last executing test programs: 23m2.470931062s ago: executing program 32 (id=2519): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000001300)=ANY=[], 0x7f, 0x2ca, &(0x7f00000022c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) unlink(&(0x7f0000000280)='./file1\x00') 22m37.86361713s ago: executing program 33 (id=2703): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)='>', 0x1}], 0x1) 21m30.322081354s ago: executing program 34 (id=3259): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r1, r2, 0x25, 0x8, @val=@tcx={@void, @value=r1}}, 0x1c) 21m24.080582135s ago: executing program 35 (id=3293): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x20000001, 0x5, 0x4}, 0x1, r2}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 21m10.379028223s ago: executing program 36 (id=3365): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r1}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 19m40.114964407s ago: executing program 37 (id=4037): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x90, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r1, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x5c, 0x3, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x27a, 0x7fff, 0x6, 0x4, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) 18m50.819222298s ago: executing program 38 (id=4433): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d07000000000001000007000000", @ANYRES32=r1, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000a0000000000000000000014200001"], 0x58}}, 0x0) 17m51.984206205s ago: executing program 39 (id=4897): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x8, 0x2, "1e17"}, 0xa) 15m16.594617321s ago: executing program 40 (id=6333): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x4e20, 0xc1a, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff, 0x3}, {0x3, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 13m2.864752332s ago: executing program 41 (id=7342): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0xf4, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0xec, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xbc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xb0, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x81}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0xfffffffffffffef5, 0x2, 0x7f}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6a}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xfd}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xbb}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xa0}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 12m52.9834458s ago: executing program 42 (id=7421): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = add_key(&(0x7f0000000480)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r0, 0x700) r1 = request_key(&(0x7f0000000180)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000004c0)='\xfep\xb1\xabK-\x03\x00\xe5\x81\xb8}\xe6^\xab:B3\x00\x00\x00\x1e\x9a&rs\xcf\xd9\xde(\x00\x00|\xd7\x14\xe7\xe7%6\xc5\xf9\xe5\x1cx\xdf\x85\xbe7\x9e*U\x8d \xa8\'\xff\x0fl7-8Jn\x0e\x86:v\xcc9K\xc18\xd7\xc9\xc3F\xef\xd5F\xd6~k:\xf8\xc6E$\x0f\xb3Q\rI\xeb(\r$\x1aP\xaf\x8a\xdcx%j_\xe5\xa1\xb1\xf6Q\xb8\x88\x93c\a\\\xd3\x03\xfc\xba[b~f\xf3\x88', 0x0) request_key(&(0x7f00000005c0)='user\x00', &(0x7f0000000680)={'syz', 0x0}, 0x0, r1) 12m23.329913932s ago: executing program 43 (id=7610): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_io_uring_setup(0x4b9, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), 0x0, 0x0) 11m17.735932928s ago: executing program 44 (id=8048): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x1, @local}, 0xa, {0x2, 0x0, @dev}, 'bridge_slave_1\x00'}) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000640)={{0x2, 0x4e23, @dev}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) 10m39.866755281s ago: executing program 45 (id=8348): ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x8, 0xdd35, 0x457, 0x1e0, 0x7f}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010000c800c0022"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 9m47.766798664s ago: executing program 46 (id=8688): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b7030000000000008500000008000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdbc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000001850000006d0000001801000020696c2500000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000fc"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 9m45.793043838s ago: executing program 47 (id=8698): syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3200041, &(0x7f00000004c0)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c00bee5b9b80cb49c807c85709393a247066e0dbd1d4cc9b14919f9175b3d1ecfca63ba2dfbad53f056c689b3dd30d15dd68dc24fc6ff3f7447a2faf38d23e21b786f25f51f852073754deab2983e8ef71f0f41831db21390b85628876f9cd55cde11c878333a57d8a68ed062dbc69f88ec16a78580", @ANYRESOCT], 0x1, 0x9e23, &(0x7f0000013e80)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x51, &(0x7f0000000100)=[{0x225, 0x3, 0xe, 0x10000}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x4340) 8m46.879065618s ago: executing program 48 (id=9028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024001000000080001400000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0xc4004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03000000000000000000020000000900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001006d61630400633000000000000000000014000000110001"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x20, 0x17, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x805}, 0x0) 7m52.281482542s ago: executing program 49 (id=9361): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) unshare(0x400) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x4) 7m1.851661247s ago: executing program 1 (id=9729): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0xfffffffe, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c, 0x0}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 7m1.602134357s ago: executing program 1 (id=9731): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) shutdown(r2, 0x1) 7m1.330859s ago: executing program 1 (id=9734): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) 7m0.12751107s ago: executing program 1 (id=9746): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 6m59.792646201s ago: executing program 1 (id=9749): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000240)={r1, @in6={{0xa, 0x3, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3c}}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000240)=@assoc_value, &(0x7f0000000200)=0x8) 6m59.132237634s ago: executing program 1 (id=9754): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@can={{0x3}, 0x3, 0x2, 0x0, 0x0, "ee0d702fac00008a"}, 0x10}}, 0xd209f6d83486bb56) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001400)=""/26, 0x1a}, {0x0}], 0x2}, 0x2fa}, {{&(0x7f00000015c0)=@un=@abs, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001640)=""/108, 0x6c}], 0x1, &(0x7f0000001700)=""/143, 0x8f}, 0x101}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/217, 0xd9}, 0xfb}, {{0x0, 0x0, &(0x7f00000023c0)=[{0x0, 0x3d}, {&(0x7f00000022c0)=""/110, 0x6e}, {&(0x7f0000002340)=""/123, 0x7b}], 0x3, &(0x7f0000002400)=""/92, 0x5c}, 0xac}], 0x5, 0x2, 0x0) 6m58.393476367s ago: executing program 50 (id=9754): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@can={{0x3}, 0x3, 0x2, 0x0, 0x0, "ee0d702fac00008a"}, 0x10}}, 0xd209f6d83486bb56) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001400)=""/26, 0x1a}, {0x0}], 0x2}, 0x2fa}, {{&(0x7f00000015c0)=@un=@abs, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001640)=""/108, 0x6c}], 0x1, &(0x7f0000001700)=""/143, 0x8f}, 0x101}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/217, 0xd9}, 0xfb}, {{0x0, 0x0, &(0x7f00000023c0)=[{0x0, 0x3d}, {&(0x7f00000022c0)=""/110, 0x6e}, {&(0x7f0000002340)=""/123, 0x7b}], 0x3, &(0x7f0000002400)=""/92, 0x5c}, 0xac}], 0x5, 0x2, 0x0) 6m16.625742023s ago: executing program 4 (id=10065): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000100)=0x7f, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 6m15.805358646s ago: executing program 4 (id=10070): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) unshare(0x400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6m14.605964001s ago: executing program 4 (id=10077): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000400)=""/177}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r2}, 0xc) 6m14.336085612s ago: executing program 4 (id=10080): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='map=off,iocharset=iso8859-1,session=0x0000000000000023,overriderockperm,uid=', @ANYRESHEX=0x0, @ANYBLOB=',check=strict,cruft,mode=0x0000000000000\x00\x00\x00\x00map=normal,dmode=0x000000000000107b,\x00'], 0x0, 0x567, &(0x7f00000003c0)="$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") mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000100)={0x5, 0x8, 0x100000, {r0}}, 0x20) 6m13.969304285s ago: executing program 4 (id=10081): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf11, &(0x7f0000001e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, 0x0, 0x10448) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) write$yama_ptrace_scope(r0, &(0x7f0000000480)='2\x00', 0x2) 6m13.41761974s ago: executing program 4 (id=10086): openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6m12.847080471s ago: executing program 51 (id=10086): openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m57.660806315s ago: executing program 7 (id=10190): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x40, 0x12, 0x4, "d3d5b66a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m53.608748821s ago: executing program 7 (id=10216): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x2e) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x4e20, @empty}, 0x10) 5m53.402799435s ago: executing program 7 (id=10217): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5m53.122897074s ago: executing program 7 (id=10218): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000019, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x20045a, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) 5m52.380974049s ago: executing program 7 (id=10222): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x400, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 5m50.486198687s ago: executing program 7 (id=10227): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 5m49.243920877s ago: executing program 52 (id=10227): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 5m24.675053645s ago: executing program 5 (id=10355): r0 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0x8be, 0x8, 0x1024002, 0x8004d}, &(0x7f0000000380)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x40, 0x1}) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000800)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x1, 0x618, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc}}}, 0x0) 5m24.496923567s ago: executing program 5 (id=10357): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000a00)=ANY=[@ANYBLOB="200e0c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000240)={0x0, 0x17, 0x2a, "d2673b12974e4beb61063bd9942ef642d7694751c3e1587fae4cb2f7e9422eced469a800126adf30e34b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) 5m22.257398938s ago: executing program 5 (id=10370): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2db4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x9, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x81, 0x9, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2, 0x2b, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200f28000000280800fecc1f4d54"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0xa4, 0x4, 0xfffffffffffffffe, 0x0) 5m19.245863381s ago: executing program 5 (id=10380): connect$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x20, 0x4, 0x4a, 0x2, 0x7, @remote}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m19.055253425s ago: executing program 5 (id=10382): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000200)=ANY=[@ANYBLOB="696f636861727365743d6d616363726f617469616e2c646973636172643d3078303030303030303030303030303030332c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d6d6163637972696c6c69632c0067add4ceeca11a757cb8702b1b4a0ff322839e69b507d7478e0706b00408dc59283f5cf8e6972cdb3f50680fc9602ed27c1f6b47a91f941f154ae205d34a9b7a7c67efa0c0e2a70251d664fce12a0000800100000000b7672c4e1566a61a0ade4b6c9d78151053d9fb31fd2cfc77f269f873e14e5fe3c46c0acbb22d40391ae31d2025dcd947adf76739ae4ecbe39b131cab48d99bd1b630040b37e2b09d7816e0b93981de1147532cf2f46d4d4904f68fb43cd165b9", @ANYRES64, @ANYRESHEX], 0x1, 0x6281, &(0x7f0000006600)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x110) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x101042, 0x40) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x28, 0x0, 0x0, 0x0, 0xfffffffc}) 5m17.198707054s ago: executing program 5 (id=10388): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000080)="99", 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r0, &(0x7f00000001c0)='ns/ipc\x00') 5m2.124699378s ago: executing program 53 (id=10388): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000080)="99", 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r0, &(0x7f00000001c0)='ns/ipc\x00') 4m15.04245279s ago: executing program 2 (id=10799): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x183001, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) 4m11.681725989s ago: executing program 2 (id=10817): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 4m10.578995217s ago: executing program 2 (id=10824): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="eb", 0x1}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 4m10.185886389s ago: executing program 2 (id=10829): mkdir(&(0x7f0000000400)='./file0\x00', 0x114) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r0}}, 0x20) 4m9.263973042s ago: executing program 2 (id=10832): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x3c}}, 0x8000) sendmmsg(r0, &(0x7f0000005ac0)=[{{&(0x7f0000000180)=@can, 0x80, 0x0}}], 0x1, 0x44004) 4m7.200498339s ago: executing program 2 (id=10839): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='numa_maps\x00') syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x880c, &(0x7f0000000100)=ANY=[], 0xf, 0xb9, &(0x7f0000000640)="$eJzs1zFKxEAYBeCXKJJWBBsLaxvv4FHEUhuxUgRvIF7EygN4A4+Q3sIirYUjySi7y5YLWRa+r5jhzWPgb/+P79eTl7OkPCXlLbefZeHu/uH68qaeqY6GUrLkvQm7rE32x7tLcno45Xxd1K6pffrh8aof9tY/HzzPPS4AALCBNuer+af8PYwbwbgFTuH4v+9mng8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg234DAAD//3rfKMs=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d40)='freezer.state\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103a42, 0x5c) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 4m4.686357948s ago: executing program 54 (id=10839): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='numa_maps\x00') syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x880c, &(0x7f0000000100)=ANY=[], 0xf, 0xb9, &(0x7f0000000640)="$eJzs1zFKxEAYBeCXKJJWBBsLaxvv4FHEUhuxUgRvIF7EygN4A4+Q3sIirYUjySi7y5YLWRa+r5jhzWPgb/+P79eTl7OkPCXlLbefZeHu/uH68qaeqY6GUrLkvQm7rE32x7tLcno45Xxd1K6pffrh8aof9tY/HzzPPS4AALCBNuer+af8PYwbwbgFTuH4v+9mng8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg234DAAD//3rfKMs=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d40)='freezer.state\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103a42, 0x5c) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 3m17.04154213s ago: executing program 3 (id=10972): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a00000014"], 0x340a) 3m14.569355978s ago: executing program 3 (id=10978): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x1fd, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x6}, 0x1c) shutdown(r0, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000952000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/247, 0xf7, 0x1, 0x0}, &(0x7f0000000240)=0x40) 3m13.686253195s ago: executing program 3 (id=10981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a) 3m11.892280925s ago: executing program 3 (id=10986): r0 = io_uring_setup(0x1188, &(0x7f0000000100)={0x0, 0x3970, 0x10, 0x2, 0x3a9}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x2400000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22']) close_range(r0, 0xffffffffffffffff, 0x0) 3m10.4392272s ago: executing program 3 (id=10990): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f000000ab00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x78) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5405, 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000006a80)={0x5, 0x40000cca7, 0x4010}) 3m6.674079047s ago: executing program 3 (id=10995): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x400, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffa2b6}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100), &(0x7f0000000580)=0xfedc) 2m51.527190553s ago: executing program 55 (id=10995): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x400, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffa2b6}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100), &(0x7f0000000580)=0xfedc) 1m58.575505025s ago: executing program 9 (id=11118): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1) 1m50.154677502s ago: executing program 9 (id=11139): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r2, 0x411, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 1m46.207370525s ago: executing program 9 (id=11150): syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f0000001400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='sparse,acl,nohidden,iocharset=cp12500x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x9, {0x6, 0xfffffff7, 0x0, '\x00', {0x200, 0xd, 0x8000, 0xc, r2, r3, 0x0, '\x00', 0x100000002, 0x8000000000000000, 0x2000fffffffc, 0x7, {0x9, 0x23}, {0x231, 0x200006}, {0xfffffffffffffffc, 0x8}, {0x80, 0x9}, 0xb, 0xa, 0x7, 0xc}}}}) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x22008300, 0x0, 0x0, 0x800, 0x2, 0x0, 0x0, 0x0, 0x2}}, 0x50) 1m37.808492636s ago: executing program 9 (id=11158): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000001040)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1m32.906992773s ago: executing program 9 (id=11168): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000000c0)=0xfe, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1m17.563886491s ago: executing program 56 (id=11168): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000000c0)=0xfe, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 21.17072807s ago: executing program 0 (id=11338): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='.