00]P\x16\x81\x1c?\xa6\xc5\r\x01\x82u4\xe7\xe0?,', 0x3a, '-r):', 0x3a, './file0/file0'}, 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 4.499396357s ago: executing program 3 (id=326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000000000)={0x34, r2, 0x1, 0x70bd66, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x63}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4040004) 4.301257644s ago: executing program 3 (id=327): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0xa049, 0x53b3, 0x9, 0x6, 0x1b, "53af0f0b4ecf6c29bf81c173f4a8f5f71eb62f"}) 3.685468563s ago: executing program 2 (id=333): mkdir(&(0x7f0000000040)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.idle_time\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000802, 0x0, 0x0) 3.569704727s ago: executing program 2 (id=334): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) mount(&(0x7f0000000340)=@filename='./cgroup\x00', &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x1a16408, 0x0) 3.436467061s ago: executing program 2 (id=336): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92e", 0xfe}], 0x1}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e2ffb28c599d1681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x1, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "240011000300"/16}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x3, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) 3.343969874s ago: executing program 3 (id=337): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040800}, 0x800) 3.313072605s ago: executing program 2 (id=338): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file2\x00', 0x100080d, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES8, @ANYRES8=0x0, @ANYBLOB="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", @ANYRESOCT, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRESOCT, @ANYRES64, @ANYRES8, @ANYBLOB="3dea3f"], 0xff, 0x209, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r0, 0x100000000, 0xff36, 0x3) syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) 3.1547007s ago: executing program 3 (id=340): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000008000000080000000c000000", @ANYRES32, @ANYBLOB="ffffffff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.973837696s ago: executing program 3 (id=343): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) 2.84842513s ago: executing program 3 (id=345): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f0000001800)=ANY=[@ANYBLOB="71756965742c636f6465706167653d63703836302c696f636861727365743d63703836312c00808fead042bd35dc78f7f06333a5e7165b8271e41aee85e59cbb6c2df3d4e4c16b06c73f2e3b34ac8d4813c9c3d9cee1ddb95d1bbcf504e065b3749a1cbd841e685a558598cf0db10b55885946e678d0a71877037a090000000700848879ef1604cadc1faca3aa22a576750d559c4e124d4cb7293e7393b77286fa8c6dc449eda0a03d342382e84d6d3c29ab95cc923fbe25e134d1c421320a3bffaa17fcd6b5178e322cc47133b3811e3d3bc34998dc7ed029834ad591d9d56c41063d8de2d50a2398e73ff2913a9fe8e954a4e4ca99ceb5737e57193c5f47fd63b16c8b34f256dbac0e5ebd009078df2cb1ca0151ad091adbfee5126d8a59fa5438734bc3e8cc7b7edc10716a0a9b711952cdf96586e06fbace21dc04bdb4a1a2072ce5f72cf02e5256ff74be5e07a5f8d6ec2fa867b2a353bf6ea1b533377803804a49a499d51f1cb71e1cea551598939afe8ff8e8472352e2d5193bc866c000"/396, @ANYRESOCT, @ANYBLOB="b0790a07e1e471aed209036fa5f5ca6bc1ad170371c5e2bd52cf99296e6cdd0882cc4c075a7c4b8ca0d78022160660db09219ebb75dc37499a8272c148662b3afc124ff55a705238d347a5a54bc22fc6e8539f02d1a14d4df87689f2e34e7449a843df2a4e9fbe059f2102bb7efa83db5ef26895be033858456061b9ac965c95f1928de05eb811731601", @ANYBLOB="eb4df9aa36400f1596263ee4e2ba950c3777a4ec31bc2dc78cd48b646ae82f0508a43d2064587fb0b58769e71fc7b7c8e93fa8ec644b9889e92afb0c6a178d5f85790c4047947250a43c67c7b897debc120c19d2b9c218c8a1205fae81bb140f9e9a69c60fd20d07ac3643e470a4bbe559f8b777749dd02b1336813ff11343d09bebc37a1ed9bb9ced4e3264a2ead14b4350c271", @ANYRESHEX=0x0, @ANYBLOB="0affd5ece651e2a4648f9b279d8dc44bc4bd6acc0aa01a3ab56e469d3c338a26ff996b57afbe65c4eb94f6fd4cfbda2af6c85c6e135955ca0640546a2aac7bb02432e45e6d333181ee921f9f26a8ef000000000800000000000000000000000000000000000000000000000000004de9f91aeab66cc8b2197d3c00068324c7b7bd"], 0x1, 0x305, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) 2.818979851s ago: executing program 2 (id=346): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x6, 0xa, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x80, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r1, 0x8}, 0x8) 2.176850691s ago: executing program 2 (id=350): mkdir(&(0x7f0000000080)='./file1\x00', 0x100) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, 0x0, 0x0) 1.775803193s ago: executing program 33 (id=350): mkdir(&(0x7f0000000080)='./file1\x00', 0x100) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, 0x0, 0x0) 1.442542714s ago: executing program 4 (id=357): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'sed\x00', 0x22, 0x660f537f, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4f29, 0x3, 'nq\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0x1, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x23}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.399803696s ago: executing program 0 (id=358): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r1, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) 1.246434281s ago: executing program 0 (id=359): bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x11, 0x4, 0x4, 0x8, 0x800, 0xffffffffffffffff, 0x3}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1}, 0xc) close(r2) 1.243448961s ago: executing program 4 (id=360): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r1, 0x0, 0x0, 'syz1\x00', 0x0}) close(r0) 1.009076528s ago: executing program 4 (id=361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x70, r1, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3f, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac}, 0x0, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}, @NL80211_ATTR_PROBE_RESP={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x70}}, 0x0) 978.995579ms ago: executing program 0 (id=362): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000300)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRESDEC], 0x44, 0x6f7, &(0x7f0000001f80)="$eJzs3U1sHGcZAOB31uu1N5XcbZu0BSHFakQEDSS2l5IgIREqhHyoUCQuvS6J01heu5HtIidCxAUKRzihHDgUIXPoCfWABOKAKGckJK4o90jcIw4smtmZ9f7Y693GP0n6PNJ4vpn5ft55O/Pt7myjDeAza/HtmNyOJBYvvLWVbj/YqTcf7NRXi3JETEVEKaLcXkWyFpF8EnE12kt8Lt2Zd5fsN84bD//0m/P3P6q3t8r5ktUvDWu3qzVkhO18idmImMjXYyrv19/1eHOgv3tjdZ104k4Tdq5IHJy01oDtcZqPcN8CT7p7EROTe+yvRZyKiOn8fUDks0PpmMM7dGPNcgAAAPBkmjiowvOP4lFsxczxhAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPhqT9m4FJvpSK8mwkxe//V/J9qUrlhOMd7isHHP/g5jEFAgAAAAAAAABH4uP8i/uzj+JRbMVMsb+VZN/5v5ZtnM7+PhfvxUYsxXpcjK1oxGZsxnrMR0zOdHVY2Wpsbq7PD7b8daQtW63WvbzlQkTUBlouHMNJAwAAAAAAAMCz6yexGDMnHQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHRLIibaq2w5XZRrUSpHxHREVNJ62xF/KcpPuuqQY389xjgAAADghBQfjWeS/7ULrST7zP9y9rl/Ot6LtdiM5diMZizFjexZQPtTf+mf2/Xmg536aroMdvzt/4wVR9ZjREzE+/uMPJfVONNpsRjfje/HhZiNa7Eey/HDaMRmLMVsVNOTiEYkUau2n17Uijj3jvdqz9a1/tjO9m2/mkVSjZuxnMV2Ma5Xov3YJDuHdMxXu0b7YyWib8T30+wk38qNmKMbXf+9fpU/l8m1nh+xj6NRy858spORuTT3eTZeGJ77Ma+T/pHmo9R5BnV6d5R0s3+kIuc/GCfnp/J1muuf9+b8sI35KK0/EwtRyq++iJd7c377i/df7G385X/97dqt0trKrZsbF47wlB7H7EEVJotCfybqXZl4ZfjVl2eimWZie/RMTPbvmB615dGq5NnIpqIRZ8vvZKVGvNZ1Cb4bN2IpLsdczMeVmItvxELUO1dYupzpyWu5vtqbk+xeKw3Ob8OexJ77UlelXxxQ+XileXmhK6/dM10tO5bvufrLmOu6+l4cfvWN/SqQjv/5vJyO8dPOK86ToCcT+dxcRPfS8Ez8tpX+3Wiurazfatwecbzz+Tq9bT/onZt/N3rU/a/uhyG9XtIZt5xtZTmpFtdLeuylTrS9+ark37i025UGjp3pHKvFTCzH9/a9Uyv5e7jBntrHXuk+9u/dmbOSv78pjvW8y4l3o5m9C+lz4FQNwDE79fqpSvVh9R/VD6s/q96qvjX95tSVqS9UYvLv5T9P/KH0+9I3k9fjw/hxzJx0pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CzYuHN3pdFsLq13CjHdv+dxC5V9xxpeiNKBdXaeG63DqEUMHyvJC5XDPfensVCNvj3FLyw9bs8fR8SQOpXHDj4Z+xobu5Dm4VA6LH44LdvTmhijeblotXedcmxMx0ojKe9xx03t3gVRW2k0/9vqaV6NrlsGeMZd2ly9fWnjzt2vLq823ll6Z2lt4crlK5frX5//2qWby82lufbfk44SOAobd+5OnHQMAAAAAAAAAAAAwHjy//t/81P/Y4byAXUq6xt7j3z2uE8VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeEotvh2T25HE/NzFuXT7wU69mS5FebdmOSJKEZH8KCL5JOJqtJeodXWX7DfOGw+jdP7+R/XdvspF/dKwdqPZzpeYjYiJfH2wqT26Gezveld/258qvKRzhmnCzhWJg5P2/wAAAP//vnbzsA==") syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 747.121116ms ago: executing program 0 (id=363): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x5, 0x4, 0x8, 0xe}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r2}, 0xc) 679.358279ms ago: executing program 4 (id=364): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 399.250697ms ago: executing program 0 (id=365): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x1800010, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b"], 0xb, 0x240, &(0x7f0000000500)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) 382.601448ms ago: executing program 4 (id=366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003080)=ANY=[@ANYBLOB="501a0000210a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a038018013f800c000180060001"], 0x1a50}, 0x1, 0x0, 0x0, 0x805}, 0x8000) 141.711476ms ago: executing program 4 (id=367): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) 0s ago: executing program 0 (id=368): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet_sctp(r1, &(0x7f0000000ec0)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)="a7", 0x1}], 0x1, 0x0, 0x0, 0x14}], 0x1, 0xc804) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0xe5}, 0xc0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.101' (ED25519) to the list of known hosts. [ 54.467720][ T5752] cgroup: Unknown subsys name 'net' [ 54.599044][ T5752] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.945217][ T5752] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.309370][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.345715][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.346966][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.360093][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.361779][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.374956][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.375529][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.389141][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.391091][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.404806][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.404916][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.413051][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 57.418957][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.426536][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.434191][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.446796][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.455366][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.455374][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 57.455694][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.463212][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.472205][ T5770] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.503678][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.514968][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 57.522433][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.859397][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 57.932676][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 57.976972][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 58.075877][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 58.101341][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.108997][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.116469][ T5766] bridge_slave_0: entered allmulticast mode [ 58.123341][ T5766] bridge_slave_0: entered promiscuous mode [ 58.152145][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.160977][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.168483][ T5766] bridge_slave_1: entered allmulticast mode [ 58.176016][ T5766] bridge_slave_1: entered promiscuous mode [ 58.189431][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.196674][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.206057][ T5767] bridge_slave_0: entered allmulticast mode [ 58.212646][ T5767] bridge_slave_0: entered promiscuous mode [ 58.245953][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.253291][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.260374][ T5767] bridge_slave_1: entered allmulticast mode [ 58.267214][ T5767] bridge_slave_1: entered promiscuous mode [ 58.307232][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.318984][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.336731][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.343921][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.351034][ T5768] bridge_slave_0: entered allmulticast mode [ 58.358267][ T5768] bridge_slave_0: entered promiscuous mode [ 58.366096][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.373245][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.380359][ T5768] bridge_slave_1: entered allmulticast mode [ 58.387937][ T5768] bridge_slave_1: entered promiscuous mode [ 58.415482][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.460013][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.474600][ T5766] team0: Port device team_slave_0 added [ 58.482416][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.496163][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.525798][ T5766] team0: Port device team_slave_1 added [ 58.547713][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.557218][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.564590][ T5765] bridge_slave_0: entered allmulticast mode [ 58.571243][ T5765] bridge_slave_0: entered promiscuous mode [ 58.580156][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.587310][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.594881][ T5765] bridge_slave_1: entered allmulticast mode [ 58.601478][ T5765] bridge_slave_1: entered promiscuous mode [ 58.620324][ T5767] team0: Port device team_slave_0 added [ 58.656584][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.663641][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.689589][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.702750][ T5767] team0: Port device team_slave_1 added [ 58.720576][ T5768] team0: Port device team_slave_0 added [ 58.736647][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.743790][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.769802][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.796864][ T5768] team0: Port device team_slave_1 added [ 58.814106][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.826201][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.836941][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.844277][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.870660][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.915524][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.922470][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.949158][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.960697][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.969978][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.996258][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.010026][ T5765] team0: Port device team_slave_0 added [ 59.018665][ T5765] team0: Port device team_slave_1 added [ 59.049081][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.056427][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.082380][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.110059][ T5766] hsr_slave_0: entered promiscuous mode [ 59.116602][ T5766] hsr_slave_1: entered promiscuous mode [ 59.176365][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.185688][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.214335][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.226643][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.234709][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.261731][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.326458][ T5767] hsr_slave_0: entered promiscuous mode [ 59.333717][ T5767] hsr_slave_1: entered promiscuous mode [ 59.339715][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.347874][ T5767] Cannot create hsr debugfs directory [ 59.393860][ T5768] hsr_slave_0: entered promiscuous mode [ 59.400423][ T5768] hsr_slave_1: entered promiscuous mode [ 59.406689][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.414637][ T5768] Cannot create hsr debugfs directory [ 59.493417][ T5776] Bluetooth: hci0: command tx timeout [ 59.502524][ T5765] hsr_slave_0: entered promiscuous mode [ 59.508903][ T5765] hsr_slave_1: entered promiscuous mode [ 59.515636][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.523313][ T5765] Cannot create hsr debugfs directory [ 59.577196][ T5776] Bluetooth: hci2: command tx timeout [ 59.583143][ T5775] Bluetooth: hci3: command tx timeout [ 59.583165][ T5780] Bluetooth: hci1: command tx timeout [ 59.638373][ T5766] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.674249][ T5766] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.683912][ T5766] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.701879][ T5766] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.855741][ T5767] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.871515][ T5767] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.885638][ T5767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.895676][ T5767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.987656][ T5765] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.009958][ T5765] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.020772][ T5765] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.048154][ T5765] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.095268][ T5768] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.112617][ T5768] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.122317][ T5768] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.132227][ T5768] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.149298][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.180733][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.192857][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.200133][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.249090][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.259981][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.267108][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.351471][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.380194][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.387343][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.409454][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.416604][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.428613][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.469443][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.494358][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.501494][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.540699][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.548135][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.568236][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.649495][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.699547][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.706733][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.717794][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.724961][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.805625][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.852142][ T5768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.900951][ T5766] veth0_vlan: entered promiscuous mode [ 60.947806][ T5766] veth1_vlan: entered promiscuous mode [ 61.051650][ T5766] veth0_macvtap: entered promiscuous mode [ 61.075439][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.085959][ T5766] veth1_macvtap: entered promiscuous mode [ 61.098480][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.158638][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.195054][ T5765] veth0_vlan: entered promiscuous mode [ 61.203657][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.231012][ T5765] veth1_vlan: entered promiscuous mode [ 61.247534][ T5766] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.257320][ T5766] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.266049][ T5766] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.274899][ T5766] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.332466][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.362593][ T5767] veth0_vlan: entered promiscuous mode [ 61.385083][ T5767] veth1_vlan: entered promiscuous mode [ 61.405601][ T5765] veth0_macvtap: entered promiscuous mode [ 61.459136][ T5765] veth1_macvtap: entered promiscuous mode [ 61.471516][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.491356][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.542329][ T5768] veth0_vlan: entered promiscuous mode [ 61.556062][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.568546][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.573625][ T5775] Bluetooth: hci0: command tx timeout [ 61.581128][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.598752][ T5767] veth0_macvtap: entered promiscuous mode [ 61.609402][ T5767] veth1_macvtap: entered promiscuous mode [ 61.616125][ T2907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.635554][ T2907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.645810][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.656710][ T5775] Bluetooth: hci3: command tx timeout [ 61.658137][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.672236][ T5775] Bluetooth: hci2: command tx timeout [ 61.672283][ T5775] Bluetooth: hci1: command tx timeout [ 61.692595][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.701743][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.712354][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.724201][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.735607][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.746857][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.755180][ T5768] veth1_vlan: entered promiscuous mode [ 61.774586][ T5765] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.785624][ T5765] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.795757][ T5765] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.804684][ T5765] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.820948][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.832874][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.842690][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.853854][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.865689][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.889864][ T5767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.901262][ T5767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.910357][ T5767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.919696][ T5767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.044322][ T5827] syz.0.1[5827]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 62.058557][ T5827] loop0: detected capacity change from 0 to 128 [ 62.067253][ T5768] veth0_macvtap: entered promiscuous mode [ 62.071944][ T5827] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 62.106895][ T5827] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 62.130583][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.146646][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.161457][ T5768] veth1_macvtap: entered promiscuous mode [ 62.192523][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.209310][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.253084][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.269256][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.313701][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.328367][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.339398][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.351579][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.361711][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.376819][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.389024][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.405461][ T2907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.409705][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.424597][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.432075][ T2907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.439594][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.454002][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.457009][ T5829] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 62.468369][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.501120][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.512394][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.545905][ T5768] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.555038][ T5768] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.564284][ T5768] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.575557][ T5768] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.736546][ T5833] loop2: detected capacity change from 0 to 512 [ 62.768402][ T5833] EXT4-fs: Ignoring removed i_version option [ 62.798129][ T5833] EXT4-fs: Ignoring removed oldalloc option [ 62.821542][ T5833] ext4: Unknown parameter 'dont_measure' [ 62.843598][ T5836] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2'. [ 62.857629][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.877817][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.086529][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.112598][ T5841] loop0: detected capacity change from 0 to 2048 [ 63.128463][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.214580][ T5841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.267374][ T5841] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.371843][ T5841] fs-verity: sha512 using implementation "sha512-avx2" [ 63.433460][ T789] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 63.444249][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.646816][ T789] usb 2-1: Using ep0 maxpacket: 32 [ 63.653434][ T5776] Bluetooth: hci0: command tx timeout [ 63.661733][ T789] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 63.670530][ T789] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 63.681631][ T789] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 63.692923][ T789] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 63.706707][ T789] usb 2-1: config 0 interface 0 has no altsetting 0 [ 63.718382][ T789] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 63.728554][ T789] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 63.738560][ T5776] Bluetooth: hci1: command tx timeout [ 63.744369][ T5775] Bluetooth: hci2: command tx timeout [ 63.744395][ T5780] Bluetooth: hci3: command tx timeout [ 63.757272][ T789] usb 2-1: Product: syz [ 63.761467][ T789] usb 2-1: Manufacturer: syz [ 63.766208][ T789] usb 2-1: SerialNumber: syz [ 63.775628][ T789] usb 2-1: config 0 descriptor?? [ 63.787689][ T789] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 63.800441][ T789] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 63.813486][ T5825] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 64.019431][ T5825] usb 1-1: unable to get BOS descriptor or descriptor too short [ 64.044890][ T5825] usb 1-1: not running at top speed; connect to a high speed hub [ 64.055730][ T5825] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.073852][ T5825] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 64.089522][ T5825] usb 1-1: string descriptor 0 read error: -22 [ 64.096880][ T5825] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 64.106291][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.137194][ T5825] usb 1-1: 0:2 : does not exist [ 64.214746][ T5864] loop2: detected capacity change from 0 to 4096 [ 64.243695][ T5864] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 64.255054][ T5864] ntfs3: loop2: It is recommened to use chkdsk. [ 64.382133][ T789] usb 2-1: USB disconnect, device number 2 [ 64.419290][ T789] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 65.053120][ T5808] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 65.128291][ T5846] IPVS: starting estimator thread 0... [ 65.200322][ T5825] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 65.212008][ T5825] usb 1-1: Warning! Unlikely big volume range (=4294967290), cval->res is probably wrong. [ 65.222663][ T5825] usb 1-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/31136/-4451 [ 65.233063][ T5885] IPVS: using max 19 ests per chain, 45600 per kthread [ 65.238451][ T5808] usb 3-1: Using ep0 maxpacket: 16 [ 65.251005][ T5808] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 65.264253][ T5808] usb 3-1: config 0 has no interface number 0 [ 65.280810][ T5808] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.292011][ T5825] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 65.305643][ T5808] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 65.315170][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.327000][ T5825] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 65.348877][ T5808] usb 3-1: config 0 descriptor?? [ 65.375994][ T5825] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 65.419792][ T5825] usb 1-1: USB disconnect, device number 2 [ 65.705444][ T5898] loop1: detected capacity change from 0 to 512 [ 65.724774][ T5898] EXT4-fs: Ignoring removed bh option [ 65.734342][ T5776] Bluetooth: hci0: command tx timeout [ 65.754551][ T5898] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 65.793599][ T5898] EXT4-fs (loop1): 1 truncate cleaned up [ 65.807144][ T5808] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input2 [ 65.816104][ T5898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.830532][ T5776] Bluetooth: hci3: command tx timeout [ 65.831221][ T5775] Bluetooth: hci1: command tx timeout [ 65.841421][ T5780] Bluetooth: hci2: command tx timeout [ 65.951855][ T5901] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.27: bg 0: block 465: padding at end of block bitmap is not set [ 66.027604][ T5901] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 66.034648][ T5898] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 272 with error 28 [ 66.060029][ T5901] EXT4-fs (loop1): This should not happen!! Data will be lost [ 66.060029][ T5901] [ 66.086451][ T5898] EXT4-fs (loop1): This should not happen!! Data will be lost [ 66.086451][ T5898] [ 66.100707][ T5898] EXT4-fs (loop1): Total free blocks count 0 [ 66.119387][ T5903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.28'. [ 66.128927][ T5901] EXT4-fs (loop1): Total free blocks count 0 [ 66.139649][ T5898] EXT4-fs (loop1): Free/Dirty block details [ 66.145981][ T5901] EXT4-fs (loop1): Free/Dirty block details [ 66.162187][ T5898] EXT4-fs (loop1): free_blocks=0 [ 66.365113][ T5825] usb 3-1: USB disconnect, device number 2 [ 66.380331][ T5909] loop0: detected capacity change from 0 to 2048 [ 66.458541][ T5909] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.641350][ T5909] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.30: bg 0: block 234: padding at end of block bitmap is not set [ 66.679826][ T5909] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1586 with error 28 [ 66.718628][ T5909] EXT4-fs (loop0): This should not happen!! Data will be lost [ 66.718628][ T5909] [ 66.728693][ T5909] EXT4-fs (loop0): Total free blocks count 0 [ 66.734815][ T5909] EXT4-fs (loop0): Free/Dirty block details [ 66.741037][ T5909] EXT4-fs (loop0): free_blocks=0 [ 66.746107][ T5909] EXT4-fs (loop0): dirty_blocks=1600 [ 66.751497][ T5909] EXT4-fs (loop0): Block reservation details [ 66.758182][ T5909] EXT4-fs (loop0): i_reserved_data_blocks=100 [ 66.918141][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.944209][ T5846] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 67.027097][ T5925] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 67.055735][ T5929] loop0: detected capacity change from 0 to 128 [ 67.075135][ T5928] loop2: detected capacity change from 0 to 2048 [ 67.090128][ T5928] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 67.127606][ T5929] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.150579][ T5931] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.162650][ T5846] usb 2-1: Using ep0 maxpacket: 32 [ 67.178616][ T5846] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 67.193602][ T5931] netlink: 'syz.3.39': attribute type 12 has an invalid length. [ 67.205453][ T5846] usb 2-1: config 0 has no interface number 0 [ 67.211594][ T5846] usb 2-1: config 0 interface 184 has no altsetting 0 [ 67.222223][ T5931] netlink: 'syz.3.39': attribute type 29 has an invalid length. [ 67.244147][ T5846] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 67.256448][ T5931] netlink: 148 bytes leftover after parsing attributes in process `syz.3.39'. [ 67.265981][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.290522][ T5846] usb 2-1: Product: syz [ 67.306012][ T5846] usb 2-1: Manufacturer: syz [ 67.327952][ T5846] usb 2-1: SerialNumber: syz [ 67.348342][ T5846] usb 2-1: config 0 descriptor?? [ 67.362033][ T5929] FAT-fs (loop0): error, parent dir link count too low (2) [ 67.391187][ T5846] smsc75xx v1.0.0 [ 67.412742][ T5929] FAT-fs (loop0): Filesystem has been set read-only [ 67.479328][ T5766] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.841043][ T5945] netlink: 56 bytes leftover after parsing attributes in process `syz.0.44'. [ 67.857083][ T5945] Zero length message leads to an empty skb [ 68.072665][ T5936] loop3: detected capacity change from 0 to 32768 [ 68.105525][ T5936] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.42 (5936) [ 68.145219][ T5936] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 68.156104][ T5936] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 68.165978][ T5936] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 68.176451][ T5936] BTRFS info (device loop3): use zstd compression, level 3 [ 68.183940][ T5936] BTRFS info (device loop3): using free space tree [ 68.273206][ T5936] BTRFS info (device loop3): enabling ssd optimizations [ 68.292713][ T5936] BTRFS info (device loop3): auto enabling async discard [ 68.405525][ T27] audit: type=1800 audit(1779239998.331:2): pid=5936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.42" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 68.458197][ T5846] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 68.480403][ T5846] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 68.501485][ T5846] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 68.516141][ T5846] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 68.530345][ T5846] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 68.541736][ T5846] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 68.563440][ T5846] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 68.593682][ T5846] usb 2-1: USB disconnect, device number 3 [ 68.629169][ T5768] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 69.148020][ T5981] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 69.600696][ T6002] loop1: detected capacity change from 0 to 1024 [ 69.612532][ T6004] syz.3.62[6004] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.612756][ T6004] syz.3.62[6004] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.619737][ T6002] hfsplus: invalid catalog max_key_len 715 [ 69.643084][ T5846] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 69.652369][ T6002] hfsplus: failed to load catalog file [ 69.864418][ T5846] usb 3-1: Using ep0 maxpacket: 8 [ 69.890778][ T5846] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 69.900524][ T6009] loop0: detected capacity change from 0 to 1764 [ 69.914837][ T5846] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 69.925604][ T6009] ======================================================= [ 69.925604][ T6009] WARNING: The mand mount option has been deprecated and [ 69.925604][ T6009] and is ignored by this kernel. Remove the mand [ 69.925604][ T6009] option from the mount to silence this warning. [ 69.925604][ T6009] ======================================================= [ 69.942447][ T5846] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 69.991784][ T6014] netlink: 'syz.1.66': attribute type 9 has an invalid length. [ 70.006872][ T6014] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.66'. [ 70.019768][ T5846] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 70.052315][ T5846] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.090749][ T5846] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 70.109712][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.307214][ T6020] syzkaller1: entered promiscuous mode [ 70.317574][ T6020] syzkaller1: entered allmulticast mode [ 70.369002][ T5846] usb 3-1: usb_control_msg returned -32 [ 70.381449][ T6022] loop3: detected capacity change from 0 to 256 [ 70.381929][ T5846] usbtmc 3-1:16.0: can't read capabilities [ 70.447740][ T6022] FAT-fs (loop3): Directory bread(block 64) failed [ 70.467616][ T6022] FAT-fs (loop3): Directory bread(block 65) failed [ 70.486396][ T6022] FAT-fs (loop3): Directory bread(block 66) failed [ 70.495912][ T6022] FAT-fs (loop3): Directory bread(block 67) failed [ 70.504343][ T6022] FAT-fs (loop3): Directory bread(block 68) failed [ 70.511481][ T6022] FAT-fs (loop3): Directory bread(block 69) failed [ 70.525815][ T6022] FAT-fs (loop3): Directory bread(block 70) failed [ 70.532424][ T6022] FAT-fs (loop3): Directory bread(block 71) failed [ 70.539568][ T6022] FAT-fs (loop3): Directory bread(block 72) failed [ 70.551720][ T6022] FAT-fs (loop3): Directory bread(block 73) failed [ 71.012996][ T5846] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 71.214912][ T5846] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.229874][ T5846] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.254607][ T5846] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 71.267508][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 71.288417][ T5846] usb 2-1: SerialNumber: syz [ 71.438308][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.452916][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.513950][ T5846] usb 2-1: 0:2 : does not exist [ 71.540621][ T5846] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 71.577644][ T5846] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 71.601363][ T6039] loop0: detected capacity change from 0 to 256 [ 71.605640][ T5846] usb 2-1: 5:0: failed to get current value for ch 15 (-22) [ 71.653599][ T5846] usb 2-1: USB disconnect, device number 4 [ 71.709673][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 71.984944][ T6041] loop0: detected capacity change from 0 to 4096 [ 71.998013][ T6041] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 72.161303][ T6041] ntfs3: loop0: ino=1e, "file1" ntfs3_write_inode failed, -22. [ 72.382080][ T6045] loop0: detected capacity change from 0 to 512 [ 72.400284][ T5825] usb 3-1: USB disconnect, device number 3 [ 72.403138][ T6044] loop1: detected capacity change from 0 to 1024 [ 72.517839][ T6045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.560838][ T6045] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.604662][ T6045] EXT4-fs warning (device loop0): verify_group_input:151: Cannot add at group 4294967075 (only 1 groups) [ 72.789370][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.160179][ T6066] loop1: detected capacity change from 0 to 4096 [ 73.216881][ T6066] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.270805][ T27] audit: type=1800 audit(1779240003.191:3): pid=6066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.89" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 73.281337][ T6071] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 73.353021][ T6066] fs-verity: sha256 using implementation "sha256-avx2" [ 73.405860][ T6066] fs-verity (loop1, inode 15): Error -22 reading file data [ 73.422417][ T6066] fs-verity (loop1, inode 15): Error -22 building Merkle tree [ 73.540616][ T6076] netlink: 24 bytes leftover after parsing attributes in process `syz.3.92'. [ 73.603279][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.822055][ T6085] loop2: detected capacity change from 0 to 512 [ 73.875562][ T6085] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 74.033153][ T5825] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 74.057879][ T49] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 74.232981][ T5825] usb 2-1: Using ep0 maxpacket: 32 [ 74.239979][ T5825] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 74.250702][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.267397][ T5825] usb 2-1: config 0 descriptor?? [ 74.481316][ T5825] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 74.491969][ T5825] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 74.504399][ T5825] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 74.511769][ T5825] usb 2-1: media controller created [ 74.539613][ T5825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 74.598165][ T6112] loop2: detected capacity change from 0 to 512 [ 74.610146][ T6112] EXT4-fs: Ignoring removed nobh option [ 74.648482][ T6112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.692040][ T5825] az6027: usb out operation failed. (-71) [ 74.699858][ T5825] az6027: usb out operation failed. (-71) [ 74.711606][ T5825] stb0899_attach: Driver disabled by Kconfig [ 74.718060][ T5825] az6027: no front-end attached [ 74.718060][ T5825] [ 74.720416][ T6112] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 74.729574][ T5825] az6027: usb out operation failed. (-71) [ 74.741477][ T5825] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 74.755361][ T5825] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 74.775494][ T5825] dvb-usb: schedule remote query interval to 400 msecs. [ 74.782607][ T5825] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 74.800525][ T5825] usb 2-1: USB disconnect, device number 5 [ 74.852766][ T5825] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 74.865332][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.052336][ T6122] netlink: 20 bytes leftover after parsing attributes in process `syz.0.111'. [ 75.372942][ T5755] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 75.565676][ T6131] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 75.583794][ T5755] usb 1-1: Using ep0 maxpacket: 16 [ 75.594381][ T5755] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.615750][ T5755] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.636873][ T5755] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 75.672867][ T5755] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.719042][ T6126] loop3: detected capacity change from 0 to 40427 [ 75.780068][ T6126] F2FS-fs (loop3): Found nat_bits in checkpoint [ 75.932449][ T6126] F2FS-fs (loop3): Start checkpoint disabled! [ 75.988217][ T6126] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 76.141902][ T5755] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 76.166860][ T23] kernel write not supported for file /input/mice (pid: 23 comm: kworker/1:0) [ 76.250423][ T2907] kworker/u4:8: attempt to access beyond end of device [ 76.250423][ T2907] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 76.271474][ T2907] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 76.286483][ T6148] loop2: detected capacity change from 0 to 128 [ 76.295617][ T6148] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 76.320320][ T6148] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 76.444043][ T5755] usb 1-1: USB disconnect, device number 3 [ 76.598670][ T27] audit: type=1326 audit(1779240006.521:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.2.124" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8e39ce59 code=0x7ffc0000 [ 76.681585][ T27] audit: type=1326 audit(1779240006.561:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.2.124" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8e39ce59 code=0x7ffc0000 [ 76.781857][ T27] audit: type=1326 audit(1779240006.571:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.2.124" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fcd8e39ce59 code=0x7ffc0000 [ 76.812026][ T27] audit: type=1326 audit(1779240006.571:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.2.124" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8e39ce59 code=0x7ffc0000 [ 76.862923][ T27] audit: type=1326 audit(1779240006.571:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.2.124" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fcd8e39ce59 code=0x7ffc0000 [ 76.907222][ T27] audit: type=1326 audit(1779240006.571:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.2.124" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8e39ce59 code=0x7ffc0000 [ 76.992643][ T6158] loop3: detected capacity change from 0 to 1024 [ 77.038186][ T27] audit: type=1326 audit(1779240006.571:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.2.124" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8e39ce59 code=0x7ffc0000 [ 77.142994][ T27] audit: type=1326 audit(1779240006.571:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.2.124" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fcd8e39ce59 code=0x7ffc0000 [ 77.169066][ T6158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 77.310456][ T27] audit: type=1326 audit(1779240006.581:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.2.124" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8e39ce59 code=0x7ffc0000 [ 77.359201][ T27] audit: type=1326 audit(1779240006.581:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.2.124" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8e39ce59 code=0x7ffc0000 [ 77.405427][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 77.434829][ T6171] netlink: 'syz.1.131': attribute type 1 has an invalid length. [ 77.483050][ T6171] netlink: 'syz.1.131': attribute type 2 has an invalid length. [ 77.724592][ T5755] psmouse serio2: Failed to reset mouse on : -5 [ 77.841945][ T6185] loop1: detected capacity change from 0 to 1024 [ 77.954909][ T5806] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 77.970415][ T6188] loop3: detected capacity change from 0 to 128 [ 78.002105][ T49] hfsplus: b-tree write err: -5, ino 25 [ 78.011377][ T49] hfsplus: b-tree write err: -5, ino 4 [ 78.017661][ T49] hfsplus: b-tree write err: -5, ino 2 [ 78.020294][ T6188] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.024692][ T49] hfsplus: b-tree write err: -5, ino 26 [ 78.041244][ T6188] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 78.170917][ T6191] loop1: detected capacity change from 0 to 4096 [ 78.177551][ T5806] usb 1-1: Using ep0 maxpacket: 32 [ 78.185237][ T5806] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 78.190938][ T6188] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.139: Logical block already allocated [ 78.193726][ T5806] usb 1-1: config 0 has no interface number 0 [ 78.219715][ T5806] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 78.233221][ T5806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.241788][ T5806] usb 1-1: Product: syz [ 78.247222][ T5806] usb 1-1: Manufacturer: syz [ 78.251909][ T5806] usb 1-1: SerialNumber: syz [ 78.261526][ T6192] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.286568][ T5806] usb 1-1: config 0 descriptor?? [ 78.305747][ T5806] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 78.320065][ T5768] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.515581][ T5806] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 78.566970][ T5806] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 78.827594][ T6200] loop3: detected capacity change from 0 to 4096 [ 78.847371][ T6200] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 78.917761][ T6200] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 78.927747][ T6200] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 78.999527][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 78.999849][ T23] usb 1-1: USB disconnect, device number 4 [ 79.043315][ T23] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 79.045349][ T6204] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 79.072185][ T23] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 79.119680][ T23] quatech2 1-1:0.51: device disconnected [ 79.260507][ T6208] netlink: 