\x00', 0x0, 0x11) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) r2 = epoll_create(0x20008) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) close(r0) epoll_wait(r2, &(0x7f0000000180)=[{}], 0x1, 0x4) 20.945987668s ago: executing program 0 (id=11339): getpid() r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)={@val={0xa, 0x10}, @void, @eth={@broadcast, @local, @val={@val={0x88a8, 0x4, 0x0, 0x5}, {0x8100, 0x4, 0x0, 0x3}}, {@ipv6={0x86dd, @generic={0x9, 0x6, "17007e", 0x8, 0x2c, 0xff, @private2={0xfc, 0x2, '\x00', 0x4}, @mcast2, {[@routing={0x6, 0x0, 0x0, 0x6}]}}}}}}, 0x4a) 20.307236181s ago: executing program 0 (id=11340): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xc8e}, {0x16}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000001f00)="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", 0xc65}], 0x1, &(0x7f0000000600)=ANY=[], 0x180}}], 0x2, 0x2000c044) sendto$inet(r1, 0x0, 0x0, 0x88050000, 0x0, 0x0) 19.9099329s ago: executing program 0 (id=11341): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@nomblk_io_submit}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@errors_remount}, {@nobarrier}, {@discard}]}, 0xfa, 0x491, &(0x7f0000000f00)="$eJzs3M9vFFUcAPDvTLulgNiK+AMEqaKR+KOl5YccvGg04aCJiR4wnmpbSKVQQ2sihGj1gEdD4p149S8wnvRi1IsmXvVuSIjhAuJlzezM0NLutlu6ZQv7+SS7fW/mte99Z+btvJk33QA61kD2lkQ8EBF/RkRfnr29wED+48a1C2P/XrswlkS1+s4/Sa3c9WsXxsqi5e9tzTPVapHfVKfei+9HjE5NTZwt8kOzpz8amjl3/qXJ06MnJ05OnBk5evTQwT09R0YOtyTOLK7ruz6d3r3z2HuX3ho7fumDX5I08rhjURytMpBv3bqebXVlbbZtQTrpzt57i9ze3+bX1DsSaKeuiMh2V6XW//uiKzbfWtcXb3zR1sYB66parVaX+VSeqwL3sSTa3QKgPcoTfXb9W77u0tBjQ7j6an4BlMV9o3jla7ojzRN7K4uub1tpICKOz928nL1ine5DAAAs9EM2/nmx3vgvjUfzRE/29mAxh9IfEQ9FxPaIeDgidkTEIxG1so9FxOOrrH/xDMnS8U965Y6Da0I2/nulmNu6ffyXlkX6u4rctlr8leTE5NTEgWKb7I/KphOTycTwMnX8+PofXzVaVxv/lYPxuZuXs/rLsWDRjivdi27QjY/Ojq4l5oWufh6xq7te/EltXiCKeb2dEbHrDuuYfL674bqF49/jdeNfRuM/27TqNxHP5ft/LhbFX0oazk8Ov3xk5PBQb0xNHBgqj4qlfv394tuN6l9T/C2Q7f8tdY//W/H3J70RM+fOn6rN186svo6Lf33Z8Jpm5fhvO/6PbSuO/57k3dqCnmLFJ6Ozs2eHI3qSN5cuH5n/a2W+LJ/Fv39f/f6/Pea3xBMRsTsi9kTEk9lFYdH2pyLi6YjYt0z8P7/2zIerj7/+XfnKMvXciSz+8ZX2fyzc/6tPdJ366fuV4++NiEb7/1Attb9Y0sznX7MNXMu2AwAAgHtF/gx8kg7Op5PBwfwZ/h2xJZ2anpl94cT0x2fG82fl+6OSlne6+hbcDx0u7g2X+ZFF+YPFfeOvuzbX8oNj01Pj7Q4eOtzWJf0/TbP+n/m7q92tA9ZdC+bRgHuU/g+dS/+HzpSs2P9b/cgRsJE4/0Pnqtf/P2tYevC7dW0McFc5/0PnaqL/z+U/Go8KgHuT8z90Lv0fOlLD/41P1/Qv/y1N7Pk2b+tyZf4rvkJlo7T5/k9EuiGacf8nupv+MotGicrSvlzty/tUtmRT3d9q68cSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAy/wfAAD//3gk5XA=") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2859052, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) 19.015404443s ago: executing program 0 (id=11343): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x4, 0x6, 0x7, 0x9, 0x54, @mcast2, @local, 0x40, 0x80, 0x400, 0x5}}) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 17.825131643s ago: executing program 0 (id=11344): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000440)) 16.688378095s ago: executing program 57 (id=11344): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000440)) 6.038042446s ago: executing program 8 (id=11375): unshare(0x22020400) r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) 4.247628358s ago: executing program 6 (id=11377): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b9ff05760a03076804268c989e14", 0x0, 0x10503, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.491351898s ago: executing program 6 (id=11378): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f00008a1000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 2.885988335s ago: executing program 8 (id=11379): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x204031, 0xffffffffffffffff, 0x18cb2000) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) 2.106355035s ago: executing program 8 (id=11380): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) write$P9_RLERRORu(r0, &(0x7f0000000240)=ANY=[@ANYRES8], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) 1.623642545s ago: executing program 6 (id=11381): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0xc8e}, {0x16}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000001f00)="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", 0xc65}], 0x1, &(0x7f0000000600)=ANY=[], 0x180}}], 0x2, 0x2000c044) sendto$inet(r1, 0x0, 0x0, 0x88050000, 0x0, 0x0) 1.355538924s ago: executing program 6 (id=11382): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd", 0x19) 1.227383264s ago: executing program 8 (id=11383): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x10e) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='o']) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x100, 0x3, 0xd, 0x1, 0x56, 0x0, 0x0, 0x10, 0x9cea}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008340)="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", 0x2000, &(0x7f0000000f80)={&(0x7f00000001c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x2d, 0xf3, 0xffffffff80004010, 0x81, 0x7ff, 0x3, 0x7285, 0x0, 0x0, 0x10, 0x81}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) 1.115423395s ago: executing program 6 (id=11384): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0xffffffffffffffc3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 953.499048ms ago: executing program 8 (id=11385): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000440)=0x135, 0x4) recvmmsg(r0, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/19, 0x13}, 0x8000}], 0x1, 0x45833af92e4a39df, 0x0) 127.057473ms ago: executing program 8 (id=11386): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x8004, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) clock_adjtime(0x0, &(0x7f0000000280)={0xc979, 0x1, 0xbf, 0x8, 0x8, 0x1, 0x0, 0x4, 0xf27, 0x80000000, 0x6, 0x3ff, 0x8a8, 0x6, 0x5, 0x413, 0x69, 0x2, 0x6, 0x6, 0x10000, 0x168, 0x2cbf, 0x7, 0xe, 0x5}) 0s ago: executing program 6 (id=11387): syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00007af000/0x3000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a4a000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): ots slot 3 [ 1504.117709][ T7640] BTRFS info (device loop6): rebuilding free space tree [ 1504.168024][ T7640] BTRFS info (device loop6): checking UUID tree [ 1504.177532][ T7640] BTRFS info (device loop6): enabling ssd optimizations [ 1504.185681][ T7640] BTRFS info (device loop6): turning on async discard [ 1504.193725][ T7640] BTRFS info (device loop6): enabling free space tree [ 1504.206778][ T7640] BTRFS info (device loop6): force clearing of disk cache [ 1504.215098][ T7640] BTRFS info (device loop6): enabling auto defrag [ 1504.232308][ T7640] BTRFS info (device loop6): trying to use backup root at mount time [ 1504.241863][ T7640] BTRFS info (device loop6): use zstd compression, level 3 [ 1504.274386][T32442] usb 1-1: config 0 descriptor?? [ 1504.355378][T32442] cp210x 1-1:0.0: cp210x converter detected [ 1504.661034][ T7639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1504.769098][ T7639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1504.860741][ T2056] Bluetooth: hci5: command tx timeout [ 1505.142192][ T2051] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1505.235410][T32442] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1505.354037][T32442] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1505.658064][T14864] usb 1-1: USB disconnect, device number 44 [ 1505.756261][T14864] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1506.042813][T14864] cp210x 1-1:0.0: device disconnected [ 1506.844963][ T7675] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10877'. [ 1507.204512][ T7684] loop0: detected capacity change from 0 to 16 [ 1507.322389][ T7684] erofs (device loop0): mounted with root inode @ nid 36. [ 1507.633624][ T7685] loop6: detected capacity change from 0 to 4096 [ 1507.936640][ T7690] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1508.010683][ T7565] bridge0: port 1(bridge_slave_0) entered blocking state [ 1508.028984][ T7565] bridge0: port 1(bridge_slave_0) entered disabled state [ 1508.075154][ T7565] bridge_slave_0: entered allmulticast mode [ 1508.123686][ T7565] bridge_slave_0: entered promiscuous mode [ 1508.201988][ T7565] bridge0: port 2(bridge_slave_1) entered blocking state [ 1508.241976][ T7565] bridge0: port 2(bridge_slave_1) entered disabled state [ 1508.311116][ T7565] bridge_slave_1: entered allmulticast mode [ 1508.410335][ T7565] bridge_slave_1: entered promiscuous mode [ 1509.073745][ T7565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1509.188605][ T7565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1509.585408][ T7699] netlink: 'syz.9.10881': attribute type 11 has an invalid length. [ 1509.890757][ T7565] team0: Port device team_slave_0 added [ 1509.962611][ T7565] team0: Port device team_slave_1 added [ 1510.421210][ T7713] loop8: detected capacity change from 0 to 2048 [ 1510.529036][ T7713] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1510.666611][ T7565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1510.751918][ T7565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1510.759808][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 1510.759866][ T30] audit: type=1800 audit(1783577380.536:2464): pid=7713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.10889" name="file1" dev="loop8" ino=1346 res=0 errno=0 [ 1511.157559][ T7565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1511.325022][ T7565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1511.425019][ T7565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1511.646333][ T7565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1512.545725][ T7565] hsr_slave_0: entered promiscuous mode [ 1512.588143][ T7565] hsr_slave_1: entered promiscuous mode [ 1512.599360][ T7565] debugfs: 'hsr0' already exists in 'hsr' [ 1512.643470][ T7565] Cannot create hsr debugfs directory [ 1513.295580][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10896'. [ 1513.993592][ T7738] loop6: detected capacity change from 0 to 128 [ 1514.060512][ T7738] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1514.109912][ T7738] hpfs: filesystem error: improperly stopped [ 1514.139016][ T7738] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1514.178713][ T7738] hpfs: You really don't want any checks? You are crazy... [ 1514.214124][ T7738] hpfs: Code page index out of array [ 1514.265534][ T7738] hpfs: code page support is disabled [ 1514.302385][ T7738] hpfs: hpfs_map_4sectors(): unaligned read [ 1514.342333][ T7738] hpfs: hpfs_map_4sectors(): unaligned read [ 1514.381961][ T7738] hpfs: filesystem error: unable to find root dir [ 1516.265160][T27819] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1516.478330][T27819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1516.576151][T27819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1516.604516][ T5652] Bluetooth: hci1: command 0x0406 tx timeout [ 1516.639146][T27819] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1516.716345][T27819] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1516.747920][T27819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1516.806861][T27819] usb 1-1: config 0 descriptor?? [ 1517.389340][T27819] plantronics 0003:047F:FFFF.0055: reserved main item tag 0xd [ 1517.481430][T27819] plantronics 0003:047F:FFFF.0055: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1517.940829][T15006] usb 1-1: USB disconnect, device number 45 [ 1518.428145][ T7772] loop6: detected capacity change from 0 to 128 [ 1518.532117][ T7772] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1518.597280][ T7772] hpfs: filesystem error: improperly stopped [ 1518.669692][ T7772] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1518.697679][ T7766] fido_id[7766]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1518.735704][ T7772] hpfs: You really don't want any checks? You are crazy... [ 1518.796445][ T7772] hpfs: Code page index out of array [ 1518.835516][ T7772] hpfs: code page support is disabled [ 1518.876069][ T7772] hpfs: hpfs_map_4sectors(): unaligned read [ 1518.930726][ T7772] hpfs: hpfs_map_4sectors(): unaligned read [ 1518.966879][ T7772] hpfs: filesystem error: unable to find root dir [ 1519.787148][ T7785] netlink: 'syz.8.10915': attribute type 1 has an invalid length. [ 1520.328051][T15006] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1520.565605][ T7785] bond1: entered promiscuous mode [ 1520.575224][T15006] usb 4-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 1520.602422][ T7785] bond1: entered allmulticast mode [ 1520.617582][T15006] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1520.682375][ T7785] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1520.705936][T15006] usb 4-1: config 0 descriptor?? [ 1520.787526][T15006] pwc: Creative Labs Webcam 5 detected. [ 1521.423396][T15006] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1521.475852][T15006] pwc: recv_control_msg error -71 req 02 val 2700 [ 1521.526553][T15006] pwc: recv_control_msg error -71 req 04 val 1600 [ 1521.577994][T15006] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1521.660798][T15006] pwc: recv_control_msg error -71 req 04 val 1000 [ 1521.688176][T15006] pwc: recv_control_msg error -71 req 04 val 1300 [ 1521.704155][T15006] pwc: recv_control_msg error -71 req 04 val 1400 [ 1521.765577][T15006] pwc: recv_control_msg error -71 req 02 val 2000 [ 1521.833058][T15006] pwc: recv_control_msg error -71 req 02 val 2100 [ 1521.895794][T15006] pwc: recv_control_msg error -71 req 06 val 0600 [ 1521.962095][T15006] pwc: recv_control_msg error -71 req 04 val 1500 [ 1521.977619][T15006] pwc: recv_control_msg error -71 req 02 val 2500 [ 1522.030079][T15006] pwc: recv_control_msg error -71 req 02 val 2400 [ 1522.064240][T15006] pwc: recv_control_msg error -71 req 02 val 2600 [ 1522.110032][T15006] pwc: recv_control_msg error -71 req 02 val 2900 [ 1522.170809][T15006] pwc: recv_control_msg error -71 req 02 val 2800 [ 1522.285173][T15006] pwc: recv_control_msg error -71 req 04 val 1100 [ 1522.331428][T15006] pwc: recv_control_msg error -71 req 04 val 1200 [ 1522.349547][T15006] pwc: Failed to power off camera (-71) [ 1522.485171][T15006] pwc: Registered as video103. [ 1522.560616][T15006] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input92 [ 1522.825987][T15006] usb 4-1: USB disconnect, device number 45 [ 1522.901714][ T7814] loop3: detected capacity change from 0 to 1024 [ 1523.019335][ T7814] EXT4-fs: Ignoring removed nobh option [ 1523.107756][ T7814] EXT4-fs: Ignoring removed i_version option [ 1523.347840][ T7814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1524.243243][ T30] audit: type=1800 audit(1783577394.034:2465): pid=7814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10925" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1524.305075][ T7814] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1524.526115][ T7814] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1524.633780][ T7814] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1524.633780][ T7814] [ 1524.780468][ T7814] EXT4-fs (loop3): Total free blocks count 0 [ 1524.858647][ T7814] EXT4-fs (loop3): Free/Dirty block details [ 1524.914481][ T7814] EXT4-fs (loop3): free_blocks=20480 [ 1524.982655][ T7814] EXT4-fs (loop3): dirty_blocks=80 [ 1525.054909][ T7814] EXT4-fs (loop3): Block reservation details [ 1525.113722][ T7814] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 1525.151983][ T7833] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 63 with error 28 [ 1525.691808][ T6266] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1526.538833][ T7565] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1526.563010][ T7853] netlink: 'syz.3.10933': attribute type 1 has an invalid length. [ 1526.757283][ T7565] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1526.786210][ T7860] loop8: detected capacity change from 0 to 16 [ 1526.864071][ T7860] erofs (device loop8): mounted with root inode @ nid 36. [ 1526.970204][ T2056] erofs (device loop8): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 1527.035465][ T7860] erofs (device loop8): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 1527.304653][ T7860] erofs (device loop8): read error -117 @ 0 of nid 89 [ 1527.347625][ T7853] bond1: entered promiscuous mode [ 1527.387291][ T7853] bond1: entered allmulticast mode [ 1527.423722][ T7853] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1527.486157][ T7565] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1527.703725][ T7565] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1527.776122][ T7565] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1527.948079][ T7565] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1528.118194][ T7565] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1528.249270][ T5057] jfs_flush_journal: synclist not empty [ 1528.294466][ T7565] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1528.302856][ T5057] metapage: ffff88806fe105d0: 00001000 00000000 00003a24 00000000 [ 1528.378284][ T5057] metapage: ffff88806fe105e0: 3c61ba20 ffff8880 3c61ba20 ffff8880 [ 1528.474143][ T5057] metapage: ffff88806fe105f0: 00000004 00000000 00000000 00000000 [ 1528.552650][ T5057] metapage: ffff88806fe10600: 2a001000 ffff8880 0000001c 00000000 [ 1528.681213][ T5057] metapage: ffff88806fe10610: 00000000 dead4ead ffffffff 00000000 [ 1528.815975][ T5057] metapage: ffff88806fe10620: ffffffff ffffffff 9a8ebba0 ffffffff [ 1528.937538][ T5057] metapage: ffff88806fe10630: 941e7c78 ffffffff 00000000 00000000 [ 1529.024846][ T5057] metapage: ffff88806fe10640: 8c2c7820 ffffffff 00000300 00000000 [ 1529.112556][ T5057] metapage: ffff88806fe10650: 6fe10650 ffff8880 6fe10650 ffff8880 [ 1529.205348][ T5057] metapage: ffff88806fe10660: 00a80040 ffffea00 7fd5e000 ffff8880 [ 1529.233986][ T7872] loop8: detected capacity change from 0 to 32768 [ 1529.246284][ T7872] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.10939 (7872) [ 1529.285200][ T7872] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1529.296879][ T7872] BTRFS info (device loop8): using crc32c checksum algorithm [ 1529.382823][ T5057] metapage: ffff88806fe10670: 00001000 00003b14 00000001 00000000 [ 1529.393273][ T5057] metapage: ffff88806fe10680: 3c61b800 ffff8880 [ 1529.402146][ T5057] page: ffffea0000a80040: 00fff5800000402c ffffea0001536a48 [ 1529.413596][ T5057] page: ffffea0000a80050: ffff88801daac440 ffff888034b12990 [ 1529.423176][ T5057] page: ffffea0000a80060: 000000000000001c ffff88806fe105d0 [ 1529.433718][ T5057] page: ffffea0000a80070: 00000003ffffffff ffff88801fbfcc00 [ 1529.527976][ T2394] BTRFS warning (device loop8): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 1529.815783][ T7872] BTRFS warning (device loop8): couldn't read tree root [ 1529.823899][ T7872] BTRFS warning (device loop8): try to load backup roots slot 1 [ 1529.838402][ T2388] BTRFS warning (device loop8): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 1529.936757][ T7872] BTRFS warning (device loop8): couldn't read tree root [ 1529.948809][ T7872] BTRFS warning (device loop8): try to load backup roots slot 2 [ 1529.982508][ T5098] BTRFS error (device loop8): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1530.026523][ T7887] Invalid ELF header magic: != ELF [ 1530.084843][ T7872] BTRFS warning (device loop8): couldn't read tree root [ 1530.093226][ T7872] BTRFS warning (device loop8): try to load backup roots slot 3 [ 1530.163425][ T7872] BTRFS info (device loop8): checking UUID tree [ 1530.213171][ T7872] BTRFS info (device loop8): setting nodatasum [ 1530.220585][ T7872] BTRFS info (device loop8): enabling ssd optimizations [ 1530.228581][ T7872] BTRFS info (device loop8): turning on flush-on-commit [ 1530.236751][ T7872] BTRFS info (device loop8): turning on async discard [ 1530.244495][ T7872] BTRFS info (device loop8): enabling free space tree [ 1530.252310][ T7872] BTRFS info (device loop8): trying to use backup root at mount time [ 1530.265957][ T7872] BTRFS info (device loop8): max_inline set to 0 [ 1531.226528][T28051] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1532.945557][ T7912] loop6: detected capacity change from 0 to 32768 [ 1532.955910][ T7912] btrfs: Deprecated parameter 'usebackuproot' [ 1532.962877][ T7912] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1532.988048][ T7912] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.10946 (7912) [ 1533.024174][ T7912] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1533.038260][ T7912] BTRFS info (device loop6): using crc32c checksum algorithm [ 1533.061684][ T7565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1533.106390][ T7900] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1533.115526][ T7900] syzkaller1: Linktype set failed because interface is up [ 1533.271210][ T5095] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1533.579354][ T7912] BTRFS error (device loop6): failed to load root extent [ 1533.587561][ T7912] BTRFS warning (device loop6): try to load backup roots slot 1 [ 1533.598953][T19012] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1533.769503][ T7912] BTRFS warning (device loop6): couldn't read tree root [ 1533.777816][ T7912] BTRFS warning (device loop6): try to load backup roots slot 2 [ 1533.793132][ T5095] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1533.899416][ T7912] BTRFS warning (device loop6): couldn't read tree root [ 1533.907559][ T7912] BTRFS warning (device loop6): try to load backup roots slot 3 [ 1534.015526][ T7912] BTRFS info (device loop6): rebuilding free space tree [ 1534.127754][ T7912] BTRFS info (device loop6): checking UUID tree [ 1534.137016][ T7912] BTRFS info (device loop6): enabling ssd optimizations [ 1534.145389][ T7912] BTRFS info (device loop6): turning on async discard [ 1534.153238][ T7912] BTRFS info (device loop6): enabling free space tree [ 1534.166020][ T7912] BTRFS info (device loop6): force clearing of disk cache [ 1534.174422][ T7912] BTRFS info (device loop6): enabling auto defrag [ 1534.182568][ T7912] BTRFS info (device loop6): trying to use backup root at mount time [ 1534.192108][ T7912] BTRFS info (device loop6): use lzo compression, level 1 [ 1534.995474][ T7565] 8021q: adding VLAN 0 to HW filter on device team0 [ 1535.497960][ T2051] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1535.746559][ T7948] loop8: detected capacity change from 0 to 256 [ 1535.876857][ T7948] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0x2524ff13, utbl_chksum : 0xe619d30d) [ 1535.987684][ T30] audit: type=1800 audit(1783577405.789:2466): pid=7948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.10952" name="file1" dev="loop8" ino=1049146 res=0 errno=0 [ 1536.435617][T19033] bridge0: port 1(bridge_slave_0) entered blocking state [ 1536.443954][T19033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1536.754486][T19033] bridge0: port 2(bridge_slave_1) entered blocking state [ 1536.762741][T19033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1537.559929][ T7959] loop3: detected capacity change from 0 to 4096 [ 1537.846116][ T7959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1538.441997][ T7964] loop6: detected capacity change from 0 to 8192 [ 1538.541749][ T6266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1538.699646][ T7977] loop8: detected capacity change from 0 to 16 [ 1538.857081][ T7977] erofs (device loop8): mounted with root inode @ nid 36. [ 1540.164067][T15006] libceph: connect (1)[c::]:6789 error -101 [ 1540.284124][ T5095] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.377330][T15006] libceph: mon0 (1)[c::]:6789 connect error [ 1540.486947][T15006] libceph: connect (1)[c::]:6789 error -101 [ 1540.496351][ T7988] ceph: No mds server is up or the cluster is laggy [ 1540.550095][T15006] libceph: mon0 (1)[c::]:6789 connect error [ 1540.857224][T32442] libceph: connect (1)[c::]:6789 error -101 [ 1540.921571][T32442] libceph: mon0 (1)[c::]:6789 connect error [ 1542.125036][ T5095] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.057084][ T5095] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.770113][ T8037] loop8: detected capacity change from 0 to 128 [ 1545.185510][ T5095] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.223569][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.237789][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.339703][ T8067] 9pnet_fd: p9_fd_create_tcp (8067): problem connecting socket to 127.0.0.1 [ 1548.901636][ T8067] 9pnet_fd: p9_fd_create_tcp (8067): problem connecting socket to 127.0.0.1 [ 1549.465959][ T8073] loop8: detected capacity change from 0 to 32768 [ 1549.593092][ T5095] bridge_slave_1: left allmulticast mode [ 1549.633193][ T5095] bridge_slave_1: left promiscuous mode [ 1549.685921][ T5095] bridge0: port 2(bridge_slave_1) entered disabled state [ 1550.465322][ T5095] bridge_slave_0: left allmulticast mode [ 1550.487908][ T5095] bridge_slave_0: left promiscuous mode [ 1550.496313][ T5095] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.598280][ T8073] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1550.608032][ T8073] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1550.785797][ T8073] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 2ms [ 1550.800333][T14864] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1550.900133][T14864] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1552.206823][ T30] audit: type=1326 audit(1783577422.038:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8091 comm="syz.0.10991" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9257f9de59 code=0x0 [ 1552.425602][T14864] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1527ms [ 1552.473621][T14864] gfs2: fsid=syz:syz.0: jid=0: Done [ 1552.514243][ T8073] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1552.529174][ T8073] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 1556.241575][ T5095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1556.608058][ T5095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1556.823530][ T5095] bond0 (unregistering): Released all slaves [ 1557.142845][ T5652] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1557.188346][ T5652] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1557.206252][ T5652] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1557.229300][ T5652] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1557.244910][ T5652] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1557.494883][ T8141] netlink: 'syz.0.11005': attribute type 7 has an invalid length. [ 1558.386007][ T8140] loop6: detected capacity change from 0 to 40427 [ 1558.676351][ T8140] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 1558.685430][ T8140] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1558.736484][ T8140] F2FS-fs (loop6): invalid crc value [ 1558.977110][ T8140] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1559.037432][ T8140] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1559.045579][ T8140] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1559.359230][ T8140] bio_check_eod: 12 callbacks suppressed [ 1559.359286][ T8140] syz.6.11004: attempt to access beyond end of device [ 1559.359286][ T8140] loop6: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 1559.366065][ T2056] Bluetooth: hci1: command tx timeout [ 1559.650973][ T8141] netlink: 'syz.0.11005': attribute type 7 has an invalid length. [ 1559.757328][ T2388] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1559.840598][ T2388] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1559.997593][T18979] kworker/u8:18: attempt to access beyond end of device [ 1559.997593][T18979] loop6: rw=1, sector=77944, nr_sectors = 16 limit=40427 [ 1560.385381][ T2388] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1560.461491][ T2388] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1561.430755][ T5652] Bluetooth: hci1: command tx timeout [ 1561.639199][ T8161] netlink: 'syz.0.11009': attribute type 10 has an invalid length. [ 1561.714000][ T8163] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11009'. [ 1562.642962][ T5652] Bluetooth: hci6: command 0x0406 tx timeout [ 1562.756144][ T8161] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1562.765897][ T2056] Bluetooth: hci2: unexpected event for opcode 0x8c11 [ 1562.886655][ T8161] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1563.098041][ T8163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1563.231400][ T8163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1563.305968][ T8163] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 1563.355001][ T8163] bond0 (unregistering): Released all slaves [ 1563.538474][ T2056] Bluetooth: hci1: command tx timeout [ 1564.304712][ T5095] hsr_slave_0: left promiscuous mode [ 1564.374341][ T5095] hsr_slave_1: left promiscuous mode [ 1564.450581][ T5095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1564.493717][ T5095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1564.571202][ T5095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1564.647961][ T5095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1565.121621][ T5095] veth1_macvtap: left promiscuous mode [ 1565.205688][ T5095] veth0_macvtap: left promiscuous mode [ 1565.241044][ T5095] veth1_vlan: left promiscuous mode [ 1565.274096][ T5095] veth0_vlan: left promiscuous mode [ 1565.589748][ T2056] Bluetooth: hci1: command tx timeout [ 1567.099582][ T5095] team0 (unregistering): Port device team_slave_1 removed [ 1567.340572][ T5095] team0 (unregistering): Port device team_slave_0 removed [ 1567.518613][T14864] IPVS: starting estimator thread 0... [ 1567.614434][ T8209] IPVS: using max 25 ests per chain, 60000 per kthread [ 1568.909866][ T5652] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1568.933997][ T5652] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1568.953505][ T5652] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1569.044829][ T5652] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1569.273550][ T5652] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1571.500528][ T5652] Bluetooth: hci5: command tx timeout [ 1572.799783][T32442] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1573.048669][T32442] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1573.077413][T32442] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1573.116168][T32442] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1573.218932][T32442] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1573.295337][T32442] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.382303][T32442] usb 1-1: Product: syz [ 1573.432785][T32442] usb 1-1: Manufacturer: syz [ 1573.468631][T32442] usb 1-1: SerialNumber: syz [ 1573.531787][T32442] usb 1-1: config 0 descriptor?? [ 1573.579370][ T5652] Bluetooth: hci5: command tx timeout [ 1573.844242][T32442] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1574.200725][T27806] usb 1-1: USB disconnect, device number 46 [ 1574.744259][T15006] IPVS: starting estimator thread 0... [ 1574.848197][ T8271] IPVS: using max 26 ests per chain, 62400 per kthread [ 1575.657853][ T5652] Bluetooth: hci5: command tx timeout [ 1576.311506][ T8135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1576.327510][ T8135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1576.341010][ T8135] bridge_slave_0: entered allmulticast mode [ 1576.362021][ T8135] bridge_slave_0: entered promiscuous mode [ 1576.905594][ T8135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.967143][ T8135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1577.003250][ T8135] bridge_slave_1: entered allmulticast mode [ 1577.060694][ T8135] bridge_slave_1: entered promiscuous mode [ 1577.735388][ T5652] Bluetooth: hci5: command tx timeout [ 1578.639357][ T8135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1579.155200][ T8135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1579.932847][ T8326] netlink: 'syz.0.11041': attribute type 1 has an invalid length. [ 1580.109796][ T8135] team0: Port device team_slave_0 added [ 1580.687029][ T8135] team0: Port device team_slave_1 added [ 1580.703172][ T8334] loop6: detected capacity change from 0 to 4096 [ 1580.741303][ T8334] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512). [ 1581.140876][ T30] audit: type=1800 audit(1783577451.008:2468): pid=8334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.11044" name="bus" dev="loop6" ino=33 res=0 errno=0 [ 1581.348786][ T8135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1581.398873][ T8135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1581.579127][ T8135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1581.807658][ T8135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1581.870507][ T8135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1581.890450][ T8342] loop8: detected capacity change from 0 to 128 [ 1582.023714][ T30] audit: type=1326 audit(1783577451.889:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.6.11047" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39bd9de59 code=0x7ffc0000 [ 1582.054360][ T30] audit: type=1326 audit(1783577451.889:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.6.11047" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39bd9de59 code=0x7ffc0000 [ 1582.083625][ T8135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1582.099609][ T30] audit: type=1326 audit(1783577451.969:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.6.11047" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39bd9de59 code=0x7ffc0000 [ 1582.101623][ T8342] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1582.128673][ T30] audit: type=1326 audit(1783577451.969:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.6.11047" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39bd9de59 code=0x7ffc0000 [ 1582.319064][ T30] audit: type=1326 audit(1783577452.039:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.6.11047" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa39bd9de59 code=0x7ffc0000 [ 1582.437017][ T8342] ext4 filesystem being mounted at /620/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1582.509337][ T30] audit: type=1326 audit(1783577452.039:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.6.11047" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39bd9de59 code=0x7ffc0000 [ 1582.727486][ T1105] vlan2: left promiscuous mode [ 1582.736713][ T30] audit: type=1326 audit(1783577452.039:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.6.11047" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39bd9de59 code=0x7ffc0000 [ 1582.738417][ T1105] bond0: left promiscuous mode [ 1582.878961][ T30] audit: type=1326 audit(1783577452.039:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.6.11047" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39bd9de59 code=0x7ffc0000 [ 1582.948325][ T1105] bond_slave_0: left promiscuous mode [ 1582.980968][ T1105] bond_slave_1: left promiscuous mode [ 1583.051015][ T30] audit: type=1326 audit(1783577452.039:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.6.11047" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39bd9de59 code=0x7ffc0000 [ 1583.153248][ T1105] bridge0: port 3(vlan2) entered disabled state [ 1583.228580][ T1105] bridge_slave_1: left allmulticast mode [ 1583.265313][ T1105] bridge_slave_1: left promiscuous mode [ 1583.299449][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.322996][T28051] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1583.432335][ T1105] bridge_slave_0: left allmulticast mode [ 1583.466256][ T1105] bridge_slave_0: left promiscuous mode [ 1583.501699][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1583.939911][ T1105] bridge_slave_1: left allmulticast mode [ 1583.946507][ T1105] bridge_slave_1: left promiscuous mode [ 1583.954992][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1584.016716][ T1105] bridge_slave_0: left allmulticast mode [ 1584.041591][ T1105] bridge_slave_0: left promiscuous mode [ 1584.083334][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1584.460396][ T8359] loop6: detected capacity change from 0 to 512 [ 1584.671521][ T8359] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.11050: invalid block [ 1584.687193][ T8359] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1584.697217][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1584.714994][ C1] EXT4-fs (loop6): initial error at time 1783577454: ext4_get_branch:178: inode 11: block 4294967295 [ 1584.723498][ T8359] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.11050: invalid indirect mapped block 4294967295 (level 1) [ 1584.727364][ C1] EXT4-fs (loop6): last error at time 1783577454: ext4_get_branch:178: inode 11: block 4294967295 [ 1584.872852][ T8359] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1584.907675][ T8359] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.11050: invalid indirect mapped block 4294967295 (level 1) [ 1585.007360][ T8359] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1585.025666][ T8359] EXT4-fs (loop6): 2 truncates cleaned up [ 1585.078303][ T8359] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1585.250404][ T8359] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.11050: bg 0: block 5: invalid block bitmap [ 1585.594830][ T8372] loop0: detected capacity change from 0 to 128 [ 1585.630830][ T8372] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1585.660100][ T8372] hpfs: filesystem error: improperly stopped [ 1585.667936][ T8372] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1585.670837][ T2051] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1585.678243][ T8372] hpfs: You really don't want any checks? You are crazy... [ 1585.678333][ T8372] hpfs: Code page index out of array [ 1585.678364][ T8372] hpfs: code page support is disabled [ 1585.744306][ T8372] hpfs: hpfs_map_4sectors(): unaligned read [ 1585.756803][ T8372] hpfs: hpfs_map_4sectors(): unaligned read [ 1585.764143][ T8372] hpfs: filesystem error: unable to find root dir [ 1586.702807][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1586.749582][ T1105] bond_slave_0: left allmulticast mode [ 1586.791396][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1586.819584][ T1105] bond_slave_1: left allmulticast mode [ 1586.850019][ T1105] bond0 (unregistering): Released all slaves [ 1587.910088][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1588.001948][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1588.040774][ T1105] bond0 (unregistering): Released all slaves [ 1588.387814][ T8378] loop0: detected capacity change from 0 to 32768 [ 1588.595901][ T8378] find_entry called with index = 0 [ 1588.665271][ T8378] read_mapping_page failed! [ 1588.672113][ T8378] ERROR: (device loop0): txCommit: [ 1588.672113][ T8378] [ 1588.745671][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1588.745728][ T30] audit: type=1800 audit(1783577458.616:2498): pid=8393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.11058" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 1588.899731][ T1105] tipc: Left network mode [ 1589.076083][ T8135] hsr_slave_0: entered promiscuous mode [ 1589.116198][ T8135] hsr_slave_1: entered promiscuous mode [ 1589.168765][ T8135] debugfs: 'hsr0' already exists in 'hsr' [ 1589.184818][ T8135] Cannot create hsr debugfs directory [ 1589.761410][ T7028] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1590.011263][ T7028] usb 9-1: Using ep0 maxpacket: 8 [ 1590.022070][ T7028] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1590.042629][ T7028] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1590.101292][ T7028] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1590.172890][ T7028] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1590.258175][ T7028] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1590.360906][ T7028] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1590.415337][ T7028] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.471153][ T8406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1590.570479][ T8406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1590.638607][ T8406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1590.698910][ T8406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1590.823506][ T7028] usb 9-1: usb_control_msg returned -32 [ 1590.864311][ T7028] usbtmc 9-1:16.0: can't read capabilities [ 1591.569762][T15006] usb 9-1: USB disconnect, device number 31 [ 1592.461304][ T8421] loop6: detected capacity change from 0 to 32768 [ 1592.477249][ T8421] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.11070 (8421) [ 1592.542175][ T8421] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1592.553787][ T8421] BTRFS info (device loop6): using crc32c checksum algorithm [ 1592.962299][ T8421] BTRFS info (device loop6): enabling ssd optimizations [ 1592.970738][ T8421] BTRFS info (device loop6): turning on flush-on-commit [ 1592.980352][ T8421] BTRFS info (device loop6): turning on async discard [ 1592.988417][ T8421] BTRFS info (device loop6): enabling free space tree [ 1592.996181][ T8421] BTRFS info (device loop6): enabling auto defrag [ 1593.004077][ T8421] BTRFS info (device loop6): use lzo compression, level 1 [ 1593.012385][ T8421] BTRFS info (device loop6): max_inline set to 4096 [ 1593.262337][ T30] audit: type=1800 audit(1783577463.120:2499): pid=8421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.11070" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 1593.760046][ T1105] hsr_slave_0: left promiscuous mode [ 1593.853935][ T1105] hsr_slave_1: left promiscuous mode [ 1593.905765][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1593.957597][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1593.975928][ T2051] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1594.071873][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1594.105690][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1594.117836][ T8452] loop8: detected capacity change from 0 to 1024 [ 1594.231967][ T8452] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1594.470098][T15006] IPVS: starting estimator thread 0... [ 1594.508892][ T1105] hsr_slave_0: left promiscuous mode [ 1594.627308][ T1105] hsr_slave_1: left promiscuous mode [ 1594.672917][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1594.686893][ T8458] IPVS: using max 25 ests per chain, 60000 per kthread [ 1594.848910][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1595.152752][ T8467] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1596.161405][ T1105] veth0_macvtap: left promiscuous mode [ 1596.172435][ T1105] veth1_vlan: left promiscuous mode [ 1596.198833][ T1105] veth0_vlan: left promiscuous mode [ 1596.544059][ T8485] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1599.678888][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 1599.818259][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 1600.189670][ T8498] loop6: detected capacity change from 0 to 32768 [ 1600.254724][ T8498] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.11084 (8498) [ 1600.329727][ T8498] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1600.364731][ T8498] BTRFS info (device loop6): using blake2b checksum algorithm [ 1600.626669][ T8498] BTRFS info (device loop6): enabling ssd optimizations [ 1600.646672][ T8498] BTRFS info (device loop6): turning on async discard [ 1600.694504][ T8498] BTRFS info (device loop6): enabling free space tree [ 1600.720958][ T8498] BTRFS info (device loop6): use zstd compression, level 3 [ 1600.920369][ T30] audit: type=1800 audit(1783577470.797:2500): pid=8498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.11084" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 1601.102925][ T30] audit: type=1800 audit(1783577470.967:2501): pid=8498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.11084" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 1601.595242][ T2051] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1601.658196][ T8505] loop8: detected capacity change from 0 to 32768 [ 1601.766175][ T8505] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1602.145381][ T8505] XFS (loop8): Ending clean mount [ 1602.488781][T28051] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1603.323492][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 1603.530106][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 1604.875224][ T8462] bridge_slave_0: left allmulticast mode [ 1604.908163][ T8462] bridge_slave_0: left promiscuous mode [ 1604.946641][ T8462] bridge0: port 1(bridge_slave_0) entered disabled state [ 1605.020883][ T8462] bridge_slave_1: left allmulticast mode [ 1605.044718][ T8462] bridge_slave_1: left promiscuous mode [ 1605.073533][ T8462] bridge0: port 2(bridge_slave_1) entered disabled state [ 1605.157077][ T8462] team0: Port device team_slave_0 removed [ 1605.219094][ T8462] team0: Port device team_slave_1 removed [ 1605.259688][ T8462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1605.277947][ T8462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1605.332229][ T8462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1605.359339][ T8462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1605.406651][ T8462] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1605.471339][ T8465] netlink: 40 bytes leftover after parsing attributes in process `syz.9.11074'. [ 1605.622171][ T8548] loop8: detected capacity change from 0 to 32768 [ 1605.699011][ T8548] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1606.294575][ T30] audit: type=1804 audit(1783577476.172:2502): pid=8548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.11090" name="/newroot/635/file1/file1" dev="loop8" ino=17059 res=1 errno=0 [ 1606.395537][ T8216] bridge0: port 1(bridge_slave_0) entered blocking state [ 1606.440588][ T8216] bridge0: port 1(bridge_slave_0) entered disabled state [ 1606.503901][ T8216] bridge_slave_0: entered allmulticast mode [ 1606.621370][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.631822][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1606.644557][ T8216] bridge_slave_0: entered promiscuous mode [ 1606.713697][ T8216] bridge0: port 2(bridge_slave_1) entered blocking state [ 1606.758417][ T8216] bridge0: port 2(bridge_slave_1) entered disabled state [ 1606.780687][ T8216] bridge_slave_1: entered allmulticast mode [ 1606.833552][ T8216] bridge_slave_1: entered promiscuous mode [ 1607.029502][T28051] ocfs2: Unmounting device (7,8) on (node local) [ 1607.884094][ T8216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1608.449220][ T8216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1608.789049][T14864] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1608.860879][ T8573] netlink: 'syz.0.11096': attribute type 1 has an invalid length. [ 1609.043762][T14864] usb 9-1: Using ep0 maxpacket: 8 [ 1609.074836][T14864] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 1609.102701][T14864] usb 9-1: config 0 has no interface number 0 [ 1609.127178][T14864] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1609.180939][T14864] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1609.225082][T14864] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1609.239452][T14864] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1609.256179][T14864] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1609.271568][T14864] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.284268][ T8571] bridge0: port 4(erspan0) entered blocking state [ 1609.293575][ T8571] bridge0: port 4(erspan0) entered disabled state [ 1609.310855][T14864] usb 9-1: config 0 descriptor?? [ 1609.370248][T14864] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1609.469832][ T8571] erspan0: entered allmulticast mode [ 1609.576327][ T8571] erspan0: entered promiscuous mode [ 1609.610327][ C1] ldusb 9-1:0.55: usb_submit_urb failed (-19) [ 1609.620221][T14864] usb 9-1: USB disconnect, device number 32 [ 1609.678615][T14864] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 1609.925930][ T8573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1610.010458][ T8216] team0: Port device team_slave_0 added [ 1610.091399][ T8216] team0: Port device team_slave_1 added [ 1610.580633][ T8577] erspan0: left allmulticast mode [ 1610.778604][ T8577] erspan0: left promiscuous mode [ 1611.181477][ T8577] bridge0: port 4(erspan0) entered disabled state [ 1613.062448][ T5285] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1613.163187][ T8216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1613.177785][ T8216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1613.428800][ T8216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1613.581832][ T8216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1613.653661][ T8216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1613.920398][ T8216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1614.604566][ T1105] IPVS: stop unused estimator thread 0... [ 1615.346000][ T8216] hsr_slave_0: entered promiscuous mode [ 1615.396944][ T8216] hsr_slave_1: entered promiscuous mode [ 1615.427457][ T8216] debugfs: 'hsr0' already exists in 'hsr' [ 1615.446935][ T8216] Cannot create hsr debugfs directory [ 1616.587300][ T2056] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1616.605297][ T2056] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1616.625591][ T2056] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1616.635355][ T2056] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1616.678435][ T2056] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1618.825323][ T5652] Bluetooth: hci6: command tx timeout [ 1618.886191][ T1105] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1618.996944][ T1105] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.760787][ T8642] loop0: detected capacity change from 0 to 32768 [ 1620.030539][ T8642] JBD2: journal reset failed [ 1620.114318][ T8642] (syz.0.11111,8642,1):ocfs2_journal_load:1163 ERROR: Failed to load journal! [ 1620.240634][ T8642] (syz.0.11111,8642,1):ocfs2_check_volume:2373 ERROR: ocfs2 journal load failed! -4 [ 1620.631521][T27838] libceph: connect (1)[c::]:6789 error -101 [ 1620.643901][T27838] libceph: mon0 (1)[c::]:6789 connect error [ 1620.734400][T15006] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1620.895901][ T5652] Bluetooth: hci6: command tx timeout [ 1620.975140][T27838] libceph: connect (1)[c::]:6789 error -101 [ 1620.992101][T15006] usb 7-1: Using ep0 maxpacket: 8 [ 1621.045856][T15006] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1621.056846][ T1105] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1621.083506][T27838] libceph: mon0 (1)[c::]:6789 connect error [ 1621.116487][T15006] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1621.130425][T27838] libceph: connect (1)[c::]:6789 error -101 [ 1621.143135][ T1105] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.172896][T27838] libceph: mon0 (1)[c::]:6789 connect error [ 1621.190834][T15006] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1621.279330][T15006] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1621.321668][ T8670] ceph: No mds server is up or the cluster is laggy [ 1621.330037][ T8673] ceph: No mds server is up or the cluster is laggy [ 1621.355325][T15006] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1621.448011][T27838] libceph: connect (1)[c::]:6789 error -101 [ 1621.522994][T15006] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1621.536683][T27838] libceph: mon0 (1)[c::]:6789 connect error [ 1621.576582][T15006] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.580948][ T5285] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1622.073593][T15006] usb 7-1: usb_control_msg returned -32 [ 1622.105227][T15006] usbtmc 7-1:16.0: can't read capabilities [ 1622.255468][T15006] usb 7-1: USB disconnect, device number 19 [ 1622.556504][ T1105] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1622.573605][ T1105] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1622.650919][ T8685] xt_hashlimit: size too large, truncated to 1048576 [ 1622.990886][ T5652] Bluetooth: hci6: command tx timeout [ 1623.604262][ T1105] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1623.698168][ T1105] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1625.060034][ T5652] Bluetooth: hci6: command tx timeout [ 1625.806247][ T8718] loop0: detected capacity change from 0 to 2048 [ 1625.917716][ T8718] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1626.778129][ T8718] UDF-fs: warning (device loop0): udf_truncate_tail_extent: Too long extent after EOF in inode 1346: i_size: 273855 lbcount: 274432 extent 129+221184 [ 1628.288167][ T8738] ip6gre1: entered promiscuous mode [ 1628.313144][ T8738] ip6gre1: entered allmulticast mode [ 1629.336485][ T8754] netlink: 'syz.0.11138': attribute type 1 has an invalid length. [ 1629.401605][ T5285] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1629.525642][ T2056] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1629.559314][ T2056] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1629.563021][T15006] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1629.578882][ T2056] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1629.594106][ T2056] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1629.620609][ T2056] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1629.876979][T15006] usb 7-1: Using ep0 maxpacket: 32 [ 1629.891221][ T1105] bridge_slave_1: left allmulticast mode [ 1629.912408][T15006] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1629.956018][ T1105] bridge_slave_1: left promiscuous mode [ 1629.992095][T15006] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1630.003120][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1630.049490][T15006] usb 7-1: config 0 descriptor?? [ 1630.140512][ T1105] bridge_slave_0: left allmulticast mode [ 1630.142646][T15006] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1630.168635][ T1105] bridge_slave_0: left promiscuous mode [ 1630.190083][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1630.716341][ T2056] Bluetooth: hci7: sending frame failed (-49) [ 1630.740238][ T5652] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 1631.434237][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1631.482467][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1631.497933][ T1105] bond0 (unregistering): Released all slaves [ 1631.533776][ T1105] bond1 (unregistering): Released all slaves [ 1631.588253][T15006] gspca_sunplus: reg_w_riv err -71 [ 1631.610024][T15006] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 1631.668369][T15006] usb 7-1: USB disconnect, device number 20 [ 1631.669120][ T8754] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1631.769460][ T5652] Bluetooth: hci1: command tx timeout [ 1631.797086][ T8756] gretap1: entered allmulticast mode [ 1633.142641][T15006] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 1633.417762][T15006] usb 1-1: config 0 has no interfaces? [ 1633.469921][T15006] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1633.520671][T15006] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1633.636876][T15006] usb 1-1: config 0 descriptor?? [ 1633.846747][ T5652] Bluetooth: hci1: command tx timeout [ 1633.959422][T15006] usb 1-1: USB disconnect, device number 47 [ 1635.293655][ T1105] hsr_slave_0: left promiscuous mode [ 1635.389098][ T1105] hsr_slave_1: left promiscuous mode [ 1635.446661][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1635.455962][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1635.517659][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1635.527606][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1635.579365][ T1105] veth1_macvtap: left promiscuous mode [ 1635.585976][ T1105] veth0_macvtap: left promiscuous mode [ 1635.591688][ T1105] veth1_vlan: left promiscuous mode [ 1635.599562][ T1105] veth0_vlan: left promiscuous mode [ 1635.921948][ T5652] Bluetooth: hci1: command tx timeout [ 1636.679888][ T8812] loop9: detected capacity change from 0 to 4096 [ 1637.022019][ T8812] ntfs3(loop9): ino=3, mi_enum_attr [ 1637.279426][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1637.965357][ T8819] loop6: detected capacity change from 0 to 40427 [ 1637.977538][ T8819] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 1637.987121][ T8819] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1638.006536][ T5652] Bluetooth: hci1: command tx timeout [ 1638.214161][ T8819] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1638.237832][ T8819] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1638.246536][ T8819] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1638.431535][ T8812] ntfs3(loop9): Failed to read $AttrDef (-4). [ 1639.868858][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 1640.032929][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 1641.221947][ T8840] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11154'. [ 1641.512338][ T8835] overlayfs: upper fs does not support tmpfile. [ 1641.725267][ T8842] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11154'. [ 1641.800076][ T8842] nbd: device at index 64 is going down [ 1641.827492][ T5285] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1642.691066][ T5650] udevd[5650]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1643.092435][T27838] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1643.296300][T27838] usb 7-1: Using ep0 maxpacket: 8 [ 1643.317624][ T8636] bridge0: port 1(bridge_slave_0) entered blocking state [ 1643.343014][ T8636] bridge0: port 1(bridge_slave_0) entered disabled state [ 1643.353855][ T8636] bridge_slave_0: entered allmulticast mode [ 1643.375857][ T8636] bridge_slave_0: entered promiscuous mode [ 1643.386126][ T8636] bridge0: port 2(bridge_slave_1) entered blocking state [ 1643.433218][T27838] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1643.456038][ T8636] bridge0: port 2(bridge_slave_1) entered disabled state [ 1643.464487][T27838] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1643.472062][T27838] usb 7-1: can't read configurations, error -71 [ 1643.501029][ T8636] bridge_slave_1: entered allmulticast mode [ 1643.532693][ T8636] bridge_slave_1: entered promiscuous mode [ 1644.400513][ T8636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1644.527494][ T8636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1645.117311][ T8872] loop6: detected capacity change from 0 to 128 [ 1645.258726][ T8872] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1645.400276][ T8872] ext4 filesystem being mounted at /354/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1645.636361][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11165'. [ 1646.040825][ T2051] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1646.381849][ T1105] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1646.414069][ T1105] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.519430][ T8636] team0: Port device team_slave_0 added [ 1646.977545][ T8883] hsr_slave_1 (unregistering): left promiscuous mode [ 1647.058056][ T8636] team0: Port device team_slave_1 added [ 1647.206905][ T8873] loop0: detected capacity change from 0 to 32768 [ 1647.253268][ T8873] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.11163 (8873) [ 1647.299540][ T8895] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1647.320165][ T5285] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1647.335117][ T8873] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1647.370203][ T8873] BTRFS info (device loop0): using sha256 checksum algorithm [ 1647.477722][ T8636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1647.541447][ T8636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1647.674282][ T8636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1647.735018][ T8873] BTRFS info (device loop0): enabling ssd optimizations [ 1647.755542][ T8873] BTRFS info (device loop0): turning on sync discard [ 1647.807445][ T8873] BTRFS info (device loop0): enabling free space tree [ 1647.828605][ T8873] BTRFS info (device loop0): use zlib compression, level 3 [ 1647.854562][ T1105] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1647.870056][ T8873] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1647.929023][ T1105] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1648.344428][ T8636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1648.364827][ T8913] "syz.6.11170" (8913) uses obsolete ecb(arc4) skcipher [ 1648.380022][ T8636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1648.423351][ T8636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1649.106441][ T1105] bond0: (slave netdevsim1): Releasing backup interface [ 1649.477211][ T1105] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1649.620698][ T1105] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.629400][ T8928] loop6: detected capacity change from 0 to 32768 [ 1649.644431][ T8928] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.11173 (8928) [ 1649.667175][ T8928] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1649.679000][ T8928] BTRFS info (device loop6): using sha256 checksum algorithm [ 1649.882312][ T8928] BTRFS info (device loop6): enabling ssd optimizations [ 1649.890580][ T8928] BTRFS info (device loop6): turning on sync discard [ 1649.898229][ T8928] BTRFS info (device loop6): enabling free space tree [ 1649.906025][ T8928] BTRFS info (device loop6): use zlib compression, level 3 [ 1650.114135][ T30] audit: type=1800 audit(1783577520.039:2503): pid=8928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.11173" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 1650.873450][ T8636] hsr_slave_0: entered promiscuous mode [ 1651.000531][ T8636] hsr_slave_1: entered promiscuous mode [ 1651.030943][ T8636] debugfs: 'hsr0' already exists in 'hsr' [ 1651.084228][ T8636] Cannot create hsr debugfs directory [ 1651.315657][ T2051] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1651.489548][T27806] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1651.501604][ T1105] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1651.535028][ T1105] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1651.720352][T27806] usb 9-1: Using ep0 maxpacket: 8 [ 1651.808632][T27806] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1651.860014][T27806] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1651.930152][T27806] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1652.004414][T27806] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1652.148282][T27806] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1652.232861][T27806] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.613009][T27806] usb 9-1: GET_CAPABILITIES returned 0 [ 1652.688295][T27806] usbtmc 9-1:16.0: can't read capabilities [ 1652.894089][ T8966] : renamed from bridge_slave_0 (while UP) [ 1653.000007][T27838] usb 9-1: USB disconnect, device number 33 [ 1654.973920][ T5285] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1655.278930][ T8757] bridge0: port 1(bridge_slave_0) entered blocking state [ 1655.295499][ T8757] bridge0: port 1(bridge_slave_0) entered disabled state [ 1655.304530][ T8757] bridge_slave_0: entered allmulticast mode [ 1655.334528][ T8757] bridge_slave_0: entered promiscuous mode [ 1655.447136][T27819] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1655.519918][ T8968] loop6: detected capacity change from 0 to 40427 [ 1655.531049][ T8968] F2FS-fs: heap/no_heap options were deprecated [ 1655.578728][ T8968] F2FS-fs (loop6): build fault injection rate: 19 [ 1655.615279][ T8968] F2FS-fs (loop6): build fault injection type: 0x3bfe8c [ 1655.651490][ T8968] F2FS-fs (loop6): invalid crc value [ 1655.652597][T27819] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1655.682870][T27819] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1655.724276][T27819] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1655.782735][T27819] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1655.784190][ T8968] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa00/0x18c0 [ 1655.796046][ T8757] bridge0: port 2(bridge_slave_1) entered blocking state [ 1655.818999][T27819] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.840575][ T8757] bridge0: port 2(bridge_slave_1) entered disabled state [ 1655.882358][T27819] usb 9-1: config 0 descriptor?? [ 1655.902231][ T8757] bridge_slave_1: entered allmulticast mode [ 1655.982391][ T8757] bridge_slave_1: entered promiscuous mode [ 1656.226267][ T8968] F2FS-fs (loop6): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0 [ 1656.319847][ T8968] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1656.449186][ T8757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1656.474968][T27819] plantronics 0003:047F:FFFF.0056: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1656.501985][ T8757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1657.361330][ T8757] team0: Port device team_slave_0 added [ 1657.462449][ T8757] team0: Port device team_slave_1 added [ 1657.884676][ T8757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1657.913357][ T8757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1658.014766][ T8757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1658.060121][ T8757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1658.088700][ T8757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1658.211030][ T8757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1658.559860][T27838] usb 9-1: USB disconnect, device number 34 [ 1658.777768][ T9005] netlink: 'syz.8.11185': attribute type 10 has an invalid length. [ 1659.573412][ T8757] hsr_slave_0: entered promiscuous mode [ 1659.629203][ T8757] hsr_slave_1: entered promiscuous mode [ 1659.682247][ T8757] debugfs: 'hsr0' already exists in 'hsr' [ 1659.738929][ T8757] Cannot create hsr debugfs directory [ 1659.980681][ T9021] xt_hashlimit: size too large, truncated to 1048576 [ 1661.407269][ T5285] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1662.006090][ T1105] bridge_slave_1: left allmulticast mode [ 1662.024928][ T1105] bridge_slave_1: left promiscuous mode [ 1662.058720][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1662.116374][ T1105] bridge_slave_0: left allmulticast mode [ 1662.125915][ T1105] bridge_slave_0: left promiscuous mode [ 1662.137855][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1662.367295][ T1105] bridge_slave_1: left allmulticast mode [ 1662.391391][ T1105] bridge_slave_1: left promiscuous mode [ 1662.403673][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1662.501022][ T1105] bridge_slave_0: left allmulticast mode [ 1662.546375][ T1105] bridge_slave_0: left promiscuous mode [ 1662.603284][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1662.763702][ T1105] bridge_slave_1: left allmulticast mode [ 1662.815731][ T1105] bridge_slave_1: left promiscuous mode [ 1662.867914][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1663.137936][ T1105] bridge_slave_0: left allmulticast mode [ 1663.195430][ T9050] loop0: detected capacity change from 0 to 64 [ 1663.203153][ T1105] bridge_slave_0: left promiscuous mode [ 1663.225548][ T2056] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1663.249490][ T9050] minix: Unknown parameter 'minix' [ 1663.258331][ T2056] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1663.274463][ T2056] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1663.284060][ T2056] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1663.300547][ T2056] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1663.308882][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1664.128538][ T7028] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1664.339247][ T7028] usb 7-1: Using ep0 maxpacket: 32 [ 1664.398260][ T7028] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 1664.437355][ T7028] usb 7-1: config 0 has no interface number 0 [ 1664.475594][ T7028] usb 7-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1664.542958][ T7028] usb 7-1: config 0 interface 89 has no altsetting 0 [ 1664.590205][ T7028] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1664.679988][ T7028] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.734476][ T7028] usb 7-1: Product: syz [ 1664.772230][ T7028] usb 7-1: Manufacturer: syz [ 1664.793123][ T7028] usb 7-1: SerialNumber: syz [ 1664.909196][ T7028] usb 7-1: config 0 descriptor?? [ 1664.988779][ T7028] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1665.000511][ T7028] em28xx 7-1:0.89: Video interface 89 found: [ 1665.088175][T15006] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1665.220004][T27838] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 1665.234035][T27838] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 1665.275869][T27838] hid-generic 0000:0000:0000.0057: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1665.287856][T15006] usb 1-1: Using ep0 maxpacket: 8 [ 1665.316279][T15006] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1665.331400][T15006] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1665.346629][T15006] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.398375][T15006] usb 1-1: config 0 descriptor?? [ 1665.427505][ T5652] Bluetooth: hci5: command tx timeout [ 1665.685180][ T7028] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 1665.726468][T15006] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1665.763370][ T9067] fido_id[9067]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1666.013529][ C0] iowarrior 1-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 1666.024543][T15006] usb 1-1: USB disconnect, device number 48 [ 1666.151058][ T9069] netlink: 20 bytes leftover after parsing attributes in process `syz.8.11204'. [ 1666.161751][ T7028] em28xx 7-1:0.89: AC97 command still being executed: not handled properly! [ 1666.353621][ T7028] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1666.365960][ T7028] em28xx 7-1:0.89: board has no eeprom [ 1666.471174][ T9071] netlink: 20 bytes leftover after parsing attributes in process `syz.8.11204'. [ 1666.502308][ T9071] nbd: nbd64 already in use [ 1666.507942][ T7028] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 1666.517047][ T7028] em28xx 7-1:0.89: analog set to bulk mode. [ 1666.524937][ T7041] em28xx 7-1:0.89: Registering V4L2 extension [ 1666.558506][ T1105] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1666.576930][ T7028] usb 7-1: USB disconnect, device number 23 [ 1666.887319][ T7028] em28xx 7-1:0.89: Disconnecting em28xx [ 1666.963818][ T7041] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 1667.004116][ T7041] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 1667.079794][ T7041] em28xx 7-1:0.89: No AC97 audio processor [ 1667.377214][ T7041] usb 7-1: Decoder not found [ 1667.417088][ T7041] em28xx 7-1:0.89: failed to create media graph [ 1667.452326][ T5656] udevd[5656]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1667.463629][ T7041] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 1667.474102][ T7041] em28xx 7-1:0.89: Registering snapshot button... [ 1667.529139][ T5652] Bluetooth: hci5: command tx timeout [ 1667.536175][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1667.566050][ T7041] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input93 [ 1667.626549][ T7041] em28xx 7-1:0.89: Remote control support is not available for this card. [ 1667.637730][ T7028] em28xx 7-1:0.89: Closing input extension [ 1667.647578][ T7028] em28xx 7-1:0.89: Deregistering snapshot button [ 1667.668994][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1667.792842][ T1105] bond0 (unregistering): Released all slaves [ 1667.980720][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1667.988053][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.025421][ T1105] bond1 (unregistering): Released all slaves [ 1668.181087][ T1105] bond2 (unregistering): Released all slaves [ 1668.377093][ T1105] bond3 (unregistering): Released all slaves [ 1668.425732][ T7028] em28xx 7-1:0.89: Freeing device [ 1668.564100][ T1105] bond4 (unregistering): Released all slaves [ 1668.783170][ T1105] bond5 (unregistering): (slave lo): Releasing backup interface [ 1668.828943][ T7028] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1668.852250][ T1105] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1668.913485][ T1105] bond5 (unregistering): Released all slaves [ 1669.031371][ T7028] usb 7-1: Using ep0 maxpacket: 32 [ 1669.106910][ T7028] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1669.168661][ T7028] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1669.236612][ T7028] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1669.275189][ T7028] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1669.318962][ T7028] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1669.406364][ T7028] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1669.424796][ T7028] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.445021][ T7028] usb 7-1: Product: syz [ 1669.457201][ T7028] usb 7-1: Manufacturer: syz [ 1669.521421][ T7028] usb 7-1: SerialNumber: syz [ 1669.527355][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1669.574735][ T5652] Bluetooth: hci5: command tx timeout [ 1669.585770][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1669.630567][ T7028] usb 7-1: config 0 descriptor?? [ 1669.639145][ T1105] bond0 (unregistering): Released all slaves [ 1670.139703][ T7028] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 1670.155762][ T7028] input input94: Device does not respond to id packet M [ 1670.180775][ T7028] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 1670.209261][ T7028] input input94: Device does not respond to id packet P [ 1670.237289][ T7028] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 1670.245351][ T7028] input input94: Device does not respond to id packet B [ 1670.262864][ T7028] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 1670.288013][ T7028] input input94: Device does not respond to id packet N [ 1670.420230][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1670.490141][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1670.526820][ T1105] bond0 (unregistering): Released all slaves [ 1670.547572][ T7028] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1670.570399][ T7028] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1670.608520][ T7028] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1670.722232][ T7028] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input94 [ 1670.870015][ T7028] usb 7-1: USB disconnect, device number 24 [ 1671.215628][ T9104] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11214'. [ 1671.317038][ T9105] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11214'. [ 1671.682446][ T5652] Bluetooth: hci5: command tx timeout [ 1674.785483][ T9109] loop6: detected capacity change from 0 to 32768 [ 1674.852187][ T9109] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.11215 (9109) [ 1675.387888][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1675.438639][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1675.475480][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1675.547750][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1675.666125][ T9116] loop8: detected capacity change from 0 to 32768 [ 1675.721532][ T9116] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.11217 (9116) [ 1675.764262][ T1105] hsr_slave_0: left promiscuous mode [ 1675.829059][ T1105] hsr_slave_1: left promiscuous mode [ 1675.861977][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1675.908078][ T9116] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1675.972092][ T9116] BTRFS info (device loop8): using crc32c checksum algorithm [ 1676.013913][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1676.060513][ T9116] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1676.099760][ T9116] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1676.223710][ T9116] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1676.274132][ T1105] hsr_slave_0: left promiscuous mode [ 1676.307891][ T9116] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1676.308652][ T9116] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1676.407311][ T9116] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1676.503090][ T1105] hsr_slave_1: left promiscuous mode [ 1676.577545][ T9116] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1676.578860][ T9116] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1676.621953][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1676.682797][ T9116] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1676.683641][ T9116] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1676.788399][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1676.993313][ T9116] BTRFS error (device loop8): open_ctree failed: -12 [ 1677.267446][ T1105] veth1_macvtap: left promiscuous mode [ 1677.275034][ T2056] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1677.300003][ T2056] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1677.309583][ T2056] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1677.321122][ T2056] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1677.338487][ T1105] veth0_macvtap: left promiscuous mode [ 1677.344341][ T2056] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1677.347293][ T1105] veth1_vlan: left promiscuous mode [ 1677.437802][ T1105] veth0_vlan: left promiscuous mode [ 1677.910533][ T7028] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1678.050968][ T1105] team0 (unregistering): Port device vlan2 removed [ 1678.092505][ T7028] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1678.144172][ T7028] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1678.262967][ T7028] usb 7-1: config 0 descriptor?? [ 1678.436790][ T9168] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11224'. [ 1679.203536][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 1679.285842][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 1679.417375][ T5652] Bluetooth: hci7: command tx timeout [ 1680.221791][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 1680.249010][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 1680.769751][ T7028] ath6kl: Failed to read usb control message: -110 [ 1680.789964][ T7028] ath6kl: Unable to read the bmi data from the device: -110 [ 1680.798987][ T7028] ath6kl: Unable to recv target info: -110 [ 1680.830662][ T7028] ath6kl: Failed to init ath6kl core: -110 [ 1680.841564][ T7028] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1681.001713][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 1681.023053][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 1681.244464][ T5285] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1681.358378][T27838] usb 7-1: USB disconnect, device number 25 [ 1681.486350][ T5652] Bluetooth: hci7: command tx timeout [ 1681.563660][ T9183] loop6: detected capacity change from 0 to 512 [ 1681.610787][ T9183] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1681.754016][ T9183] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.11228: iget: bad i_size value: 38620345925642 [ 1681.811097][ T9183] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1681.812662][ T9183] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.11228: couldn't read orphan inode 15 (err -117) [ 1681.821866][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1681.821905][ C0] EXT4-fs (loop6): initial error at time 1783577551: ext4_orphan_get:1399: inode 15 [ 1681.821945][ C0] EXT4-fs (loop6): last error at time 1783577551: ext4_orphan_get:1399: inode 15 [ 1681.877853][ T9183] loop6: lost filesystem error report for type 5 error -117 [ 1681.924720][ T9183] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1682.245128][ T9183] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.11228: bg 0: block 5: invalid block bitmap [ 1682.275192][ T9183] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 332 with error 28 [ 1682.321468][ T9183] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1682.321468][ T9183] [ 1682.333736][ T9183] EXT4-fs (loop6): Total free blocks count 0 [ 1682.340640][ T9183] EXT4-fs (loop6): Free/Dirty block details [ 1682.346531][ T9183] EXT4-fs (loop6): free_blocks=0 [ 1682.353058][ T9183] EXT4-fs (loop6): dirty_blocks=336 [ 1682.358259][ T9183] EXT4-fs (loop6): Block reservation details [ 1682.367424][ T9183] EXT4-fs (loop6): i_reserved_data_blocks=336 [ 1682.620453][ T2051] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 1682.713058][ T2051] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1683.575905][ T5652] Bluetooth: hci7: command tx timeout [ 1684.096330][ T8757] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1684.230615][ T8757] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1684.277769][ T8757] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1684.334668][ T8757] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1684.394118][ T8757] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1684.536038][ T8757] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1684.546017][ T8757] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1684.567995][ T8757] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1684.812343][ T9248] loop0: detected capacity change from 0 to 512 [ 1684.853640][ T9248] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1684.915939][ T9248] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.11239: iget: bad i_size value: 38620345925642 [ 1684.962677][ T9248] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1684.970011][ T9248] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.11239: couldn't read orphan inode 15 (err -117) [ 1684.979239][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1684.979278][ C0] EXT4-fs (loop0): initial error at time 1783577554: ext4_orphan_get:1399: inode 15 [ 1684.979316][ C0] EXT4-fs (loop0): last error at time 1783577554: ext4_orphan_get:1399: inode 15 [ 1685.192075][ T9248] loop0: lost filesystem error report for type 5 error -117 [ 1685.239250][ T9248] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1685.421093][ T9248] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.11239: bg 0: block 5: invalid block bitmap [ 1685.463663][ T9248] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 632 with error 28 [ 1685.527188][ T9248] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1685.527188][ T9248] [ 1685.537079][T26059] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1685.570422][ T9248] EXT4-fs (loop0): Total free blocks count 0 [ 1685.578520][ T9248] EXT4-fs (loop0): Free/Dirty block details [ 1685.584806][ T9248] EXT4-fs (loop0): free_blocks=0 [ 1685.589971][ T9248] EXT4-fs (loop0): dirty_blocks=636 [ 1685.596656][ T9248] EXT4-fs (loop0): Block reservation details [ 1685.604213][ T9248] EXT4-fs (loop0): i_reserved_data_blocks=636 [ 1685.608030][ T9255] loop8: detected capacity change from 0 to 4096 [ 1685.642349][ T5652] Bluetooth: hci7: command tx timeout [ 1685.717670][T26059] usb 7-1: Using ep0 maxpacket: 32 [ 1685.726218][T26059] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 1685.745433][T26059] usb 7-1: config 0 has no interface number 0 [ 1685.781801][T26059] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1685.850978][T26059] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1685.894465][T26059] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1685.938325][T26059] usb 7-1: Product: syz [ 1685.946454][ T30] audit: type=1800 audit(1783577555.896:2504): pid=9255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.11241" name="file1" dev="loop8" ino=33 res=0 errno=0 [ 1685.978863][T26059] usb 7-1: Manufacturer: syz [ 1685.989197][T26059] usb 7-1: SerialNumber: syz [ 1686.020562][T26059] usb 7-1: config 0 descriptor?? [ 1686.026263][ T4483] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 1686.061318][T26059] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1686.098541][ T4483] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1686.115700][T26059] em28xx 7-1:0.132: Video interface 132 found: [ 1686.519288][T27819] hid-generic 0000:0000:0000.0058: unknown main item tag 0x0 [ 1686.528892][T26059] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 1686.583266][T27819] hid-generic 0000:0000:0000.0058: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1686.976430][T26059] em28xx 7-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1687.069506][T26059] em28xx 7-1:0.132: board has no eeprom [ 1687.171952][T26059] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1687.203130][T26059] em28xx 7-1:0.132: analog set to bulk mode. [ 1687.221461][T15006] em28xx 7-1:0.132: Registering V4L2 extension [ 1687.380413][T26059] usb 7-1: USB disconnect, device number 26 [ 1687.425044][T26059] em28xx 7-1:0.132: Disconnecting em28xx [ 1687.460482][ T9049] bridge0: port 1(bridge_slave_0) entered blocking state [ 1687.491925][ T9049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1687.524155][ T9049] bridge_slave_0: entered allmulticast mode [ 1687.553652][ T9049] bridge_slave_0: entered promiscuous mode [ 1687.663578][ T1105] IPVS: stop unused estimator thread 0... [ 1687.948726][ T9049] bridge0: port 2(bridge_slave_1) entered blocking state [ 1687.986484][ T9049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1688.025308][ T9049] bridge_slave_1: entered allmulticast mode [ 1688.065731][T15006] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 1688.090032][ T9049] bridge_slave_1: entered promiscuous mode [ 1688.109396][T15006] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 1688.160260][T15006] em28xx 7-1:0.132: No AC97 audio processor [ 1688.330458][T15006] usb 7-1: Decoder not found [ 1688.365481][T15006] em28xx 7-1:0.132: failed to create media graph [ 1688.402190][T15006] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 1688.471678][ T9049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1688.544594][T15006] em28xx 7-1:0.132: Remote control support is not available for this card. [ 1688.578334][ T9049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1688.608013][T26059] em28xx 7-1:0.132: Closing input extension [ 1688.739176][T26059] em28xx 7-1:0.132: Freeing device [ 1689.669162][ T1105] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1689.876767][ T2056] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1689.898740][ T2056] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1689.910364][ T2056] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1689.924486][ T2056] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1689.934276][ T2056] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1690.050656][ T9049] team0: Port device team_slave_0 added [ 1690.124113][ T9049] team0: Port device team_slave_1 added [ 1690.348462][ T30] audit: type=1326 audit(1783577560.299:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9292 comm="syz.6.11244" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa39bd9de59 code=0x0 [ 1690.987309][ T1105] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.029562][ T9049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1691.057061][ T9049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1691.195680][ T9049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1691.278640][ T9049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1691.296888][ T9049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1691.411912][ T9049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1692.040783][ T2056] Bluetooth: hci3: command tx timeout [ 1692.133001][ T1105] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.394656][ T9155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1692.438812][ T9155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1692.461652][ T9155] bridge_slave_0: entered allmulticast mode [ 1692.483331][ T9155] bridge_slave_0: entered promiscuous mode [ 1692.504703][ T9155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1692.523663][ T9155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1692.542490][ T9155] bridge_slave_1: entered allmulticast mode [ 1692.559662][ T9155] bridge_slave_1: entered promiscuous mode [ 1692.690549][ T1105] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.773314][ T9049] hsr_slave_0: entered promiscuous mode [ 1692.789271][ T9049] hsr_slave_1: entered promiscuous mode [ 1692.811510][ T9049] debugfs: 'hsr0' already exists in 'hsr' [ 1692.818073][ T9049] Cannot create hsr debugfs directory [ 1693.033185][ T9155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1693.064543][ T9155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1693.706211][ T9155] team0: Port device team_slave_0 added [ 1693.732246][ T9155] team0: Port device team_slave_1 added [ 1694.116620][ T2056] Bluetooth: hci3: command tx timeout [ 1694.160879][ T9155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1694.216246][ T9155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1694.306576][ T9381] loop6: detected capacity change from 0 to 4096 [ 1694.328141][ T9155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1694.449878][ T30] audit: type=1800 audit(1783577564.412:2506): pid=9381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.11257" name="file1" dev="loop6" ino=33 res=0 errno=0 [ 1694.776859][ T9155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1694.807402][ T9155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1694.928668][ T9155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1695.007225][T26059] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1695.177554][T26059] usb 9-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1695.208564][T26059] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.253781][T26059] usb 9-1: config 0 descriptor?? [ 1695.287618][T26059] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1695.363126][ T1105] team0: left allmulticast mode [ 1695.375103][ T1105] team_slave_0: left allmulticast mode [ 1695.410589][ T1105] team_slave_1: left allmulticast mode [ 1695.594738][ T1105] team0: left promiscuous mode [ 1695.621461][ T1105] team_slave_0: left promiscuous mode [ 1695.640361][ T1105] team_slave_1: left promiscuous mode [ 1695.659126][ T1105] bridge0: port 3(team0) entered disabled state [ 1695.697939][ T1105] bridge_slave_1: left allmulticast mode [ 1695.706488][ T1105] bridge_slave_1: left promiscuous mode [ 1695.713894][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1695.744665][ T1105] bridge_slave_0: left allmulticast mode [ 1695.764770][ T1105] bridge_slave_0: left promiscuous mode [ 1695.787655][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1696.102921][T26059] gspca_stv06xx: I2C: Read error writing address: -71 [ 1696.159088][T26059] usb 9-1: USB disconnect, device number 35 [ 1696.205305][ T2056] Bluetooth: hci3: command tx timeout [ 1696.657637][ T1105] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1696.708490][ T9418] loop6: detected capacity change from 0 to 128 [ 1696.732910][ T1105] team0: Port device bridge1 removed [ 1696.746559][ T9418] EXT4-fs: inline encryption not supported [ 1696.783650][ T9418] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1696.841028][ T9418] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1696.869100][ T9418] ext4 filesystem being mounted at /384/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1696.972864][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1697.010522][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1697.048648][ T1105] bond0 (unregistering): Released all slaves [ 1697.281472][ T2051] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1697.976565][ T9450] loop6: detected capacity change from 0 to 1024 [ 1698.020123][ T9450] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.11269: bad orphan inode 131072 [ 1698.050783][ T9450] loop6: lost filesystem error report for type 5 error -117 [ 1698.060752][ T9450] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1698.284526][ T2056] Bluetooth: hci3: command tx timeout [ 1699.290288][ T9471] loop0: detected capacity change from 0 to 512 [ 1699.299415][ T9421] macsec1: entered promiscuous mode [ 1699.305478][ T9421] bridge0: entered promiscuous mode [ 1699.316347][ T9471] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1699.372230][ T9471] EXT4-fs (loop0): 1 truncate cleaned up [ 1699.456734][ T9471] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1699.559337][ T9471] fscrypt (loop0, inode 18): Unsupported encryption modes (contents 0, filenames 0) [ 1699.707798][ T4483] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1699.777399][ T2388] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1699.825412][ T2388] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1699.935608][ T9477] loop0: detected capacity change from 0 to 2048 [ 1700.023890][ T9477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1700.041098][ T9477] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1700.097531][ T2051] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1700.109154][ T9477] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.11272: bg 0: block 497: padding at end of block bitmap is not set [ 1700.139346][ T9477] fs-verity (loop0, inode 13): Error -28 writing Merkle tree block 1 [ 1700.172723][ T9477] fs-verity (loop0, inode 13): Error -28 building Merkle tree [ 1700.374326][ T4483] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1700.698644][ T2388] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1700.742574][ T2388] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.790765][ T2388] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1700.843617][ T2388] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.955926][ T9155] hsr_slave_0: entered promiscuous mode [ 1700.972507][ T9155] hsr_slave_1: entered promiscuous mode [ 1700.985369][ T9155] debugfs: 'hsr0' already exists in 'hsr' [ 1701.004016][ T9155] Cannot create hsr debugfs directory [ 1701.087336][ T2388] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1701.101803][ T9467] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1701.116857][ T2388] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.305779][ T9467] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1701.335580][ T9467] usb 1-1: config 0 has no interface number 0 [ 1701.358861][ T9467] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1701.380137][ T9467] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.401018][ T9467] usb 1-1: Product: syz [ 1701.405196][ T9467] usb 1-1: Manufacturer: syz [ 1701.443244][ T9467] usb 1-1: SerialNumber: syz [ 1701.457619][ T1105] hsr_slave_0: left promiscuous mode [ 1701.474087][ T9467] usb 1-1: config 0 descriptor?? [ 1701.476778][ T1105] hsr_slave_1: left promiscuous mode [ 1701.506860][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1701.532878][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1701.559325][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1701.576681][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1701.638941][ T1105] veth1_macvtap: left promiscuous mode [ 1701.651735][ T1105] veth0_macvtap: left promiscuous mode [ 1701.734684][ T9467] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1701.771498][ T9467] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1701.785380][ T9467] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1701.796802][ T9467] usb 1-1: media controller created [ 1701.856902][ T9502] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11280'. [ 1701.870747][ T9467] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1702.087924][ T9506] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11283'. [ 1702.212096][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 1702.236928][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 1702.606759][ T9506] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11283'. [ 1702.991928][ T9467] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1703.207390][ T9467] usb 1-1: USB disconnect, device number 49 [ 1703.339172][ T9515] loop6: detected capacity change from 0 to 1024 [ 1703.518378][ T9515] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1703.548541][ T9515] ext4 filesystem being mounted at /395/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1703.591802][ T1105] IPVS: stop unused estimator thread 0... [ 1703.649255][ T9515] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 3: comm syz.6.11287: lblock 3 mapped to illegal pblock 3 (length 1) [ 1703.704552][ T9515] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 1703.736939][ T9515] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1703.736939][ T9515] [ 1703.813489][ T9524] EXT4-fs error (device loop6): ext4_free_blocks:6718: comm syz.6.11287: Freeing blocks not in datazone - block = 3, count = 1 [ 1703.946192][ T2051] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1704.003238][ T2051] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1707.507125][ T9314] bridge0: port 1(bridge_slave_0) entered blocking state [ 1707.525191][ T9314] bridge0: port 1(bridge_slave_0) entered disabled state [ 1707.536894][ T9314] bridge_slave_0: entered allmulticast mode [ 1707.551979][ T9314] bridge_slave_0: entered promiscuous mode [ 1707.625301][ T9314] bridge0: port 2(bridge_slave_1) entered blocking state [ 1707.634553][ T9314] bridge0: port 2(bridge_slave_1) entered disabled state [ 1707.642620][ T9314] bridge_slave_1: entered allmulticast mode [ 1707.653795][ T9314] bridge_slave_1: entered promiscuous mode [ 1707.957261][ T9560] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1708.280878][ T9314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1708.320989][ T9314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1709.190322][ T9049] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1709.224981][ T9049] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1709.254190][ T9049] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1709.293684][ T9049] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1709.423967][ T9578] loop8: detected capacity change from 0 to 4096 [ 1709.428333][ T9314] team0: Port device team_slave_0 added [ 1709.465582][ T9049] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1709.510975][ T9049] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1709.539171][ T9049] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1709.590735][ T9049] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1709.637942][ T9578] ntfs3(loop8): Failed to initialize $Extend/$Reparse. [ 1709.724232][ T9578] ntfs3(loop8): failed to convert name for inode 1e. [ 1709.768204][ T9578] ntfs3(loop8): ino=1f, mi_enum_attr [ 1709.782856][ T9578] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1710.029932][ T9314] team0: Port device team_slave_1 added [ 1710.348248][ T9587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1710.359390][ T9587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1710.676103][ T9587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1710.690115][ T9587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1710.799826][ T9587] geneve2: left promiscuous mode [ 1710.805271][ T9587] geneve2: left allmulticast mode [ 1710.816793][ T9587] bond1: left promiscuous mode [ 1710.822823][ T9587] bond1: left allmulticast mode [ 1710.861916][ T9587] ip6gre1: left promiscuous mode [ 1710.867999][ T9587] ip6gre1: left allmulticast mode [ 1710.878841][ T9587] macsec1: left promiscuous mode [ 1710.895749][ T9314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1710.911055][ T9314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1710.944634][ T9314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1710.960465][ T9314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1710.969987][ T9314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1711.065197][ T9314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1711.120788][T18992] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1711.312220][T18992] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1711.322350][T18992] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1711.444937][T18992] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1711.651852][ T9610] loop8: detected capacity change from 0 to 128 [ 1711.672775][ T9314] hsr_slave_0: entered promiscuous mode [ 1711.692667][ T9610] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1711.716211][ T9610] hpfs: filesystem error: improperly stopped [ 1711.718669][ T9314] hsr_slave_1: entered promiscuous mode [ 1711.760240][ T9610] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1711.762302][ T9314] debugfs: 'hsr0' already exists in 'hsr' [ 1711.782229][ T9314] Cannot create hsr debugfs directory [ 1711.819744][ T9610] hpfs: You really don't want any checks? You are crazy... [ 1711.881856][ T9610] hpfs: hpfs_map_sector(): read error [ 1711.908216][ T9610] hpfs: code page support is disabled [ 1711.925181][ T9610] hpfs: hpfs_map_4sectors(): unaligned read [ 1711.944215][ T9610] hpfs: hpfs_map_4sectors(): unaligned read [ 1711.964025][ T9610] hpfs: filesystem error: unable to find root dir [ 1712.115050][ T9610] hpfs: Unknown parameter 'rootdir' [ 1712.123103][ T9610] hpfs: hpfs_map_4sectors(): unaligned read [ 1712.131664][ T9610] hpfs: hpfs_map_sector(): read error [ 1712.355713][T18979] bridge_slave_1: left allmulticast mode [ 1712.370115][T18979] bridge_slave_1: left promiscuous mode [ 1712.394129][T18979] bridge0: port 2(bridge_slave_1) entered disabled state [ 1712.438762][T18979] bridge_slave_0: left allmulticast mode [ 1712.451869][ T9616] loop8: detected capacity change from 0 to 1024 [ 1712.461207][T18979] bridge_slave_0: left promiscuous mode [ 1712.475653][ T9616] EXT4-fs: Ignoring removed bh option [ 1712.490888][T18979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1712.542015][ T9616] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1712.577942][T18979] bridge_slave_1: left allmulticast mode [ 1712.599859][T18979] bridge_slave_1: left promiscuous mode [ 1712.614086][T18979] bridge0: port 2(bridge_slave_1) entered disabled state [ 1712.634523][T18979] bridge_slave_0: left allmulticast mode [ 1712.648850][T18979] bridge_slave_0: left promiscuous mode [ 1712.681611][T18979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1712.795616][T28051] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1713.133771][ T9626] loop6: detected capacity change from 0 to 512 [ 1713.178283][ T9626] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1713.235977][ T9626] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.11321: bad orphan inode 131083 [ 1713.284080][T18979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1713.295534][ T9626] loop6: lost filesystem error report for type 5 error -117 [ 1713.311013][ T9626] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1713.354957][T18979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1713.383274][T18979] bond0 (unregistering): Released all slaves [ 1713.479907][ T2051] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1713.979638][T18979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1714.009696][T18979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1714.022825][T18979] bond0 (unregistering): Released all slaves [ 1714.110817][ T9629] ip6gre1: entered promiscuous mode [ 1714.127355][ T9629] ip6gre1: entered allmulticast mode [ 1714.180787][ T9639] all: renamed from bridge_slave_1 (while UP) [ 1714.357311][T18979] hsr_slave_0: left promiscuous mode [ 1714.372144][T18979] hsr_slave_1: left promiscuous mode [ 1714.381587][T18979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1714.399373][T18979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1714.443698][T14864] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1714.515227][T18979] hsr_slave_0: left promiscuous mode [ 1714.521667][T18979] hsr_slave_1: left promiscuous mode [ 1714.531388][T18979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1714.566982][T18979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1714.621770][T14864] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1714.635714][T14864] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.680729][T14864] usb 9-1: Product: syz [ 1714.694365][T14864] usb 9-1: Manufacturer: syz [ 1714.704646][T14864] usb 9-1: SerialNumber: syz [ 1714.753546][T14864] usb 9-1: config 0 descriptor?? [ 1715.094862][T18979] team0 (unregistering): Port device team_slave_1 removed [ 1715.125638][T18979] team0 (unregistering): Port device team_slave_0 removed [ 1715.206764][T14864] usb 9-1: Firmware: major: 0, minor: 48, hardware type: ATUSB (0) [ 1715.428375][T14864] usb 9-1: failed to fetch extended address, random address set [ 1715.528857][T18979] team0 (unregistering): Port device team_slave_1 removed [ 1715.559757][T18979] team0 (unregistering): Port device team_slave_0 removed [ 1715.926705][ T2394] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1715.934683][ T2394] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1715.951577][ T5615] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1716.108893][T14864] usb 9-1: USB disconnect, device number 36 [ 1716.142742][ T5615] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1716.741610][ T9440] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1717.136515][ T9155] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1717.241490][ T9155] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1717.289412][ T9155] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1717.372045][ T9155] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1717.437117][ T9155] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1717.524876][ T9155] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1717.576452][ T9049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1717.594888][ T9155] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1717.746507][ T9155] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1718.196583][ T9049] 8021q: adding VLAN 0 to HW filter on device team0 [ 1718.290869][ T2388] bridge0: port 1(bridge_slave_0) entered blocking state [ 1718.299055][ T2388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1718.380819][ T2388] bridge0: port 2(bridge_slave_1) entered blocking state [ 1718.388032][ T2388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1719.015260][ T9673] loop6: detected capacity change from 0 to 40427 [ 1719.041866][ T9673] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 1719.085036][ T9673] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1719.093792][ T9673] F2FS-fs (loop6): Image doesn't support compression [ 1719.104646][ T9673] F2FS-fs (loop6): invalid crc value [ 1719.457721][ T9155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1719.483059][ T9673] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1719.582963][ T9155] 8021q: adding VLAN 0 to HW filter on device team0 [ 1719.671704][ T9673] F2FS-fs (loop6): f2fs_disable_checkpoint starts, unusable: 0 [ 1719.704429][T19012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1719.711664][T19012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1719.746795][ T9673] F2FS-fs (loop6): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 1719.774346][ T9673] F2FS-fs (loop6): Start checkpoint disabled! [ 1719.800182][T18975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1719.807384][T18975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1719.890620][ T9696] loop0: detected capacity change from 0 to 512 [ 1719.924342][ T9673] F2FS-fs (loop6): f2fs_disable_checkpoint finishes, err:0 [ 1719.939011][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1719.940317][ T9696] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1719.959935][ T9685] loop8: detected capacity change from 0 to 32768 [ 1719.992965][ T9673] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1720.027229][ T9673] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1720.049990][ T9696] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 1720.066330][ T9685] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.11337 (9685) [ 1720.152454][ T9696] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.11341: corrupted in-inode xattr: e_value size too large [ 1720.211534][ T9685] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1720.225951][ T9696] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1720.226106][ T9685] BTRFS info (device loop8): using crc32c checksum algorithm [ 1720.236881][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1720.236903][ C1] EXT4-fs (loop0): initial error at time 1783577590: ext4_iget_extra_inode:5180: inode 15 [ 1720.236942][ C1] EXT4-fs (loop0): last error at time 1783577590: ext4_iget_extra_inode:5180: inode 15 [ 1720.276864][ T9696] EXT4-fs (loop0): Remounting filesystem read-only [ 1720.331482][ T9696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1720.460184][T18992] BTRFS warning (device loop8): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 1720.627784][ T9685] BTRFS warning (device loop8): couldn't read tree root [ 1720.637409][ T9685] BTRFS warning (device loop8): try to load backup roots slot 1 [ 1720.667549][T18975] BTRFS warning (device loop8): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 