'syz.3.148': attribute type 15 has an invalid length. [ 79.271828][ T6208] netlink: 'syz.3.148': attribute type 15 has an invalid length. [ 79.378838][ T6213] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 79.430066][ T6215] netlink: 'syz.3.151': attribute type 20 has an invalid length. [ 79.562244][ T6219] mmap: syz.3.153 (6219) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 80.115386][ T6240] loop0: detected capacity change from 0 to 512 [ 80.145171][ T6240] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.158050][ T6240] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.308554][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.726487][ T6261] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 80.872894][ T789] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 81.012641][ T6274] syzkaller1: entered promiscuous mode [ 81.022152][ T6274] syzkaller1: entered allmulticast mode [ 81.065356][ T6276] loop3: detected capacity change from 0 to 1024 [ 81.077682][ T789] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 81.086605][ T789] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 81.096646][ T6276] EXT4-fs: Ignoring removed bh option [ 81.108640][ T789] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 81.119487][ T789] usb 1-1: config 220 has no interface number 2 [ 81.127187][ T789] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 81.140864][ T789] usb 1-1: config 220 interface 0 has no altsetting 0 [ 81.147912][ T789] usb 1-1: config 220 interface 76 has no altsetting 0 [ 81.155270][ T789] usb 1-1: config 220 interface 1 has no altsetting 0 [ 81.163789][ T6276] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.177097][ T6276] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.190152][ T789] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 81.205096][ T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.222904][ T789] usb 1-1: Product: syz [ 81.252736][ T789] usb 1-1: Manufacturer: syz [ 81.266553][ T789] usb 1-1: SerialNumber: syz [ 81.297558][ T6276] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: comm syz.3.179: lblock 0 mapped to illegal pblock 0 (length 1) [ 81.346317][ T6283] Bluetooth: MGMT ver 1.22 [ 81.351650][ T6276] EXT4-fs (loop3): Remounting filesystem read-only [ 81.351670][ T6283] Bluetooth: hci1: unsupported parameter 65529 [ 81.364597][ T6283] Bluetooth: hci1: invalid length 0, exp 2 for type 5 [ 81.393617][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 81.506098][ T789] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 81.512625][ T789] usb 1-1: No valid video chain found. [ 81.520829][ T789] usb 1-1: selecting invalid altsetting 0 [ 81.536378][ T5755] misc userio: Buffer overflowed, userio client isn't keeping up [ 81.550941][ T789] usb 1-1: selecting invalid altsetting 0 [ 81.557529][ T789] usbtest: probe of 1-1:220.1 failed with error -22 [ 81.574940][ T789] usb 1-1: USB disconnect, device number 5 [ 81.672019][ T42] cfg80211: failed to load regulatory.db [ 82.255745][ T6302] netlink: 'syz.0.190': attribute type 10 has an invalid length. [ 82.296935][ T6302] team0: Port device netdevsim0 added [ 82.315292][ T6303] netlink: 'syz.0.190': attribute type 10 has an invalid length. [ 82.346212][ T6303] team0: Port device netdevsim0 removed [ 82.356921][ T6303] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 82.631278][ T5755] input: PS/2 Generic Mouse as /devices/serio2/input/input6 [ 82.726938][ T6318] loop0: detected capacity change from 0 to 512 [ 82.734655][ T6318] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.758240][ T6318] EXT4-fs error (device loop0): ext4_iget_extra_inode:4739: inode #15: comm syz.0.197: corrupted in-inode xattr: e_value size too large [ 82.784638][ T6318] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.197: couldn't read orphan inode 15 (err -117) [ 82.785136][ T5808] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.823593][ T6318] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.863742][ T5755] psmouse serio2: Failed to enable mouse on [ 82.916730][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.053394][ T5808] usb 4-1: Using ep0 maxpacket: 32 [ 83.089489][ T5808] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 83.100253][ T6329] loop2: detected capacity change from 0 to 4096 [ 83.116491][ T5808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.122599][ T6329] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.134246][ T5808] usb 4-1: Product: syz [ 83.146131][ T5808] usb 4-1: Manufacturer: syz [ 83.166318][ T6331] loop0: detected capacity change from 0 to 2048 [ 83.167689][ T5808] usb 4-1: SerialNumber: syz [ 83.173813][ T6329] EXT4-fs (loop2): Test dummy encryption mode enabled [ 83.194735][ T5808] usb 4-1: config 0 descriptor?? [ 83.225444][ T6333] warning: `syz.1.203' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.236864][ T6331] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.249997][ T6329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.439826][ T5808] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 002 [ 83.497346][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.672916][ T5755] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 83.704115][ T789] usb 4-1: USB disconnect, device number 2 [ 83.789975][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.799520][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.873028][ T5755] usb 2-1: Using ep0 maxpacket: 8 [ 83.881224][ T5755] usb 2-1: unable to get BOS descriptor or descriptor too short [ 83.900589][ T5755] usb 2-1: config 140 has an invalid interface number: 182 but max is 1 [ 83.913662][ T5755] usb 2-1: config 140 has no interface number 1 [ 83.920006][ T5755] usb 2-1: config 140 interface 182 has no altsetting 0 [ 83.936117][ T5755] usb 2-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 83.945288][ T5755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.953337][ T5755] usb 2-1: Product: syz [ 83.957670][ T5755] usb 2-1: Manufacturer: syz [ 83.962276][ T5755] usb 2-1: SerialNumber: syz [ 84.187252][ T5755] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 84.581154][ T6356] loop2: detected capacity change from 0 to 40427 [ 84.591730][ T6356] F2FS-fs (loop2): Corrupted extension count (327717 + 1 > 64) [ 84.612523][ T6356] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 84.625400][ T6356] F2FS-fs (loop2): invalid crc value [ 84.635458][ T6356] F2FS-fs (loop2): Found nat_bits in checkpoint [ 84.701314][ T6356] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 84.721361][ T6356] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 84.769684][ T6356] syz.2.213: attempt to access beyond end of device [ 84.769684][ T6356] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 84.811138][ T5767] syz-executor: attempt to access beyond end of device [ 84.811138][ T5767] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 84.828403][ T5767] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 84.982992][ T789] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 85.085660][ T5755] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 85.172687][ T6370] loop2: detected capacity change from 0 to 2048 [ 85.193001][ T789] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 85.211341][ T789] usb 1-1: config 0 has no interface number 0 [ 85.230528][ T789] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 85.248328][ T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.251907][ T6373] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.269744][ T789] usb 1-1: Product: syz [ 85.287756][ T789] usb 1-1: Manufacturer: syz [ 85.292393][ T789] usb 1-1: SerialNumber: syz [ 85.319315][ T5755] usb 2-1: unable to get BOS descriptor or descriptor too short [ 85.340180][ T5755] usb 2-1: device firmware changed [ 85.353398][ T789] usb 1-1: config 0 descriptor?? [ 85.369379][ T5755] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 85.378801][ T789] usb 1-1: selecting invalid altsetting 1 [ 85.396226][ T789] dvb_ttusb_budget: ttusb_init_controller: error [ 85.402964][ T5755] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 85.414821][ T23] usb 2-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 85.433390][ T789] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 85.444908][ T5755] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 85.455186][ T23] usb 2-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 85.465542][ T6373] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 85.468579][ T5755] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 85.482150][ T6373] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 85.488405][ T5755] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 85.512607][ T5755] usb 2-1: USB disconnect, device number 6 [ 85.517674][ T6373] Remounting filesystem read-only [ 85.530493][ T5755] usb 2-1: [ueagle-atm] ADSL device removed [ 85.536153][ T12] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 85.572185][ T12] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 85.582003][ T789] DVB: Unable to find symbol stv0299_attach() [ 85.602898][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 85.613040][ T5808] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.624544][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 85.647465][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 85.657560][ T12] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 85.664784][ T12] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 85.672176][ T12] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 85.672247][ T789] DVB: Unable to find symbol tda8083_attach() [ 85.680604][ T12] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 85.686124][ T789] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 85.705445][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 85.728990][ T789] usb 1-1: USB disconnect, device number 6 [ 85.739011][ T12] NILFS (loop2): discard dirty page: offset=65536, ino=3 [ 85.748390][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 85.758199][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 85.774624][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 85.782646][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 85.795890][ T12] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 85.804195][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 85.808666][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.815387][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 85.836875][ T12] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 85.846314][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 85.864279][ T12] NILFS (loop2): discard dirty page: offset=0, ino=18 [ 85.871116][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.871136][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 85.881458][ T5808] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 85.889024][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 85.905273][ T5808] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 85.910869][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 85.920225][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.928624][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 85.946436][ T12] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 85.948028][ T5808] usb 4-1: config 0 descriptor?? [ 85.960712][ T12] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 85.971858][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 85.989657][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 86.022985][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 86.024591][ T6379] netlink: 24 bytes leftover after parsing attributes in process `syz.1.222'. [ 86.031930][ T12] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 86.041755][ T6379] bond0: ARP target 8.4.0.0 is already present [ 86.055014][ T6379] bond0: option arp_ip_target: invalid value (1032) [ 86.062729][ T12] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 86.071707][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 86.086548][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 86.126769][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 