1720.746435][ T9685] BTRFS warning (device loop8): couldn't read tree root [ 1720.771881][ T9685] BTRFS warning (device loop8): try to load backup roots slot 2 [ 1720.807412][T18979] BTRFS error (device loop8): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1720.882008][ T9685] BTRFS warning (device loop8): couldn't read tree root [ 1720.937188][ T9685] BTRFS warning (device loop8): try to load backup roots slot 3 [ 1720.961252][ T9314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1721.017508][ T6997] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1721.053707][ T9314] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1721.101290][ T9314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1721.116710][ T9685] BTRFS info (device loop8): checking UUID tree [ 1721.131082][ T9685] BTRFS error (device loop8): failed to check the UUID tree: -4 [ 1721.167282][ T9314] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1721.202898][ T9314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1721.264877][ T9314] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1721.313680][ T9314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1721.401035][ T9314] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1721.731994][ T9685] BTRFS error (device loop8): open_ctree failed: -4 [ 1723.863281][ T5652] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1723.884147][ T5652] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1723.902177][ T5652] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1723.917670][ T5652] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1723.942100][ T5652] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1724.109421][ T5652] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1724.132808][ T5652] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1724.153691][ T5652] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1724.230732][ T5652] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1724.249769][ T5652] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1724.273100][ T9314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1724.395185][ T9314] 8021q: adding VLAN 0 to HW filter on device team0 [ 1724.969596][ T9155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1724.995104][ T2388] bridge0: port 1(bridge_slave_0) entered blocking state [ 1725.002363][ T2388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1725.128374][ T2388] bridge0: port 2(bridge_slave_1) entered blocking state [ 1725.135611][ T2388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1726.017807][ T2056] Bluetooth: hci1: command tx timeout [ 1726.124189][ T9155] veth0_vlan: entered promiscuous mode [ 1726.416027][ T2056] Bluetooth: hci4: command tx timeout [ 1726.478197][ T9155] veth1_vlan: entered promiscuous mode [ 1727.180282][ T9830] loop6: detected capacity change from 0 to 8 [ 1727.226274][ T9830] SQUASHFS error: xz decompression failed, data probably corrupt [ 1727.234511][ T9830] SQUASHFS error: Failed to read block 0x108: -5 [ 1727.240890][ T9830] SQUASHFS error: Unable to read metadata cache entry [106] [ 1727.248409][ T9830] SQUASHFS error: Unable to read inode 0x11f [ 1728.098565][ T2056] Bluetooth: hci1: command tx timeout [ 1728.494949][ T2056] Bluetooth: hci4: command tx timeout [ 1728.826234][ T2394] bond0 (unregistering): Released all slaves [ 1729.372478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1729.383256][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.392287][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1729.656977][ T9155] veth0_macvtap: entered promiscuous mode [ 1730.002351][ T9155] veth1_macvtap: entered promiscuous mode [ 1730.172202][ T2056] Bluetooth: hci1: command tx timeout [ 1730.490888][ T2394] hsr_slave_0: left promiscuous mode [ 1730.527745][ T2394] hsr_slave_1: left promiscuous mode [ 1730.572208][ T2056] Bluetooth: hci4: command tx timeout [ 1732.070823][ T9886] loop8: detected capacity change from 0 to 1024 [ 1732.078854][ T9886] EXT4-fs: Ignoring removed bh option [ 1732.132955][ T9886] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1732.216062][ T9886] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #12: block 7: comm syz.8.11369: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 1732.247516][ T9886] EXT4-fs (loop8): Remounting filesystem read-only [ 1732.256333][ T2056] Bluetooth: hci1: command tx timeout [ 1732.528242][T28051] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1732.650441][ T2056] Bluetooth: hci4: command tx timeout [ 1732.962353][ T9900] loop3: detected capacity change from 0 to 7 [ 1732.991784][ T9900] Dev loop3: unable to read RDB block 7 [ 1733.009344][ T9900] loop3: unable to read partition table [ 1733.019633][ T9900] loop3: partition table beyond EOD, truncated [ 1733.038076][ T9900] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1733.737362][ T9155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1734.223642][ T9155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1734.297414][ T9924] loop6: detected capacity change from 0 to 128 [ 1734.400942][ T5098] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.454645][ T5098] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.648573][ T5098] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.709946][ T2391] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.905734][ T2394] IPVS: stop unused estimator thread 0... [ 1735.273939][ T2391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1735.309096][ T2391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1735.883732][ T9314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1736.822551][ T9764] bridge0: port 1(bridge_slave_0) entered blocking state [ 1736.859720][ T9764] bridge0: port 1(bridge_slave_0) entered disabled state [ 1736.886377][ T9764] bridge_slave_0: entered allmulticast mode [ 1736.910458][ T9764] bridge_slave_0: entered promiscuous mode [ 1736.954565][ T9764] bridge0: port 2(bridge_slave_1) entered blocking state [ 1736.977789][ T9764] bridge0: port 2(bridge_slave_1) entered disabled state [ 1737.012895][ T9764] bridge_slave_1: entered allmulticast mode [ 1737.063864][ T9764] bridge_slave_1: entered promiscuous mode [ 1737.423288][ T5652] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1737.445662][ T5652] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1737.462477][ T5652] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1737.473898][ T5652] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1737.482145][ T5652] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1737.867329][ T9768] bridge0: port 1(bridge_slave_0) entered blocking state [ 1737.903024][ T9768] bridge0: port 1(bridge_slave_0) entered disabled state [ 1737.938087][ T9768] bridge_slave_0: entered allmulticast mode [ 1737.971227][ T9768] bridge_slave_0: entered promiscuous mode [ 1738.011727][ T9768] bridge0: port 2(bridge_slave_1) entered blocking state [ 1738.046619][ T9768] bridge0: port 2(bridge_slave_1) entered disabled state [ 1738.058165][ T9768] bridge_slave_1: entered allmulticast mode [ 1738.102295][ T9983] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1738.163555][ T9768] bridge_slave_1: entered promiscuous mode [ 1738.781080][T10000] netlink: 1371 bytes leftover after parsing attributes in process `syz.6.11384'. [ 1738.961048][ T9764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1739.000733][ T9768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1739.177599][ T9764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1739.406762][ T9764] team0: Port device team_slave_0 added [ 1739.459126][ T9768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1739.526175][ T2056] Bluetooth: hci5: command tx timeout [ 1739.591379][ T9764] team0: Port device team_slave_1 added [ 1844.604523][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1844.611505][ C0] rcu: 1-...!: (0 ticks this GP) idle=43b4/1/0x4000000000000000 softirq=277695/277695 fqs=2 [ 1844.624982][ C0] rcu: (detected by 0, t=10502 jiffies, g=307365, q=721 ncpus=2) [ 1844.632814][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1844.632846][ C1] NMI backtrace for cpu 1 [ 1844.632865][ C1] CPU: 1 UID: 0 PID: 10012 Comm: syz.8.11386 Tainted: G L syzkaller #0 PREEMPT(full) [ 1844.632901][ C1] Tainted: [L]=SOFTLOCKUP [ 1844.632910][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1844.632923][ C1] RIP: 0010:__hrtimer_run_queues+0x26c/0xa10 [ 1844.632954][ C1] Code: 84 24 88 00 00 00 42 80 3c 28 00 74 08 4c 89 ff e8 c9 e8 80 00 49 89 2f 48 8b 14 24 49 89 d7 49 c1 ef 03 43 0f b6 04 2f 84 c0 <0f> 85 75 03 00 00 ff 02 43 0f b6 04 2f 84 c0 0f 85 88 03 00 00 48 [ 1844.632972][ C1] RSP: 0018:ffffc90000a08dd8 EFLAGS: 00000046 [ 1844.632993][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000010000 [ 1844.633008][ C1] RDX: ffff8880b8728310 RSI: 0000000000000004 RDI: 00000000ffffffff [ 1844.633023][ C1] RBP: ffff88807eefa300 R08: ffffffff9a9af23b R09: 1ffffffff3535e47 [ 1844.633040][ C1] R10: dffffc0000000000 R11: fffffbfff3535e48 R12: ffff8880b87281c0 [ 1844.633057][ C1] R13: dffffc0000000000 R14: ffff8880b8728360 R15: 1ffff110170e5062 [ 1844.633077][ C1] FS: 00007fc3b2db86c0(0000) GS:ffff88812505a000(0000) knlGS:0000000000000000 [ 1844.633097][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1844.633113][ C1] CR2: 00007fc3b2db7ff8 CR3: 00000000508c5000 CR4: 0000000000350ef0 [ 1844.633131][ C1] Call Trace: [ 1844.633140][ C1] [ 1844.633165][ C1] hrtimer_interrupt+0x448/0x910 [ 1844.633212][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1844.633238][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1844.633268][ C1] [ 1844.633276][ C1] [ 1844.633285][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1844.633310][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1844.633338][ C1] Code: f7 e8 cd cb d1 f5 f7 c3 00 02 00 00 74 05 e8 90 b0 fd f5 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 d4 e1 c2 f5 65 8b 05 ad 62 9b 07 85 c0 74 18 5b 41 5e e9 7c 43 [ 1844.633355][ C1] RSP: 0018:ffffc90004a67aa8 EFLAGS: 00000206 [ 1844.633373][ C1] RAX: 0000000000000002 RBX: 0000000000000246 RCX: 0000000080000001 [ 1844.633388][ C1] RDX: 0000000000000000 RSI: ffffffff8e22949e RDI: 0000000000000001 [ 1844.633403][ C1] RBP: ffffc90004a67bd0 R08: ffffffff90576cf7 R09: 1ffffffff20aed9e [ 1844.633420][ C1] R10: dffffc0000000000 R11: fffffbfff20aed9f R12: dffffc0000000000 [ 1844.633437][ C1] R13: 0000000000000005 R14: ffffffff9a7bf9d8 R15: 1ffff9200094cf64 [ 1844.633469][ C1] __do_adjtimex+0xb2c/0xe40 [ 1844.633505][ C1] ? do_adjtimex+0xd1/0x370 [ 1844.633539][ C1] ? __pfx___do_adjtimex+0x10/0x10 [ 1844.633571][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 1844.633610][ C1] do_adjtimex+0xd1/0x370 [ 1844.633642][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1844.633670][ C1] ? __pfx_do_adjtimex+0x10/0x10 [ 1844.633700][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1844.633746][ C1] __x64_sys_clock_adjtime+0x252/0x340 [ 1844.633769][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1844.633797][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1844.633825][ C1] ? __pfx___x64_sys_clock_adjtime+0x10/0x10 [ 1844.633868][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1844.633900][ C1] ? __pfx_kcov_ioctl+0x10/0x10 [ 1844.633933][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1844.633957][ C1] do_syscall_64+0x174/0x580 [ 1844.633993][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1844.634016][ C1] RIP: 0033:0x7fc3b1f9de59 [ 1844.634036][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1844.634054][ C1] RSP: 002b:00007fc3b2db8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 1844.634076][ C1] RAX: ffffffffffffffda RBX: 00007fc3b2226090 RCX: 00007fc3b1f9de59 [ 1844.634093][ C1] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000000 [ 1844.634107][ C1] RBP: 00007fc3b2033e6f R08: 0000000000000000 R09: 0000000000000000 [ 1844.634121][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1844.634135][ C1] R13: 00007fc3b2226128 R14: 00007fc3b2226090 R15: 00007fffdd024f88 [ 1844.634166][ C1] [ 1844.634837][ C0] rcu: rcu_preempt kthread starved for 10498 jiffies! g307365 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1845.045715][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1845.055679][ C0] rcu: RCU grace-period kthread stack dump: [ 1845.061557][ C0] task:rcu_preempt state:R running task stack:26848 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1845.075149][ C0] Call Trace: [ 1845.078417][ C0] [ 1845.081349][ C0] __schedule+0x17d9/0x56c0 [ 1845.086039][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1845.091671][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1845.096624][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1845.102273][ C0] ? __pfx___schedule+0x10/0x10 [ 1845.107134][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1845.112945][ C0] ? schedule+0x90/0x2b0 [ 1845.117226][ C0] schedule+0x164/0x2b0 [ 1845.121396][ C0] schedule_timeout+0x152/0x2c0 [ 1845.126247][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1845.131616][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1845.136905][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1845.142542][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1845.148352][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1845.153989][ C0] ? prepare_to_swait_event+0x322/0x350 [ 1845.159539][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1845.164757][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1845.170918][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1845.176208][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1845.181416][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1845.187235][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 1845.191839][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1845.197045][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1845.201992][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1845.207624][ C0] ? __kthread_parkme+0x196/0x1f0 [ 1845.212658][ C0] kthread+0x388/0x470 [ 1845.216738][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1845.221936][ C0] ? __pfx_kthread+0x10/0x10 [ 1845.226546][ C0] ret_from_fork+0x514/0xb70 [ 1845.231148][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1845.236265][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1845.241896][ C0] ? __switch_to+0xc89/0x1420 [ 1845.246596][ C0] ? __pfx_kthread+0x10/0x10 [ 1845.251196][ C0] ret_from_fork_asm+0x1a/0x30 [ 1845.255977][ C0] [ 1845.259075][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1845.265445][ C0] CPU: 0 UID: 0 PID: 18979 Comm: kworker/u8:18 Tainted: G L syzkaller #0 PREEMPT(full) [ 1845.276646][ C0] Tainted: [L]=SOFTLOCKUP [ 1845.280960][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1845.291005][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1845.297517][ C0] RIP: 0010:smp_call_function_many_cond+0x10b5/0x14b0 [ 1845.304288][ C0] Code: 1e 89 de 83 e6 01 31 ff e8 d8 1e 0c 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 07 e8 84 1a 0c 00 eb 37 f3 90 41 0f b6 04 1c <84> c0 75 10 41 f7 06 01 00 00 00 74 1e e8 69 1a 0c 00 eb e5 44 89 [ 1845.323886][ C0] RSP: 0018:ffffc900034e7720 EFLAGS: 00000293 [ 1845.329949][ C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88807fcebe00 [ 1845.337912][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1845.345874][ C0] RBP: ffffc900034e7860 R08: ffffffff90576cf7 R09: 1ffffffff20aed9e [ 1845.353841][ C0] R10: dffffc0000000000 R11: fffffbfff20aed9f R12: 1ffff110170e81d1 [ 1845.361806][ C0] R13: ffff8880b863c448 R14: ffff8880b8740e88 R15: 0000000000000001 [ 1845.369771][ C0] FS: 0000000000000000(0000) GS:ffff888124f5a000(0000) knlGS:0000000000000000 [ 1845.378695][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1845.385268][ C0] CR2: 00007f3a9f3ce368 CR3: 000000000e946000 CR4: 0000000000350ef0 [ 1845.393232][ C0] Call Trace: [ 1845.396504][ C0] [ 1845.399432][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1845.404471][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1845.410805][ C0] ? kmem_cache_alloc_bulk_noprof+0xb7/0x7b0 [ 1845.416789][ C0] ? __pfx___text_poke+0x10/0x10 [ 1845.421730][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1845.426758][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 1845.431879][ C0] smp_text_poke_batch_finish+0x5fd/0x1110 [ 1845.437684][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1845.443675][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1845.448714][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1845.454965][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1845.460599][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 1845.466846][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1845.472476][ C0] ? __jump_label_update+0x347/0x370 [ 1845.477773][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1845.483755][ C0] static_key_enable_cpuslocked+0x128/0x240 [ 1845.489654][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1845.495370][ C0] static_key_enable+0x1a/0x20 [ 1845.500145][ C0] toggle_allocation_gate+0xab/0x290 [ 1845.505444][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1845.511356][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1845.517038][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1845.522674][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1845.528311][ C0] ? trace_workqueue_execute_start+0x7c/0x1d0 [ 1845.534388][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1845.540111][ C0] process_scheduled_works+0xa8e/0x14e0 [ 1845.545690][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1845.551687][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1845.557320][ C0] ? assign_work+0x3cf/0x5d0 [ 1845.561915][ C0] worker_thread+0xa47/0xfb0 [ 1845.566550][ C0] kthread+0x388/0x470 [ 1845.570627][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1845.575736][ C0] ? __pfx_kthread+0x10/0x10 [ 1845.580335][ C0] ret_from_fork+0x514/0xb70 [ 1845.584936][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1845.590053][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1845.595685][ C0] ? __switch_to+0xc89/0x1420 [ 1845.600370][ C0] ? __pfx_kthread+0x10/0x10 [ 1845.604968][ C0] ret_from_fork_asm+0x1a/0x30 [ 1845.609746][ C0]