86.133374][ T6381] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 86.155986][ T12] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 86.182271][ T12] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 86.209084][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 86.220908][ T6383] loop1: detected capacity change from 0 to 128 [ 86.230299][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 86.247317][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 86.258651][ T5767] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 86.278045][ T5767] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 86.289958][ T5767] NILFS (loop2): discard dirty block: blocknr=35, size=1024 [ 86.298155][ T5767] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 86.313466][ T5767] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 86.320808][ T5767] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 86.406007][ T5808] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 86.481140][ T5808] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 86.492033][ T6386] loop2: detected capacity change from 0 to 1024 [ 86.818139][ T5808] usb 4-1: USB disconnect, device number 3 [ 87.001788][ T6400] loop2: detected capacity change from 0 to 256 [ 87.072475][ T6087] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 87.079747][ T6400] wlan0 speed is unknown, defaulting to 1000 [ 87.106365][ T6400] wlan0 speed is unknown, defaulting to 1000 [ 87.124976][ T6400] wlan0 speed is unknown, defaulting to 1000 [ 87.149700][ T6400] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 87.192003][ T6400] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 87.193071][ T5825] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 87.233133][ T6400] wlan0 speed is unknown, defaulting to 1000 [ 87.242216][ T6400] wlan0 speed is unknown, defaulting to 1000 [ 87.254959][ T6400] wlan0 speed is unknown, defaulting to 1000 [ 87.266043][ T6400] wlan0 speed is unknown, defaulting to 1000 [ 87.395771][ T5825] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.424529][ T5825] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.455642][ T5825] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 87.482967][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.491124][ T6407] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 87.511713][ T5825] usb 1-1: Product: syz [ 87.523623][ T5825] usb 1-1: Manufacturer: syz [ 87.534289][ T5825] usb 1-1: SerialNumber: syz [ 87.769193][ T6414] loop1: detected capacity change from 0 to 1024 [ 87.782769][ T5825] usb 1-1: 0:2 : does not exist [ 87.792724][ T5825] usb 1-1: unit 9 not found! [ 87.799511][ T6414] EXT4-fs: Ignoring removed bh option [ 87.822645][ T5825] usb 1-1: 4:0: cannot get min/max values for control 1 (id 4) [ 87.848081][ T5825] usb 1-1: USB disconnect, device number 7 [ 87.878904][ T6414] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.939510][ T6087] udevd[6087]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.021166][ T6414] EXT4-fs error (device loop1): ext4_read_inline_dir:1591: inode #12: block 7: comm syz.1.236: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 88.050341][ T6414] EXT4-fs (loop1): Remounting filesystem read-only [ 88.231748][ T6430] TCP: TCP_TX_DELAY enabled [ 88.399466][ T6434] loop2: detected capacity change from 0 to 7 [ 88.473486][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.557121][ T6438] sctp: [Deprecated]: syz.0.246 (pid 6438) Use of int in max_burst socket option deprecated. [ 88.557121][ T6438] Use struct sctp_assoc_value instead [ 88.600994][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.716091][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.799659][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.918242][ T6441] loop5: detected capacity change from 0 to 7 [ 88.932527][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.944791][ T6087] Dev loop5: unable to read RDB block 7 [ 88.954484][ T6087] loop5: unable to read partition table [ 88.960416][ T6087] loop5: partition table beyond EOD, truncated [ 88.976594][ T6441] Dev loop5: unable to read RDB block 7 [ 88.982296][ T6441] loop5: unable to read partition table [ 88.993392][ T6441] loop5: partition table beyond EOD, truncated [ 88.999839][ T6446] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 89.018388][ T6441] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 89.193002][ T5755] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 89.420583][ T6454] loop3: detected capacity change from 0 to 512 [ 89.423490][ T5825] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 89.427887][ T5755] usb 1-1: Using ep0 maxpacket: 32 [ 89.454600][ T5755] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 89.473465][ T5755] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.492174][ T5755] usb 1-1: Product: syz [ 89.497596][ T5755] usb 1-1: Manufacturer: syz [ 89.502382][ T5755] usb 1-1: SerialNumber: syz [ 89.506061][ T6454] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.254: inode has both inline data and extents flags [ 89.537568][ T6454] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.254: couldn't read orphan inode 15 (err -117) [ 89.558858][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.564724][ T5755] usb 1-1: config 0 descriptor?? [ 89.582442][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.585703][ T5755] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 89.601543][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.612562][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.614334][ T6454] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.636518][ T5825] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 89.647336][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.656159][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.693366][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.701544][ T5825] usb 3-1: Product: syz [ 89.705964][ T5825] usb 3-1: Manufacturer: syz [ 89.710575][ T5825] usb 3-1: SerialNumber: syz [ 89.730247][ T5825] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 89.783714][ T5806] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 89.791222][ T6454] EXT4-fs (loop3): shut down requested (1) [ 89.821792][ T6457] wlan0 speed is unknown, defaulting to 1000 [ 89.927525][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.259711][ T5755] gspca_ov534_9: reg_w failed -71 [ 90.292024][ T6457] chnl_net:caif_netlink_parms(): no params data found [ 90.461909][ T6457] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.478526][ T6457] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.487959][ T6457] bridge_slave_0: entered allmulticast mode [ 90.500256][ T6457] bridge_slave_0: entered promiscuous mode [ 90.542228][ T5806] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 90.555512][ T6457] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.568733][ T6457] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.576376][ T6457] bridge_slave_1: entered allmulticast mode [ 90.583729][ T6457] bridge_slave_1: entered promiscuous mode [ 90.590080][ T5806] ath9k_htc: Failed to initialize the device [ 90.605462][ T5806] usb 3-1: ath9k_htc: USB layer deinitialized [ 90.618158][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 90.682232][ T6457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.693191][ T5755] gspca_ov534_9: Unknown sensor 0000 [ 90.693274][ T5755] ov534_9: probe of 1-1:0.0 failed with error -22 [ 90.721706][ T6457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.730308][ T5755] usb 1-1: USB disconnect, device number 8 [ 90.767909][ T5808] usb 3-1: USB disconnect, device number 4 [ 90.966854][ T6457] team0: Port device team_slave_0 added [ 91.024548][ T6457] team0: Port device team_slave_1 added [ 91.090826][ T6457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.106434][ T6457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.132784][ T6457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.151656][ T6457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.161219][ T6457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.187152][ C1] vkms_vblank_simulate: vblank timer overrun [ 91.195969][ T6457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.267775][ T12] hsr_slave_0: left promiscuous mode [ 91.277615][ T12] hsr_slave_1: left promiscuous mode [ 91.308607][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.320630][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.357636][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.390406][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.411032][ T12] bridge_slave_1: left allmulticast mode [ 91.422117][ T12] bridge_slave_1: left promiscuous mode [ 91.431268][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.462200][ T12] bridge_slave_0: left allmulticast mode [ 91.474368][ T12] bridge_slave_0: left promiscuous mode [ 91.480819][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.543987][ T12] veth1_macvtap: left promiscuous mode [ 91.554769][ T12] veth0_macvtap: left promiscuous mode [ 91.565018][ T12] veth1_vlan: left promiscuous mode [ 91.571675][ T12] veth0_vlan: left promiscuous mode [ 91.737203][ T5775] Bluetooth: hci3: command tx timeout [ 92.160414][ T6519] loop2: detected capacity change from 0 to 4096 [ 92.229670][ T6519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.292186][ T6528] loop3: detected capacity change from 0 to 512 [ 92.372866][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 92.372879][ T27] audit: type=1800 audit(1779240022.291:15): pid=6519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.266" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 92.475425][ T6528] EXT4-fs (loop3): Test dummy encryption mode enabled [ 92.482405][ T6528] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 92.496155][ T6528] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 92.542279][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.570243][ T6528] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 92.619811][ T6528] EXT4-fs (loop3): 1 truncate cleaned up [ 92.670217][ T6528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.880602][ T6528] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 92.922029][ T6528] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 92.969671][ T12] team0 (unregistering): Port device team_slave_1 removed [ 92.977263][ T5846] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 92.996553][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.055230][ T12] team0 (unregistering): Port device team_slave_0 removed [ 93.099161][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.169294][ T5846] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.191919][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.201890][ T5846] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 93.219780][ T5846] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.235744][ T5846] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.245151][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.253415][ T5846] usb 3-1: Product: syz [ 93.286799][ T5846] usb 3-1: Manufacturer: syz [ 93.291468][ T5846] usb 3-1: SerialNumber: syz [ 93.636716][ T12] bond0 (unregistering): Released all slaves [ 93.732743][ T6457] hsr_slave_0: entered promiscuous mode [ 93.740748][ T6457] hsr_slave_1: entered promiscuous mode [ 93.747158][ T6457] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.763044][ T6457] Cannot create hsr debugfs directory [ 93.814053][ T5775] Bluetooth: hci3: command tx timeout [ 94.077214][ T6552] syz.3.275 uses obsolete (PF_INET,SOCK_PACKET) [ 94.365352][ T5846] cdc_ncm 3-1:1.0: bind() failure [ 94.408391][ T12] IPVS: stop unused estimator thread 0... [ 94.415681][ T5846] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 94.431400][ T6457] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.431952][ T5846] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 94.476551][ T6457] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.483402][ T789] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 94.501494][ T6565] loop3: detected capacity change from 0 to 1024 [ 94.508224][ T5846] usbtest: probe of 3-1:1.1 failed with error -71 [ 94.524970][ T6457] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.533505][ T5846] usb 3-1: USB disconnect, device number 5 [ 94.541121][ T6565] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.571771][ T6457] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.595709][ T6565] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 94.658848][ T6565] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6840c01c, mo2=0003] [ 94.703541][ T789] usb 1-1: Using ep0 maxpacket: 16 [ 94.711153][ T6565] System zones: 0-1, 3-36 [ 94.713539][ T789] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 94.729377][ T789] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 94.738999][ T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.747992][ T789] usb 1-1: Product: syz [ 94.752358][ T789] usb 1-1: Manufacturer: syz [ 94.758175][ T789] usb 1-1: SerialNumber: syz [ 94.759534][ T6565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.765889][ T789] usb 1-1: config 0 descriptor?? [ 94.863463][ T6457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.907801][ T6457] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.941925][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.949169][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.979269][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.006904][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.014089][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.171087][ T5846] usb 1-1: USB disconnect, device number 9 [ 95.197802][ T6578] process 'syz.2.280' launched './file0' with NULL argv: empty string added [ 95.633126][ T6457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.893108][ T5780] Bluetooth: hci3: command tx timeout [ 95.990016][ T6608] loop2: detected capacity change from 0 to 512 [ 96.468644][ T6612] ./file0: Can't open blockdev [ 96.473495][ T6457] veth0_vlan: entered promiscuous mode [ 96.488148][ T6457] veth1_vlan: entered promiscuous mode [ 96.598713][ T6457] veth0_macvtap: entered promiscuous mode [ 96.646498][ T6457] veth1_macvtap: entered promiscuous mode [ 96.722365][ T6619] ./file0: Can't open blockdev [ 96.742445][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.758950][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.769764][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.785289][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.801951][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.817212][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.869622][ T6457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.922486][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.938058][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.953580][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.967970][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.989225][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.037935][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.049976][ T6457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.061172][ T6457] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.079722][ T6457] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.089645][ T6457] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.105667][ T6457] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.961432][ T6632] loop2: detected capacity change from 0 to 131072 [ 97.973649][ T5780] Bluetooth: hci3: command tx timeout [ 98.008816][ T6632] F2FS-fs (loop2): Found nat_bits in checkpoint [ 98.015137][ C0] sched: RT throttling activated [ 98.085025][ T6632] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 98.165132][ T6632] F2FS-fs (loop2): lookup inode (7) has corrupted xattr [ 98.175417][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.190494][ T6632] F2FS-fs (loop2): lookup inode (7) has corrupted xattr [ 98.193772][ T27] audit: type=1804 audit(1779240028.111:16): pid=6632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.291" name="/newroot/72/file1/file1" dev="loop2" ino=7 res=1 errno=0 [ 98.222933][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.339804][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.351800][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.391997][ T6664] loop0: detected capacity change from 0 to 40427 [ 99.430826][ T6664] F2FS-fs (loop0): invalid crc value [ 99.464060][ T6664] F2FS-fs (loop0): Found nat_bits in checkpoint [ 99.633287][ T6664] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 99.871592][ T6664] syz.0.296: attempt to access beyond end of device [ 99.871592][ T6664] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 100.007097][ T5766] syz-executor: attempt to access beyond end of device [ 100.007097][ T5766] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 100.044388][ T5766] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 100.231228][ T6707] syzkaller1: entered promiscuous mode [ 100.260456][ T6707] syzkaller1: entered allmulticast mode [ 100.716680][ T6723] binder: 6722:6723 ioctl c0306201 2000000003c0 returned -14 [ 100.835048][ T6729] loop4: detected capacity change from 0 to 512 [ 100.852751][ T6729] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 101.831725][ T6764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.984772][ T6764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.061626][ T6769] netlink: 104 bytes leftover after parsing attributes in process `syz.0.319'. [ 102.403056][ T6782] loop0: detected capacity change from 0 to 64 [ 102.650020][ T6791] loop3: detected capacity change from 0 to 128 [ 102.726772][ T6793] netlink: 7 bytes leftover after parsing attributes in process `syz.2.328'. [ 102.752157][ T6793] netlink: 20 bytes leftover after parsing attributes in process `syz.2.328'. [ 102.771090][ T5808] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 102.783245][ T6793] netlink: 20 bytes leftover after parsing attributes in process `syz.2.328'. [ 102.974064][ T5808] usb 5-1: Using ep0 maxpacket: 16 [ 103.027776][ T6804] syzkaller1: entered allmulticast mode [ 103.211301][ T6786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.234145][ T6786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.264530][ T5808] usb 5-1: unable to get BOS descriptor or descriptor too short [ 103.281313][ T5808] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 103.302886][ T5808] usb 5-1: can't read configurations, error -71 [ 103.395165][ T6814] loop0: detected capacity change from 0 to 256 [ 103.413798][ T6814] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.425684][ T6814] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 103.459819][ T6814] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 103.661361][ T6821] loop2: detected capacity change from 0 to 16 [ 103.722385][ T6821] erofs: (device loop2): mounted with root inode @ nid 36. [ 103.798552][ T6821] erofs: (device loop2): erofs_map_blocks_flatmode: internal error @ nid: 36 (size 18446462598732841076), m_la 0x100000000 [ 104.074232][ T5767] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 36 [ 104.092445][ T6838] loop0: detected capacity change from 0 to 1024 [ 104.111288][ T6839] loop3: detected capacity change from 0 to 64 [ 104.133056][ T6838] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 104.241241][ T6838] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 2: comm syz.0.344: lblock 2 mapped to illegal pblock 2 (length 1) [ 104.266992][ T6838] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 104.279471][ T6838] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 48: comm syz.0.344: lblock 0 mapped to illegal pblock 48 (length 1) [ 104.298468][ T6838] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 104.318577][ T6838] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.344: Failed to acquire dquot type 0 [ 104.351694][ T6838] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 104.386073][ T6838] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.344: mark_inode_dirty error [ 104.439787][ T6838] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 104.460883][ T6838] EXT4-fs (loop0): 1 orphan inode deleted [ 104.473166][ T49] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 104.474841][ T6838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.541343][ T49] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 104.561399][ T49] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:3: Failed to release dquot type 0 [ 104.638619][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.660385][ T5766] EXT4-fs error (device loop0): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 104.693790][ T5766] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 104.720562][ T5766] EXT4-fs error (device loop0): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 105.558694][ T5806] IPVS: starting estimator thread 0... [ 105.657601][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 105.668439][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 105.675806][ T6870] IPVS: using max 23 ests per chain, 55200 per kthread [ 105.691254][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 105.710636][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 105.723627][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 105.731033][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 105.812765][ T6871] wlan0 speed is unknown, defaulting to 1000 [ 106.002533][ T6880] loop0: detected capacity change from 0 to 1024 [ 106.137681][ T49] hfsplus: b-tree write err: -5, ino 25 [ 106.157597][ T49] hfsplus: b-tree write err: -5, ino 4 [ 106.180468][ T49] hfsplus: b-tree write err: -5, ino 2 [ 106.208922][ T49] hfsplus: b-tree write err: -5, ino 26 [ 106.442010][ T6871] chnl_net:caif_netlink_parms(): no params data found [ 106.591133][ T6892] netlink: 264 bytes leftover after parsing attributes in process `syz.4.366'. [ 106.601208][ T6893] loop0: detected capacity change from 0 to 128 [ 106.682352][ T6871] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.723394][ T6871] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.740581][ T6871] bridge_slave_0: entered allmulticast mode [ 106.762239][ T6871] bridge_slave_0: entered promiscuous mode [ 106.787715][ T6871] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.804187][ T6871] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.821665][ T6871] bridge_slave_1: entered allmulticast mode [ 106.837749][ T6839] [ 106.840110][ T6839] ============================================ [ 106.846259][ T6839] WARNING: possible recursive locking detected [ 106.852412][ T6839] syzkaller #0 Not tainted [ 106.856822][ T6839] -------------------------------------------- [ 106.857562][ T6871] bridge_slave_1: entered promiscuous mode [ 106.862955][ T6839] syz.3.345/6839 is trying to acquire lock: [ 106.862965][ T6839] ffff88806a2080b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x17e/0x1f0 [ 106.863039][ T6839] [ 106.863039][ T6839] but task is already holding lock: [ 106.863049][ T6839] ffff88806a2080b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x17e/0x1f0 [ 106.900973][ T6839] [ 106.900973][ T6839] other info that might help us debug this: [ 106.909016][ T6839] Possible unsafe locking scenario: [ 106.909016][ T6839] [ 106.916452][ T6839] CPU0 [ 106.919717][ T6839] ---- [ 106.922980][ T6839] lock(&tree->tree_lock#2/1); [ 106.927828][ T6839] lock(&tree->tree_lock#2/1); [ 106.932671][ T6839] [ 106.932671][ T6839] *** DEADLOCK *** [ 106.932671][ T6839] [ 106.940795][ T6839] May be due to missing lock nesting notation [ 106.940795][ T6839] [ 106.949094][ T6839] 5 locks held by syz.3.345/6839: [ 106.954099][ T6839] #0: ffff8880314b0418 (sb_writers#28){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 106.963318][ T6839] #1: ffff8880254702b8 (&sb->s_type->i_mutex_key#40){+.+.}-{3:3}, at: do_truncate+0x19c/0x240 [ 106.973658][ T6839] #2: ffff8880254700f8 (&HFS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xff/0x1380 [ 106.984338][ T6839] #3: ffff88806a2080b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x17e/0x1f0 [ 106.994251][ T6839] #4: ffff888025d51478 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xff/0x1380 [ 107.005451][ T6839] [ 107.005451][ T6839] stack backtrace: [ 107.011338][ T6839] CPU: 1 PID: 6839 Comm: syz.3.345 Not tainted syzkaller #0 [ 107.018620][ T6839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 107.028676][ T6839] Call Trace: [ 107.031949][ T6839] [ 107.034868][ T6839] dump_stack_lvl+0x18c/0x250 [ 107.039540][ T6839] ? show_regs_print_info+0x20/0x20 [ 107.044732][ T6839] ? print_deadlock_bug+0x435/0x5d0 [ 107.049919][ T6839] __lock_acquire+0x5dbc/0x7d40 [ 107.054770][ T6839] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 107.060655][ T6839] ? verify_lock_unused+0x140/0x140 [ 107.065841][ T6839] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 107.071721][ T6839] ? _raw_spin_unlock+0x40/0x40 [ 107.076560][ T6839] ? stack_trace_save+0xaa/0x100 [ 107.081487][ T6839] ? stack_trace_snprint+0xf0/0xf0 [ 107.086594][ T6839] lock_acquire+0x19e/0x420 [ 107.091083][ T6839] ? hfs_find_init+0x17e/0x1f0 [ 107.095842][ T6839] ? hfs_extend_file+0x361/0x1380 [ 107.100855][ T6839] ? hfs_bmap_reserve+0x107/0x430 [ 107.105868][ T6839] ? block_write_begin+0x9a/0x1e0 [ 107.110893][ T6839] ? __might_sleep+0xe0/0xe0 [ 107.115475][ T6839] ? hfs_write_begin+0x8b/0xd0 [ 107.120222][ T6839] ? read_lock_is_recursive+0x20/0x20 [ 107.125581][ T6839] ? do_truncate+0x1b0/0x240 [ 107.130157][ T6839] ? vfs_truncate+0x266/0x300 [ 107.134819][ T6839] ? do_sys_truncate+0xf6/0x1c0 [ 107.139653][ T6839] ? do_syscall_64+0x55/0xb0 [ 107.144230][ T6839] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.150288][ T6839] __mutex_lock+0x136/0xcc0 [ 107.154778][ T6839] ? hfs_find_init+0x17e/0x1f0 [ 107.159538][ T6839] ? hfs_find_init+0x17e/0x1f0 [ 107.164294][ T6839] ? mutex_lock_nested+0x20/0x20 [ 107.169216][ T6839] ? __kmem_cache_alloc_node+0x13a/0x250 [ 107.174842][ T6839] ? hfs_find_init+0xa7/0x1f0 [ 107.179508][ T6839] ? hfs_find_init+0xa7/0x1f0 [ 107.184195][ T6839] ? __kmalloc+0xe2/0x230 [ 107.188534][ T6839] hfs_find_init+0x17e/0x1f0 [ 107.193128][ T6839] hfs_extend_file+0x361/0x1380 [ 107.197974][ T6839] ? hfs_bnode_read+0x358/0x7a0 [ 107.202824][ T6839] ? hfs_ext_keycmp+0x1c7/0x320 [ 107.207674][ T6839] ? hfs_get_block+0xc50/0xc50 [ 107.212427][ T6839] ? hfs_rename+0x2c0/0x2c0 [ 107.216933][ T6839] ? hfs_find_exit+0xa0/0xa0 [ 107.221527][ T6839] ? hfs_brec_find+0x3cd/0x500 [ 107.226291][ T6839] hfs_bmap_reserve+0x107/0x430 [ 107.231147][ T6839] __hfs_ext_write_extent+0x1fa/0x470 [ 107.236514][ T6839] __hfs_ext_cache_extent+0x6b/0x9b0 [ 107.241800][ T6839] ? hfs_find_init+0x17e/0x1f0 [ 107.246570][ T6839] hfs_extend_file+0x3a0/0x1380 [ 107.251425][ T6839] ? filemap_get_folios+0x102/0x7e0 [ 107.256623][ T6839] ? hfs_get_block+0xc50/0xc50 [ 107.261382][ T6839] ? find_lock_entries+0xfe0/0xfe0 [ 107.266490][ T6839] ? clean_bdev_aliases+0x587/0x680 [ 107.271692][ T6839] hfs_get_block+0x413/0xc50 [ 107.276279][ T6839] ? hfs_free_extents+0x430/0x430 [ 107.281299][ T6839] ? _raw_spin_unlock+0x28/0x40 [ 107.286141][ T6839] ? folio_add_lru+0x320/0xd30 [ 107.290896][ T6839] __block_write_begin_int+0x57f/0x1af0 [ 107.296440][ T6839] ? folio_add_lru+0xd30/0xd30 [ 107.301197][ T6839] ? hfs_free_extents+0x430/0x430 [ 107.306207][ T6839] ? folio_zero_new_buffers+0x550/0x550 [ 107.311750][ T6839] ? hfs_free_extents+0x430/0x430 [ 107.316765][ T6839] block_write_begin+0x9a/0x1e0 [ 107.321611][ T6839] cont_write_begin+0x5ee/0x810 [ 107.326450][ T6839] ? generic_cont_expand_simple+0x200/0x200 [ 107.332342][ T6839] ? __block_commit_write+0x23f/0x350 [ 107.337706][ T6839] ? put_page+0xea/0x260 [ 107.341947][ T6839] hfs_write_begin+0x8b/0xd0 [ 107.346525][ T6839] ? hfs_free_extents+0x430/0x430 [ 107.351538][ T6839] cont_write_begin+0x2b1/0x810 [ 107.356376][ T6839] ? generic_cont_expand_simple+0x200/0x200 [ 107.362258][ T6839] hfs_write_begin+0x8b/0xd0 [ 107.366834][ T6839] ? hfs_free_extents+0x430/0x430 [ 107.371842][ T6839] hfs_file_truncate+0x1c4/0xa10 [ 107.376765][ T6839] ? __up_read+0x2b6/0x6b0 [ 107.381166][ T6839] ? up_read+0x20/0x20 [ 107.385220][ T6839] ? up_read+0x20/0x20 [ 107.389272][ T6839] ? hfs_extend_file+0x1380/0x1380 [ 107.394372][ T6839] ? unmap_mapping_range+0xe7/0x180 [ 107.399561][ T6839] ? unmap_mapping_pages+0x160/0x160 [ 107.404835][ T6839] ? pagecache_isize_extended+0x116/0x570 [ 107.410544][ T6839] hfs_inode_setattr+0x4af/0x6e0 [ 107.415468][ T6839] ? bpf_lsm_inode_setattr+0x9/0x10 [ 107.420647][ T6839] ? try_break_deleg+0x79/0x120 [ 107.425486][ T6839] ? hfs_evict_inode+0x110/0x110 [ 107.430409][ T6839] notify_change+0xb0d/0xe10 [ 107.434990][ T6839] do_truncate+0x1b0/0x240 [ 107.439399][ T6839] ? put_page_bootmem+0x2c0/0x2c0 [ 107.444419][ T6839] ? bpf_lsm_path_truncate+0x9/0x10 [ 107.449612][ T6839] vfs_truncate+0x266/0x300 [ 107.454101][ T6839] do_sys_truncate+0xf6/0x1c0 [ 107.458764][ T6839] ? lock_chain_count+0x20/0x20 [ 107.463600][ T6839] ? break_lease+0xd0/0xd0 [ 107.468003][ T6839] ? lockdep_hardirqs_on+0x98/0x150 [ 107.473191][ T6839] do_syscall_64+0x55/0xb0 [ 107.477599][ T6839] ? clear_bhb_loop+0x40/0x90 [ 107.482267][ T6839] ? clear_bhb_loop+0x40/0x90 [ 107.486937][ T6839] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.492823][ T6839] RIP: 0033:0x7f802b99ce59 [ 107.497241][ T6839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.516834][ T6839] RSP: 002b:00007f802c778028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 107.525235][ T6839] RAX: ffffffffffffffda RBX: 00007f802bc15fa0 RCX: 00007f802b99ce59 [ 107.533191][ T6839] RDX: 0000000000000000 RSI: 0000000002fffffd RDI: 0000200000000940 [ 107.541148][ T6839] RBP: 00007f802ba32d6f R08: 0000000000000000 R09: 0000000000000000 [ 107.549107][ T6839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.557065][ T6839] R13: 00007f802bc16038 R14: 00007f802bc15fa0 R15: 00007ffc38490008 [ 107.565028][ T6839] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 107.601017][ T6871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.677320][ T6871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.813071][ T5775] Bluetooth: hci1: command tx timeout [ 108.055248][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.158257][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.196664][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.238758][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.614739][ T11] kworker/u4:0: attempt to access beyond end of device [ 108.614739][ T11] loop3: rw=1048577, sector=161, nr_sectors = 1 limit=64 [ 108.632197][ T11] Buffer I/O error on dev loop3, logical block 161, lost async page write [ 108.641174][ T11] kworker/u4:0: attempt to access beyond end of device [ 108.641174][ T11] loop3: rw=1048577, sector=162, nr_sectors = 1 limit=64 [ 108.656518][ T11] Buffer I/O error on dev loop3, logical block 162, lost async page write [ 108.665713][ T11] kworker/u4:0: attempt to access beyond end of device [ 108.665713][ T11] loop3: rw=1048577, sector=163, nr_sectors = 1 limit=64 [ 108.682370][ T11] Buffer I/O error on dev loop3, logical block 163, lost async page write [ 108.692706][ T11] kworker/u4:0: attempt to access beyond end of device [ 108.692706][ T11] loop3: rw=1048577, sector=167, nr_sectors = 1 limit=64 [ 108.708230][ T11] Buffer I/O error on dev loop3, logical block 167, lost async page write [ 108.718525][ T11] kworker/u4:0: attempt to access beyond end of device [ 108.718525][ T11] loop3: rw=1048577, sector=169, nr_sectors = 1 limit=64 [ 108.734306][ T11] Buffer I/O error on dev loop3, logical block 169, lost async page write [ 108.743167][ T11] kworker/u4:0: attempt to access beyond end of device [ 108.743167][ T11] loop3: rw=1048577, sector=171, nr_sectors = 1 limit=64 [ 108.760174][ T11] Buffer I/O error on dev loop3, logical block 171, lost async page write [ 108.769042][ T11] kworker/u4:0: attempt to access beyond end of device [ 108.769042][ T11] loop3: rw=1048577, sector=172, nr_sectors = 1 limit=64 [ 108.786419][ T11] Buffer I/O error on dev loop3, logical block 172, lost async page write [ 108.796596][ T11] kworker/u4:0: attempt to access beyond end of device [ 108.796596][ T11] loop3: rw=1048577, sector=173, nr_sectors = 1 limit=64 [ 108.812007][ T11] Buffer I/O error on dev loop3, logical block 173, lost async page write [ 108.820850][ T11] kworker/u4:0: attempt to access beyond end of device [ 108.820850][ T11] loop3: rw=1048577, sector=174, nr_sectors = 1 limit=64 [ 108.837824][ T11] Buffer I/O error on dev loop3, logical block 174, lost async page write [ 108.846644][ T11] kworker/u4:0: attempt to access beyond end of device [ 108.846644][ T11] loop3: rw=1048577, sector=175, nr_sectors = 1 limit=64 [ 108.862009][ T11] Buffer I/O error on dev loop3, logical block 175, lost async page write [ 109.087049][ T49] hsr_slave_0: left promiscuous mode [ 109.094149][ T49] hsr_slave_1: left promiscuous mode [ 109.100006][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.112088][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.121287][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.130860][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.139757][ T49] bridge_slave_1: left allmulticast mode [ 109.145833][ T49] bridge_slave_1: left promiscuous mode [ 109.151558][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.161585][ T49] bridge_slave_0: left allmulticast mode [ 109.167793][ T49] bridge_slave_0: left promiscuous mode [ 109.174940][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.188228][ T49] veth1_macvtap: left promiscuous mode [ 109.194857][ T49] veth0_macvtap: left promiscuous mode [ 109.200460][ T49] veth1_vlan: left promiscuous mode [ 109.208443][ T49] veth0_vlan: left promiscuous mode [ 109.405370][ T49] team0 (unregistering): Port device team_slave_1 removed [ 109.433239][ T49] team0 (unregistering): Port device team_slave_0 removed [ 109.455723][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.471929][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.536651][ T49] bond0 (unregistering): Released all slaves [ 109.847912][ T49] IPVS: stop unused estimator thread 0... [ 109.910508][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.948345][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.008399][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.057878][ T49] bond0: (slave netdevsim0): Releasing backup interface [ 110.068823][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.892351][ T49] hsr_slave_0: left promiscuous mode [ 110.898272][ T49] hsr_slave_1: left promiscuous mode [ 110.909481][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.916960][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.926103][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.936562][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.944405][ T49] bridge_slave_1: left allmulticast mode [ 110.950049][ T49] bridge_slave_1: left promiscuous mode [ 110.956015][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.966912][ T49] bridge_slave_0: left allmulticast mode [ 110.972570][ T49] bridge_slave_0: left promiscuous mode [ 110.978862][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.989765][ T49] bridge_slave_1: left allmulticast mode [ 110.996080][ T49] bridge_slave_1: left promiscuous mode [ 111.001766][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.012289][ T49] bridge_slave_0: left allmulticast mode [ 111.020716][ T49] bridge_slave_0: left promiscuous mode [ 111.028577][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.039740][ T49] veth1_macvtap: left promiscuous mode [ 111.046508][ T49] veth0_macvtap: left promiscuous mode [ 111.052121][ T49] veth1_vlan: left promiscuous mode [ 111.060153][ T49] veth0_vlan: left promiscuous mode [ 111.261702][ T49] team0 (unregistering): Port device team_slave_1 removed [ 111.293000][ T49] team0 (unregistering): Port device team_slave_0 removed [ 111.317537][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.347730][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.431482][ T49] bond0 (unregistering): Released all slaves [ 111.487827][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.499813][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.537708][ T49] bond0 (unregistering): Released all slaves